Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/BbpqjCyG0GL6mwZeuaproR1TliM.roa
File: BbpqjCyG0GL6mwZeuaproR1TliM.roa (raw, json)
Hash identifier: WY2HH5/r4C0dsfy12BzTgxlnhO41JKkRThyQVVMPYeA=
Subject key identifier: 05:BA:6A:8C:2C:86:D0:62:FA:9B:06:5E:B9:AA:6B:A1:1D:53:96:23
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 01985A5705936DF22791B635F67585535623
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/BbpqjCyG0GL6mwZeuaproR1TliM.roa
Signing time: Wed 30 Jul 2025 07:58:29 +0000
ROA not before: Wed 30 Jul 2025 07:58:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202943
IP address blocks: 89.33.135.0/24 maxlen: 24
91.242.82.0/23 maxlen: 23
91.242.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft
rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5a:57:05:93:6d:f2:27:91:b6:35:f6:75:85:53:56:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jul 30 07:58:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=05ba6a8c2c86d062fa9b065eb9aa6ba11d539623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:74:92:15:6b:4b:f7:45:21:9b:e2:ef:a9:35:
9d:f5:d5:7c:50:bc:51:eb:c8:aa:4a:ce:02:a9:6c:
af:3a:3b:9a:ba:87:b5:ff:25:8e:05:38:f1:01:da:
1f:85:2d:b8:d7:7c:81:ae:83:a0:47:21:9f:98:fc:
db:24:f5:cc:b7:38:ca:d7:37:77:6e:ad:60:b7:f6:
07:e7:74:ff:05:df:69:2c:55:16:dd:53:5a:90:54:
f5:24:12:9b:f3:c5:2b:af:b7:02:ed:0d:a5:ac:37:
e1:03:59:b4:8b:2e:48:5e:28:01:17:86:4b:57:bc:
5a:7f:9c:26:97:35:f9:0a:77:74:fb:0b:fa:1a:85:
e8:2a:43:7e:3d:68:36:5e:47:78:ec:34:1a:1e:8d:
fa:ee:47:36:7e:5a:09:ae:d3:f0:9c:58:8a:b8:3d:
fd:ee:82:7a:46:50:1d:1d:55:8d:58:1c:2b:d0:58:
cf:b3:c8:d0:a6:c4:b3:24:d1:ff:35:e5:8d:25:7a:
e5:5d:3e:9a:c7:f0:9a:ea:7b:41:17:59:14:eb:73:
12:ee:5e:38:df:9d:93:91:ee:db:03:c8:5f:05:eb:
ea:c2:e2:e9:df:3e:5b:29:92:4f:9e:c7:0f:13:63:
24:bc:78:ff:af:a7:65:83:6e:dd:a2:19:b3:41:39:
1b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:BA:6A:8C:2C:86:D0:62:FA:9B:06:5E:B9:AA:6B:A1:1D:53:96:23
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/BbpqjCyG0GL6mwZeuaproR1TliM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.135.0/24
91.242.82.0/23
Signature Algorithm: sha256WithRSAEncryption
02:cb:7b:95:f3:60:cd:62:0e:96:b1:48:ed:d4:42:6b:f4:e9:
3e:e0:79:de:5a:82:21:8c:b9:e0:25:e2:c2:19:e5:c6:de:24:
02:31:fb:8f:ba:31:d7:bd:28:c7:18:2f:14:da:12:f2:60:6e:
8c:3e:c2:84:27:ac:9c:e5:7b:76:4e:97:8f:24:96:bd:ad:03:
63:8d:1c:b7:cf:c5:3d:a1:11:1b:09:7f:89:db:81:47:b7:1b:
75:69:3d:3f:6f:22:c5:36:c0:a3:5c:92:4f:5c:3a:6b:a9:0c:
94:ce:e9:d3:b7:ee:2c:17:d3:f8:31:33:a7:99:40:fc:23:29:
1d:ce:dd:d0:2e:b4:a5:4e:0c:d8:3a:8a:9a:5d:d7:9e:be:fa:
e7:a3:df:93:cd:2d:ab:b6:17:ab:96:c5:9d:06:e9:4e:33:a5:
be:e2:d4:3e:29:04:52:ab:64:03:ff:10:53:83:b0:43:91:a6:
f8:29:26:cb:3b:01:1f:c3:51:d2:a9:15:4a:2b:ef:96:8c:73:
15:11:47:92:91:26:e4:67:69:e7:0b:d0:10:ee:cc:4f:49:d5:
3e:8c:b9:5d:e8:ee:7d:7e:a3:48:08:f5:98:0f:65:fd:81:38:
94:63:25:77:6d:5c:af:a6:9d:15:df:f9:e2:a3:1e:f1:4a:60:
8d:68:f4:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:04:50 2025 by rpki-client