Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/BIV00WGdCsdMPZily9CzqPCb__g.roa
File: BIV00WGdCsdMPZily9CzqPCb__g.roa (raw, json)
Hash identifier: 2Po5O5AX+uWN/KKrFaZyBDhCcTGjg4dn50nifm52n4M=
Subject key identifier: 04:85:74:D1:61:9D:0A:C7:4C:3D:98:A5:CB:D0:B3:A8:F0:9B:FF:F8
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 01977231387A46BF2ABD49407CBC5FEE1F69
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/BIV00WGdCsdMPZily9CzqPCb__g.roa
Signing time: Sun 15 Jun 2025 06:05:17 +0000
ROA not before: Sun 15 Jun 2025 06:05:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20657
IP address blocks: 88.80.131.0/24 maxlen: 24
88.80.132.0/24 maxlen: 24
88.80.133.0/24 maxlen: 24
88.80.152.0/21 maxlen: 21
193.108.24.0/24 maxlen: 24
194.79.12.0/23 maxlen: 24
194.79.12.0/24 maxlen: 24
194.79.13.0/24 maxlen: 24
195.68.214.0/23 maxlen: 24
195.68.214.0/24 maxlen: 24
195.68.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:72:31:38:7a:46:bf:2a:bd:49:40:7c:bc:5f:ee:1f:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Jun 15 06:05:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=048574d1619d0ac74c3d98a5cbd0b3a8f09bfff8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:bc:f1:8a:6d:0a:fb:c1:5b:d8:e8:27:4d:66:
e9:7e:ca:f4:fd:29:61:dc:cb:32:79:6a:9b:b5:a9:
3d:b2:db:23:0e:00:60:35:e5:8f:cc:1c:5b:08:c7:
d4:0b:ba:33:c1:e2:3b:38:51:ab:4d:ad:37:7b:e0:
03:f7:cd:68:f1:72:b9:39:0f:e8:55:85:a8:7e:0f:
07:99:2f:61:04:0f:66:a0:5e:c6:a5:ac:31:36:96:
5f:a2:42:2b:c5:a4:52:04:08:a2:eb:8a:38:94:aa:
57:05:d6:5a:f4:09:c9:46:3d:a5:9c:59:4c:a4:32:
f6:5b:66:d1:16:a3:35:af:49:33:c3:af:63:50:ef:
be:0b:70:bf:b2:23:5b:6d:62:6b:11:53:a6:02:94:
e1:cf:ce:82:aa:5a:8c:7a:d8:83:25:73:75:8c:fc:
61:68:5e:05:77:c8:de:bb:a3:95:a0:fb:f9:09:79:
ef:a8:2d:2c:86:3d:de:3e:95:42:2b:87:f3:87:e8:
60:26:02:ce:40:43:aa:08:b8:a6:ac:01:5d:4b:ab:
62:44:1c:09:ef:04:4e:b1:0f:ff:ce:62:42:35:81:
58:c5:47:ac:ac:42:b4:c5:a9:b0:4f:05:21:69:96:
58:d2:94:d3:ba:9c:a1:95:f0:1e:ed:a2:0b:73:3c:
74:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:85:74:D1:61:9D:0A:C7:4C:3D:98:A5:CB:D0:B3:A8:F0:9B:FF:F8
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/BIV00WGdCsdMPZily9CzqPCb__g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.80.131.0-88.80.133.255
88.80.152.0/21
193.108.24.0/24
194.79.12.0/23
195.68.214.0/23
Signature Algorithm: sha256WithRSAEncryption
