Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/bsbpbOfEUspT2FSFU7Dpjg5QFsw.roa
File: bsbpbOfEUspT2FSFU7Dpjg5QFsw.roa (raw, json)
Hash identifier: 1S0gGuFvbVkAU0skMefR3m5Pq9v5mIgplTKpElL9/XI=
Subject key identifier: 6E:C6:E9:6C:E7:C4:52:CA:53:D8:54:85:53:B0:E9:8E:0E:50:16:CC
Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Certificate serial: 01987E64733E6A322F0111393BDD072F6663
Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/bsbpbOfEUspT2FSFU7Dpjg5QFsw.roa
Signing time: Wed 06 Aug 2025 07:59:29 +0000
ROA not before: Wed 06 Aug 2025 07:59:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213520
IP address blocks: 2a0d:d940:9008::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:64:73:3e:6a:32:2f:01:11:39:3b:dd:07:2f:66:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Validity
Not Before: Aug 6 07:59:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6ec6e96ce7c452ca53d8548553b0e98e0e5016cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f7:13:60:92:46:b1:ce:cd:c1:8c:df:f3:ec:
eb:38:75:c9:f9:46:ef:90:88:c7:18:9d:d5:7c:36:
65:d3:cb:85:1e:35:db:e9:26:65:6b:a8:49:2e:5a:
8c:be:cd:8e:c5:cb:76:3b:60:de:9e:91:1f:9f:5a:
53:0c:9e:5d:0f:d7:56:ba:0c:b4:b1:2e:0f:86:03:
35:50:ac:82:39:bc:06:a1:e5:90:80:f0:5a:cf:a6:
93:c4:dc:66:0f:f5:3f:c6:d1:b8:62:81:52:a5:b5:
63:82:ea:06:0e:15:fe:3c:af:ef:20:eb:54:7b:33:
c6:42:bc:eb:65:c7:d0:b8:d4:d3:cf:16:81:f8:80:
5e:b7:64:fc:d7:85:47:81:6e:19:f8:00:42:61:f7:
6e:78:bf:fc:69:64:40:d7:98:7d:45:28:8e:5e:8a:
99:22:da:96:52:3e:17:72:24:00:2a:7a:5f:68:ac:
a3:99:fc:64:a7:5b:9b:a3:b2:58:d9:5e:2b:6c:4c:
b0:df:78:56:73:28:98:97:56:1a:72:b4:0b:ef:bd:
3b:e6:5d:a9:2c:ee:59:02:0c:e8:10:db:43:87:7f:
33:6c:29:66:e7:5e:a4:41:f9:4e:0f:28:22:8e:e2:
19:07:e5:c9:86:e1:ec:7b:37:2c:2a:0f:f6:65:3b:
83:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:C6:E9:6C:E7:C4:52:CA:53:D8:54:85:53:B0:E9:8E:0E:50:16:CC
X509v3 Authority Key Identifier:
keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/bsbpbOfEUspT2FSFU7Dpjg5QFsw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:d940:9008::/48
Signature Algorithm: sha256WithRSAEncryption
0f:b2:46:fe:42:86:b9:fe:c9:b7:d5:6e:5e:e2:da:39:6e:8d:
bd:76:b9:5c:7e:3c:aa:fe:5a:59:d2:ea:11:20:3e:1d:2b:33:
2e:71:01:29:1d:d9:fd:fa:fb:25:ed:56:68:72:32:b0:30:84:
78:af:05:84:99:1c:d2:76:a4:09:cc:e1:f3:07:4b:1f:b9:45:
d7:dc:07:a5:aa:2b:38:68:b4:bf:b6:e8:9e:1a:08:ff:10:c7:
a1:7e:be:34:32:f4:4e:fa:bf:0c:61:49:af:92:aa:4c:2e:e8:
d6:55:fe:0d:88:28:3d:d3:9e:14:14:93:a9:d4:d2:a9:fd:9e:
1f:4e:14:21:b7:54:51:69:9c:a3:3a:95:ce:ac:91:1e:89:60:
c5:5a:d1:4d:e8:e3:8b:f8:ec:81:07:bc:04:d0:f3:73:ab:ac:
8e:33:b3:2a:e1:eb:d8:a9:34:bd:d8:36:26:00:05:9d:1d:a1:
07:b6:d2:25:a3:cf:e7:3c:2d:b5:09:7a:2a:1d:ea:64:96:27:
16:84:45:b0:4e:33:98:d6:79:af:91:12:c2:04:c4:36:cf:24:
86:9b:7c:71:f6:ae:53:ad:7c:09:37:fe:4d:3f:27:75:4b:18:
1f:49:73:02:30:18:7f:7c:f6:e9:a2:eb:69:c5:3f:28:5d:32:
2b:ea:67:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:51:36 2025 by rpki-client