Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/ALxVvlwIbDkn5hMQkn7j3s3ylhw.roa
File: ALxVvlwIbDkn5hMQkn7j3s3ylhw.roa (raw, json)
Hash identifier: EpFYdB2RmHJ/ISRKSvtUqwUTw0P9q9OVTBaIlJK4KIw=
Subject key identifier: 00:BC:55:BE:5C:08:6C:39:27:E6:13:10:92:7E:E3:DE:CD:F2:96:1C
Certificate issuer: /CN=0c7887582d83d3f087682af8780a324a353ce782
Certificate serial: 019A0166B2E139C64D57DF97EAEAD6BD6108
Authority key identifier: 0C:78:87:58:2D:83:D3:F0:87:68:2A:F8:78:0A:32:4A:35:3C:E7:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DHiHWC2D0_CHaCr4eAoySjU854I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/ALxVvlwIbDkn5hMQkn7j3s3ylhw.roa
Signing time: Mon 20 Oct 2025 11:34:58 +0000
ROA not before: Mon 20 Oct 2025 11:34:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205886
IP address blocks: 213.179.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/DHiHWC2D0_CHaCr4eAoySjU854I.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/DHiHWC2D0_CHaCr4eAoySjU854I.mft
rsync://rpki.ripe.net/repository/DEFAULT/DHiHWC2D0_CHaCr4eAoySjU854I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:66:b2:e1:39:c6:4d:57:df:97:ea:ea:d6:bd:61:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c7887582d83d3f087682af8780a324a353ce782
Validity
Not Before: Oct 20 11:34:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=00bc55be5c086c3927e61310927ee3decdf2961c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b5:ef:f8:a7:bc:84:76:c8:12:4e:a4:dc:30:
3a:ff:d9:83:70:f2:03:82:03:1f:41:01:43:61:e0:
5e:dd:2a:1d:12:23:dc:ef:43:a2:36:95:a9:17:37:
30:db:fc:df:06:70:6a:17:b5:8a:4c:a7:53:0f:7a:
9e:38:a8:df:07:de:94:57:59:ab:6a:db:7d:ff:85:
2b:49:31:d3:1e:b3:ba:69:dd:63:b3:1b:1f:34:c0:
48:d0:23:a2:aa:83:d2:fb:f5:78:94:11:01:39:01:
61:23:6f:27:b9:53:c6:39:ed:da:1d:de:8a:b9:40:
cc:b1:09:b7:29:e3:9f:10:63:dc:d7:83:84:c6:c1:
b8:94:7f:ce:77:5a:1a:46:cf:8b:de:e5:ea:73:0a:
de:3f:7a:2a:8c:48:52:bf:0a:e4:1c:8e:d7:54:5c:
ca:e1:cf:ea:08:c0:40:f8:f0:31:b5:c7:eb:b6:2d:
fd:29:c8:56:07:5b:0a:68:a3:7f:e5:7a:c1:70:72:
f3:6b:a0:d1:50:61:de:72:09:10:5f:d4:c7:ee:ee:
cf:39:5f:39:ac:32:c2:21:e5:ee:07:55:8f:b5:48:
bf:e8:5a:84:c9:7b:06:0d:10:8f:59:e7:fd:f3:27:
3d:dd:86:14:eb:34:bc:4e:04:f9:44:92:f2:1f:9b:
31:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:BC:55:BE:5C:08:6C:39:27:E6:13:10:92:7E:E3:DE:CD:F2:96:1C
X509v3 Authority Key Identifier:
keyid:0C:78:87:58:2D:83:D3:F0:87:68:2A:F8:78:0A:32:4A:35:3C:E7:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DHiHWC2D0_CHaCr4eAoySjU854I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/ALxVvlwIbDkn5hMQkn7j3s3ylhw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/DHiHWC2D0_CHaCr4eAoySjU854I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.179.70.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:79:f0:80:6f:24:1b:67:99:3a:9b:03:1b:fa:57:d7:d0:e3:
54:b1:a0:8c:54:d6:5d:88:4e:aa:de:81:ff:7d:22:82:e7:49:
e0:b3:ed:ef:b4:c1:94:86:e2:97:52:d7:f3:09:ae:57:a7:a4:
e6:64:9e:47:e1:4d:01:fe:cb:83:74:3e:d7:1d:15:09:3f:10:
f5:ae:ea:62:c2:1d:15:5b:14:a7:9e:39:3e:e2:df:7b:13:42:
83:5c:d0:14:59:c0:a0:41:9b:46:67:f9:9c:9d:45:5f:ac:4b:
97:ff:c5:7c:34:b0:6e:80:96:29:e1:6f:5f:e0:57:c8:60:be:
3d:e2:f1:7e:97:35:a1:d3:b1:b5:93:da:0d:ea:5f:94:14:12:
c1:63:5e:21:93:d6:77:a4:73:b5:82:bc:90:58:15:58:c8:b7:
50:af:c2:3b:27:ec:e3:f1:e8:fc:55:ba:e0:e0:70:d8:89:7b:
dd:f3:64:f4:f4:4c:15:b9:6d:69:45:1b:07:39:3f:94:c5:e5:
4d:5f:a7:34:7d:d0:ca:0a:c0:a2:83:64:3c:46:e3:73:6d:fd:
a8:e1:a5:0b:2c:5d:04:7c:45:c2:8c:f9:7a:e8:59:b2:6e:17:
8b:10:d7:7b:b8:6f:ec:66:c1:c2:70:fa:09:98:0e:2a:cc:71:
f0:50:ec:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:37:06 2025 by rpki-client