0b:a9:3a:81:59:af:c1:a3:1b:eb:99:ed:53:29:d5:75:d7:9c:
b3:94:a8:f6:c0:f5:35:4a:6e:99:73:77:0f:db:86:03:90:b3:
dc:dc:27:b4:6c:60:ca:7b:03:6c:f0:4e:58:bc:8b:bb:82:c4:
c6:bb:b7:e9:f0:3f:45:d0:f6:eb:ba:fd:82:89:2d:b2:89:04:
46:6e:5c:cc:5b:ca:84:52:f4:a4:9f:61:de:47:49:21:72:74:
82:3f:e9:96:b2:f5:0a:d0:4a:e3:c8:0b:98:f3:a1:ee:9f:ec:
70:03:29:0e:c0:37:4c:9a:af:67:f1:5a:3e:73:cb:cf:80:21:
d1:9e:75:d5:bc:7f:be:18:56:99:f2:5a:b1:f4:df:24:00:e2:
ea:46:12:b0:69:73:63:aa:58:20:24:bb:02:9c:25:1d:77:57:
19:24:f2:2a:a4:08:44:4c:e7:65:6c:f8:0d:9b:5e:19:81:56:
ea:ea:a4:63:70:57:6b:be:83:2d:e6:9b:f3:24:3f:bf:ae:5f:
18:c9:fe:a0:0e:0c:6c:6f:2e:8a:e9:30:32:b8:8f:67:a3:67:
a0:8a:6a:b2:01:7d:7b:94:a0:19:e1:27:28:f2:7c:35:60:e7:
9e:6a:b6:e6:1a:df:57:33:52:cf:b4:0c:23:a0:88:16:e1:ba:
74:fe:21:da
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAZdyMTh6Rr8qvUlAfLxf7h9pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxMjRmYmExZTQwMWMwM2U1YmExY2Q3N2FlOWVlMzljZmQ2
MzFiZmIwHhcNMjUwNjE1MDYwNTE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNDg1NzRkMTYxOWQwYWM3NGMzZDk4YTVjYmQwYjNhOGYwOWJmZmY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Lzxim0K+8Fb2OgnTWbpfsr0/Slh
3MsyeWqbtak9stsjDgBgNeWPzBxbCMfUC7ozweI7OFGrTa03e+AD981o8XK5OQ/o
VYWofg8HmS9hBA9moF7GpawxNpZfokIrxaRSBAii64o4lKpXBdZa9AnJRj2lnFlM
pDL2W2bRFqM1r0kzw69jUO++C3C/siNbbWJrEVOmApThz86CqlqMetiDJXN1jPxh
aF4Fd8jeu6OVoPv5CXnvqC0shj3ePpVCK4fzh+hgJgLOQEOqCLimrAFdS6tiRBwJ
7wROsQ//zmJCNYFYxUesrEK0xamwTwUhaZZY0pTTupyhlfAe7aILczx00QIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFASFdNFhnQrHTD2YpcvQs6jwm//4MB8GA1UdIwQY
MBaAFFEk+6HkAcA+W6HNd66e45z9Yxv7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEt
YWI4ZjFmMzM4N2VlLzEvQklWMDBXR2RDc2RNUFppbHk5Q3pxUENiX19nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEtYWI4ZjFmMzM4N2Vl
LzEvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmMAwDBABYUIMD
BAFYUIQDBANYUJgDBADBbBgDBAHCTwwDBAHDRNYwDQYJKoZIhvcNAQELBQADggEB
AAupOoFZr8GjG+uZ7VMp1XXXnLOUqPbA9TVKbplzdw/bhgOQs9zcJ7RsYMp7A2zw
Tli8i7uCxMa7t+nwP0XQ9uu6/YKJLbKJBEZuXMxbyoRS9KSfYd5HSSFydII/6Zay
9QrQSuPIC5jzoe6f7HADKQ7AN0yar2fxWj5zy8+AIdGeddW8f74YVpnyWrH03yQA
4upGErBpc2OqWCAkuwKcJR13Vxkk8iqkCERM52Vs+A2bXhmBVurqpGNwV2u+gy3m
m/MkP7+uXxjJ/qAODGxvLorpMDK4j2ejZ6CKarIBfXuUoBnhJyjyfDVg555qtuYa
31czUs+0DCOgiBbhunT+Ido=
-----END CERTIFICATE-----
Generated at Sun Jun 15 20:52:46 2025 by rpki-client