Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Bvw25vgFeJtv3VUZFWzSIMtnuH4.roa
File: Bvw25vgFeJtv3VUZFWzSIMtnuH4.roa (raw, json)
Hash identifier: sGL5SDM2yPqRDwbA6stxanzAW56YOm8LGkcgRe8v570=
Subject key identifier: 06:FC:36:E6:F8:05:78:9B:6F:DD:55:19:15:6C:D2:20:CB:67:B8:7E
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01987AC07462BA609CA9B1B5CF5AC383E799
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Bvw25vgFeJtv3VUZFWzSIMtnuH4.roa
Signing time: Tue 05 Aug 2025 15:01:29 +0000
ROA not before: Tue 05 Aug 2025 15:01:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209978
IP address blocks: 89.106.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 13:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:c0:74:62:ba:60:9c:a9:b1:b5:cf:5a:c3:83:e7:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Aug 5 15:01:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=06fc36e6f805789b6fdd5519156cd220cb67b87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:75:48:bf:63:7f:3f:0e:2a:3b:12:c9:99:31:
af:eb:2e:fa:87:da:c6:91:7a:87:dc:74:4e:84:87:
bb:b5:bb:00:25:e3:49:05:92:42:69:1f:62:cc:c9:
bd:28:f6:95:fc:83:e2:ef:35:b7:65:7f:a7:4d:3b:
f6:4d:0d:7d:be:45:5e:60:a7:92:d0:90:0a:4c:8c:
d4:47:98:d8:92:e6:31:40:4e:a5:3c:45:13:21:e1:
b2:4e:26:3f:7c:ec:a7:c0:66:9f:ab:32:4b:3a:7e:
15:74:43:15:6f:cb:ea:98:c5:97:f4:36:4c:4c:cf:
51:5f:f5:ae:e0:b6:51:bb:b8:8e:36:36:e3:bc:19:
2d:9f:9d:33:e2:55:64:24:cb:a4:ed:fb:ef:e8:6b:
d2:7c:6a:d7:b1:86:38:5c:58:17:40:a3:08:9a:43:
e2:13:75:1b:7e:8a:40:6c:59:41:8c:59:48:a7:79:
4b:e4:fd:b6:46:31:25:b2:a7:eb:6a:73:86:11:3f:
f8:88:dd:31:c7:dc:14:17:51:34:40:f3:c6:f5:62:
8e:30:40:93:cc:9c:ea:96:86:71:13:0f:16:1a:83:
d5:01:f5:15:24:dc:90:a3:27:18:a9:e4:50:02:99:
f9:6e:d4:3b:00:f2:ab:a4:c6:71:b0:a3:ac:88:1d:
7b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:FC:36:E6:F8:05:78:9B:6F:DD:55:19:15:6C:D2:20:CB:67:B8:7E
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Bvw25vgFeJtv3VUZFWzSIMtnuH4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.106.65.0/24
Signature Algorithm: sha256WithRSAEncryption
74:f4:d9:97:ad:d9:15:b7:53:76:7b:92:34:fe:a8:91:89:57:
14:a0:dd:70:1d:93:a4:5a:a0:86:65:27:ec:6b:2c:a5:b9:7d:
60:8a:43:f7:ec:61:e2:ad:8d:d1:bf:4f:61:96:eb:96:c1:22:
33:18:9b:9c:b0:50:3b:57:5c:b9:25:5d:6e:d4:60:18:f5:a0:
bc:9e:85:7e:73:d2:7a:e4:06:4d:1d:cf:17:77:3e:8e:e2:16:
9a:e8:05:b2:54:d3:75:cd:4f:56:45:e5:06:ec:41:7c:40:96:
db:26:c7:cb:f4:ea:48:e1:28:df:92:ad:f9:da:46:dd:c2:c7:
82:7d:80:3d:21:f7:b5:2c:11:df:21:e8:74:11:d3:c8:0a:71:
ab:16:a6:7f:79:d0:ff:b2:55:8a:30:4d:22:e2:85:88:91:1d:
70:96:4a:ae:53:89:d6:6a:da:22:bb:5e:c9:8d:b2:17:f0:cb:
7d:f0:5d:86:3f:2e:aa:b4:72:1f:37:b4:c0:01:20:81:fb:e9:
7c:0f:f8:32:db:7c:c3:b6:46:4b:62:6c:d7:86:39:af:68:cb:
25:ac:02:5b:0c:82:d9:fe:a6:6e:0a:b9:77:c1:3f:f1:b7:e1:
37:c5:fc:09:8f:36:ed:c7:ba:99:21:09:c9:b4:1b:3f:35:39:
d9:8e:57:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 19:51:22 2025 by rpki-client