Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/BBGiZTQyEWy5VlHVSW7xZqNmC2U.roa
File: BBGiZTQyEWy5VlHVSW7xZqNmC2U.roa (raw, json)
Hash identifier: 4TdRKow0zYqjeKO1hiqjJ4syUVmqTy0T61V1CiG6/5w=
Subject key identifier: 04:11:A2:65:34:32:11:6C:B9:56:51:D5:49:6E:F1:66:A3:66:0B:65
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019A4ADBB213C54FA374AC5AC8804477E17C
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/BBGiZTQyEWy5VlHVSW7xZqNmC2U.roa
Signing time: Mon 03 Nov 2025 17:55:03 +0000
ROA not before: Mon 03 Nov 2025 17:55:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57043
IP address blocks: 45.9.118.0/24 maxlen: 24
45.9.120.0/24 maxlen: 24
45.9.122.0/24 maxlen: 24
45.86.244.0/24 maxlen: 24
45.95.97.0/24 maxlen: 24
45.130.128.0/24 maxlen: 24
45.133.208.0/24 maxlen: 24
45.134.184.0/24 maxlen: 24
45.141.176.0/24 maxlen: 24
45.146.91.0/24 maxlen: 24
45.146.180.0/24 maxlen: 24
45.151.104.0/24 maxlen: 24
45.154.58.0/24 maxlen: 24
45.154.228.0/24 maxlen: 24
85.209.130.0/24 maxlen: 24
185.164.59.0/24 maxlen: 24
192.156.217.0/24 maxlen: 24
193.8.1.0/24 maxlen: 24
193.23.245.0/24 maxlen: 24
193.39.245.0/24 maxlen: 24
193.254.234.0/24 maxlen: 24
193.254.235.0/24 maxlen: 24
194.62.30.0/24 maxlen: 24
194.62.66.0/24 maxlen: 24
195.66.26.0/24 maxlen: 24
195.158.192.0/24 maxlen: 24
2a0f:e7c4:10::/48 maxlen: 48
2a11:3500::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4a:db:b2:13:c5:4f:a3:74:ac:5a:c8:80:44:77:e1:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Nov 3 17:55:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0411a2653432116cb95651d5496ef166a3660b65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:47:2e:c4:18:82:ff:fd:28:8d:fd:bd:44:79:
18:d5:2a:9c:61:4b:56:54:21:ec:d0:08:82:15:a3:
cf:f4:b8:95:d6:02:3f:8b:3d:fe:41:e2:a6:c8:c6:
a3:d4:9b:02:37:a1:df:ac:44:41:ac:38:f5:6d:1e:
35:9d:aa:cd:92:31:b3:f5:43:dd:c9:2a:04:2c:1b:
3a:9f:99:0c:77:53:94:11:d4:37:e9:6b:16:f7:d9:
cb:ab:bd:ed:97:6d:9f:50:ea:a3:85:4f:1b:54:e5:
14:25:a3:ca:69:5c:3c:62:ad:bd:a5:23:9c:83:e2:
d3:da:b3:35:c0:87:e8:06:e0:c0:22:03:e6:9a:b5:
fc:45:6c:78:87:db:86:46:23:ce:6e:62:68:1d:8d:
cc:67:3d:8b:f2:cb:70:0f:03:22:fa:a4:74:02:78:
34:47:34:91:56:b8:a1:8b:e2:94:3d:16:d1:1a:33:
5f:8d:6b:8b:5c:0d:62:83:07:e6:36:0d:65:67:8a:
94:2d:fc:4b:67:4b:97:c5:fa:c8:70:e0:17:a1:01:
2c:f1:10:4d:68:06:73:89:e5:75:ab:96:89:5a:33:
22:2d:14:1a:a2:34:42:7f:59:89:c7:63:d3:78:e5:
61:d2:08:82:7a:f0:f7:35:44:74:20:f5:6b:53:70:
f4:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:11:A2:65:34:32:11:6C:B9:56:51:D5:49:6E:F1:66:A3:66:0B:65
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/BBGiZTQyEWy5VlHVSW7xZqNmC2U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.118.0/24
45.9.120.0/24
45.9.122.0/24
45.86.244.0/24
45.95.97.0/24
45.130.128.0/24
45.133.208.0/24
45.134.184.0/24
45.141.176.0/24
45.146.91.0/24
45.146.180.0/24
45.151.104.0/24
45.154.58.0/24
45.154.228.0/24
85.209.130.0/24
185.164.59.0/24
192.156.217.0/24
193.8.1.0/24
193.23.245.0/24
193.39.245.0/24
193.254.234.0/23
194.62.30.0/24
194.62.66.0/24
195.66.26.0/24
195.158.192.0/24
IPv6:
2a0f:e7c4:10::/48
2a11:3500::/29
Signature Algorithm: sha256WithRSAEncryption
65:e9:33:cf:59:79:56:88:7f:0f:ed:22:f3:b2:69:c6:09:8e:
5f:fa:24:04:79:b4:ad:92:0a:a2:d0:b1:4c:18:da:65:c0:a1:
68:7e:d0:e6:d4:72:64:96:e3:b1:fb:48:30:fb:48:90:83:8b:
e8:b7:97:c4:f1:94:7e:a5:87:58:75:ae:d9:07:ba:a2:ea:93:
d0:78:a9:9b:4b:59:28:30:d6:08:a3:1b:a3:2b:97:48:5d:e4:
eb:7c:c5:1a:2e:0b:a3:a5:67:8a:7b:e5:29:58:5d:8c:f4:76:
7c:d3:5a:24:0b:51:39:fe:f5:a5:8b:20:49:33:06:eb:42:68:
0d:15:d0:ed:b8:7e:b3:72:50:7b:14:65:9d:0a:12:9c:e9:96:
77:2e:8b:ae:ba:8d:a9:9a:ee:8c:e1:14:64:e0:d5:01:5a:ba:
12:a5:41:6a:eb:12:d5:b0:30:ad:56:f0:51:6b:65:56:7f:08:
bd:fe:12:1d:57:5f:d2:61:d8:8d:47:f3:3f:95:53:e3:90:b1:
a6:0d:45:39:05:ad:f8:d1:d7:6b:8d:30:f2:be:e6:39:06:bc:
d7:9a:6c:46:fa:6c:64:fd:c2:66:cc:a6:24:b3:52:82:4d:c9:
f1:6c:38:36:9d:19:56:94:3e:32:c3:f6:9c:8c:d8:df:03:50:
75:f1:bb:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:03:02 2025 by rpki-client