Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/Bjjj_jTUsHQcDJyT5Vk4EkOxik4.roa
File: Bjjj_jTUsHQcDJyT5Vk4EkOxik4.roa (raw, json)
Hash identifier: F5z5Fx6edw+CsZUaRvj5zDql7u+zMS0wHTGQifgvK+8=
Subject key identifier: 06:38:E3:FE:34:D4:B0:74:1C:0C:9C:93:E5:59:38:12:43:B1:8A:4E
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 019746544843CBFEF57F53B42441A785DEC7
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/Bjjj_jTUsHQcDJyT5Vk4EkOxik4.roa
Signing time: Fri 06 Jun 2025 17:40:17 +0000
ROA not before: Fri 06 Jun 2025 17:40:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 89.33.14.0/24 maxlen: 24
103.212.80.0/24 maxlen: 24
185.121.122.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:54:48:43:cb:fe:f5:7f:53:b4:24:41:a7:85:de:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jun 6 17:40:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0638e3fe34d4b0741c0c9c93e559381243b18a4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5b:5d:67:ee:03:3f:b3:38:21:99:fc:14:26:
96:71:c9:d9:cd:45:84:0c:ea:9b:3e:5b:0c:15:98:
7c:62:7b:1a:89:00:15:cd:63:53:7a:6c:e5:98:19:
8a:97:ae:16:25:8b:8c:a8:50:01:24:e8:d8:4e:4e:
de:5a:e8:99:76:a4:d3:8f:59:0f:ac:17:e7:ba:c3:
5e:0e:45:c1:cd:84:3b:77:e9:a6:2c:8a:ea:84:24:
11:ed:80:4c:78:2e:c3:52:47:a6:0a:35:4b:a4:a9:
b2:cd:6d:c7:92:e1:6c:ae:cc:52:7a:5c:2e:93:cd:
95:d6:fd:4d:29:c5:aa:5c:6a:02:a6:81:f3:4f:08:
a2:f3:42:a1:7e:2c:1f:5b:eb:1f:7b:1f:ee:76:69:
67:18:9d:dd:58:21:fd:69:04:d8:f6:b9:da:ed:47:
94:ca:a7:fe:2b:84:d6:f4:84:f8:02:b8:f9:20:91:
f9:76:5e:a6:54:c5:9b:17:01:85:13:c5:d7:c3:8d:
3f:85:67:eb:53:35:d1:33:8d:47:f4:3c:ea:5b:58:
a1:62:c6:83:49:ae:34:a4:d9:74:a3:9b:1d:3e:5a:
61:c5:15:6d:ee:95:fa:12:d6:ed:4d:ba:aa:4e:32:
8f:eb:e0:9a:5e:da:05:c0:3b:de:8e:62:22:b3:18:
c4:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:38:E3:FE:34:D4:B0:74:1C:0C:9C:93:E5:59:38:12:43:B1:8A:4E
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/Bjjj_jTUsHQcDJyT5Vk4EkOxik4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.14.0/24
103.212.80.0/24
185.121.122.0/23
Signature Algorithm: sha256WithRSAEncryption
3b:fd:b1:e3:06:f3:40:d2:09:eb:e0:cf:79:4c:82:7f:9e:f3:
1a:8a:bd:e9:89:97:9b:fa:d6:98:58:ae:3d:32:5b:e3:45:9a:
94:2d:b8:a6:c9:ba:10:a8:5f:6f:c9:55:66:19:82:f5:19:02:
96:4b:db:31:04:b9:a3:ce:88:35:c2:02:d1:12:0a:08:33:ec:
68:d1:1c:72:1c:42:02:ba:80:6e:36:de:64:d2:1a:bb:d3:8c:
87:14:ea:9b:48:a2:6a:b9:45:6f:5d:5f:06:96:c3:c3:66:a3:
c7:d4:5a:93:f7:48:29:c0:82:f6:16:fd:93:f1:46:f4:1d:3e:
30:be:36:4c:c3:b3:b8:39:eb:47:31:db:ef:b2:3a:9c:c0:81:
b3:68:62:3a:c6:7a:5c:51:a2:17:26:05:59:86:3f:57:4f:43:
3f:7e:5f:19:77:9c:3e:1c:ad:13:4c:f2:0d:e3:4e:88:1d:9a:
75:33:02:aa:40:da:0d:53:70:58:c8:56:65:89:8e:e0:9a:bf:
2f:5b:7d:68:34:a2:a7:13:ed:0a:cb:4b:6c:4b:42:e9:db:52:
af:7a:5d:60:a6:b6:9b:7f:71:c3:14:08:40:35:cb:41:31:18:
af:3e:98:82:63:41:39:6d:36:03:78:ec:ef:2b:e7:b9:a1:b8:
41:ca:c8:07
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZdGVEhDy/71f1O0JEGnhd7HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw
NWIwZTIwHhcNMjUwNjA2MTc0MDE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNjM4ZTNmZTM0ZDRiMDc0MWMwYzljOTNlNTU5MzgxMjQzYjE4YTRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVtdZ+4DP7M4IZn8FCaWccnZzUWE
DOqbPlsMFZh8YnsaiQAVzWNTemzlmBmKl64WJYuMqFABJOjYTk7eWuiZdqTTj1kP
rBfnusNeDkXBzYQ7d+mmLIrqhCQR7YBMeC7DUkemCjVLpKmyzW3HkuFsrsxSelwu
k82V1v1NKcWqXGoCpoHzTwii80KhfiwfW+sfex/udmlnGJ3dWCH9aQTY9rna7UeU
yqf+K4TW9IT4Arj5IJH5dl6mVMWbFwGFE8XXw40/hWfrUzXRM41H9DzqW1ihYsaD
Sa40pNl0o5sdPlphxRVt7pX6EtbtTbqqTjKP6+CaXtoFwDvejmIisxjEBwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFAY44/401LB0HAyck+VZOBJDsYpOMB8GA1UdIwQY
MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt
MmNjZWRiOTY2YTU4LzEvQmpqal9qVFVzSFFjREp5VDVWazRFa094aWs0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4
LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAWSEOAwQA
Z9RQAwQBuXl6MA0GCSqGSIb3DQEBCwUAA4IBAQA7/bHjBvNA0gnr4M95TIJ/nvMa
ir3piZeb+taYWK49MlvjRZqULbimyboQqF9vyVVmGYL1GQKWS9sxBLmjzog1wgLR
EgoIM+xo0RxyHEICuoBuNt5k0hq704yHFOqbSKJquUVvXV8GlsPDZqPH1FqT90gp
wIL2Fv2T8Ub0HT4wvjZMw7O4OetHMdvvsjqcwIGzaGI6xnpcUaIXJgVZhj9XT0M/
fl8Zd5w+HK0TTPIN406IHZp1MwKqQNoNU3BYyFZliY7gmr8vW31oNKKnE+0Ky0ts
S0Lp21Kvel1gprabf3HDFAhANctBMRivPpiCY0E5bTYDeOzvK+e5obhBysgH
-----END CERTIFICATE-----
Generated at Sun Jun 15 09:07:11 2025 by rpki-client