Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/219c6f-e30f-4a9e-acc0-e0d576d5577a/1/bB6JOun3nxQB8f28blagNTVyzZo.roa
File: bB6JOun3nxQB8f28blagNTVyzZo.roa (raw, json)
Hash identifier: TbHZ/OFAxsSEb5/YS6vtIBW7Rfm/XIYEbAx0xL23EHo=
Subject key identifier: 6C:1E:89:3A:E9:F7:9F:14:01:F1:FD:BC:6E:56:A0:35:35:72:CD:9A
Certificate issuer: /CN=2450ca4aab2a3f8abc6c973aa7c0fa13f2571081
Certificate serial: 0198509A967E8DB4F297B42D056166594794
Authority key identifier: 24:50:CA:4A:AB:2A:3F:8A:BC:6C:97:3A:A7:C0:FA:13:F2:57:10:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFDKSqsqP4q8bJc6p8D6E_JXEIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/219c6f-e30f-4a9e-acc0-e0d576d5577a/1/bB6JOun3nxQB8f28blagNTVyzZo.roa
Signing time: Mon 28 Jul 2025 10:36:04 +0000
ROA not before: Mon 28 Jul 2025 10:36:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216058
IP address blocks: 2.56.204.0/22 maxlen: 24
2.56.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/219c6f-e30f-4a9e-acc0-e0d576d5577a/1/JFDKSqsqP4q8bJc6p8D6E_JXEIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/219c6f-e30f-4a9e-acc0-e0d576d5577a/1/JFDKSqsqP4q8bJc6p8D6E_JXEIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/JFDKSqsqP4q8bJc6p8D6E_JXEIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 13:24:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:50:9a:96:7e:8d:b4:f2:97:b4:2d:05:61:66:59:47:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2450ca4aab2a3f8abc6c973aa7c0fa13f2571081
Validity
Not Before: Jul 28 10:36:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6c1e893ae9f79f1401f1fdbc6e56a0353572cd9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:30:33:81:ef:26:1c:43:fc:ac:8d:50:f9:f6:
70:cd:ae:a4:0c:b4:ed:6b:73:99:06:16:dc:4b:37:
36:b4:19:2c:42:48:8a:39:d6:e5:7e:21:5f:c7:1f:
c6:2b:e3:4d:80:dd:58:3f:8a:03:a7:df:03:22:69:
f6:8a:52:65:05:1f:67:9d:3f:72:e7:71:4b:1b:3e:
5d:14:37:e9:17:27:e9:f3:26:81:b2:93:13:2d:86:
15:fa:01:ef:7d:36:f6:21:cd:70:5b:09:28:3d:c2:
70:b7:80:45:a5:83:eb:33:45:dc:72:a1:2d:a4:03:
1b:1d:d0:2d:df:e0:dc:d9:f0:53:02:be:54:35:72:
f6:91:7d:17:40:ae:fd:5b:fd:24:1b:0f:40:e8:08:
01:7e:6c:4b:46:d4:65:37:12:05:c1:e3:e8:82:62:
f6:d2:2e:8a:2b:49:18:b9:c0:6b:a8:f8:f2:9a:82:
45:1b:e3:0c:9a:0e:9d:56:01:e0:f2:b6:61:e7:a9:
6b:fe:df:6c:c5:fb:35:68:db:e1:43:ee:7c:3b:1e:
f0:cf:42:55:6f:75:fd:58:58:43:25:9c:11:c4:ee:
01:a2:6b:fa:ad:b6:94:e5:50:61:7f:d0:8a:2d:dc:
17:1b:ef:12:d4:75:56:03:69:cf:f0:fb:61:81:1d:
0a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:1E:89:3A:E9:F7:9F:14:01:F1:FD:BC:6E:56:A0:35:35:72:CD:9A
X509v3 Authority Key Identifier:
keyid:24:50:CA:4A:AB:2A:3F:8A:BC:6C:97:3A:A7:C0:FA:13:F2:57:10:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFDKSqsqP4q8bJc6p8D6E_JXEIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/219c6f-e30f-4a9e-acc0-e0d576d5577a/1/bB6JOun3nxQB8f28blagNTVyzZo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/219c6f-e30f-4a9e-acc0-e0d576d5577a/1/JFDKSqsqP4q8bJc6p8D6E_JXEIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.204.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:b4:96:d2:3a:4f:30:87:5f:ff:f5:d1:3f:84:f3:c7:db:c0:
0b:77:6c:5d:bf:64:3b:90:33:64:51:e1:07:d1:8e:5f:0f:6f:
0a:e1:b7:4c:48:05:23:5e:bf:51:5f:a6:dc:34:c7:0d:fa:5c:
9f:83:c7:e5:36:bd:b2:e6:b0:28:9d:1c:d4:bd:d3:05:51:e6:
59:87:49:ec:af:75:34:d9:09:85:b4:e9:0a:0c:c7:71:c4:7e:
91:df:35:7b:dc:68:ee:6a:68:2d:22:cc:a1:f2:33:c9:2e:33:
3b:2d:60:8a:12:7c:28:8e:48:8c:e3:bc:5e:8a:22:e8:f3:0e:
1b:1a:26:45:b0:80:90:f9:1e:89:a5:3a:c5:b1:6a:8b:c3:54:
bb:f0:93:ff:a0:eb:0d:55:5f:da:2f:9e:de:ca:a5:4b:2a:f4:
40:5e:f4:69:9f:1d:b1:d2:02:5c:d8:de:98:c4:20:07:64:f7:
b8:7a:49:df:9a:bc:3e:c9:03:83:e7:1e:c6:6a:1b:4a:b7:57:
0f:b9:72:b4:17:9a:90:56:67:91:19:ce:35:0b:63:8c:c6:62:
db:93:b6:79:57:04:e7:9c:c5:32:9f:96:bb:2c:2a:31:d9:64:
f0:29:a5:19:06:a2:22:20:72:29:ee:7a:6e:e8:4b:22:68:70:
47:78:5d:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 22:57:42 2025 by rpki-client