Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/BswpWuNevt21DMWBqTFMAZIYoNI.roa
File: BswpWuNevt21DMWBqTFMAZIYoNI.roa (raw, json)
Hash identifier: yVbxVWlXQ4XjD0OBP5GpNpwwwvVtJytv1V55DX9Bfh8=
Subject key identifier: 06:CC:29:5A:E3:5E:BE:DD:B5:0C:C5:81:A9:31:4C:01:92:18:A0:D2
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019862285D6F55FAEE5A1C38AAE4F769BF11
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/BswpWuNevt21DMWBqTFMAZIYoNI.roa
Signing time: Thu 31 Jul 2025 20:24:29 +0000
ROA not before: Thu 31 Jul 2025 20:24:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209693
IP address blocks: 64.188.76.0/24 maxlen: 24
64.188.77.0/24 maxlen: 24
64.188.78.0/24 maxlen: 24
64.188.79.0/24 maxlen: 24
64.188.80.0/22 maxlen: 24
87.251.16.0/24 maxlen: 24
87.251.17.0/24 maxlen: 24
87.251.18.0/24 maxlen: 24
87.251.19.0/24 maxlen: 24
193.23.216.0/24 maxlen: 24
193.23.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:62:28:5d:6f:55:fa:ee:5a:1c:38:aa:e4:f7:69:bf:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 31 20:24:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=06cc295ae35ebeddb50cc581a9314c019218a0d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4d:d8:e1:0d:db:7d:da:57:be:c3:18:ce:0e:
04:e9:18:38:05:1b:30:70:18:94:e8:a2:2d:f9:87:
85:1e:e3:38:7e:9f:13:35:45:5e:19:59:29:69:8c:
b7:77:35:d7:7d:ab:23:c9:a8:d7:54:b9:96:75:d3:
0f:17:4e:d8:8b:17:ef:b3:e9:46:a0:94:33:d3:5e:
b3:07:07:4e:db:27:c0:21:db:f2:3d:27:84:e3:24:
d2:53:20:b7:eb:4d:1c:88:4d:31:9a:2a:a6:dc:72:
5d:b9:14:0b:3d:1b:0e:d5:ae:01:b6:5c:a0:34:40:
55:7a:a1:32:74:40:2e:29:a7:92:b6:27:2c:ba:ec:
0b:4e:32:97:32:07:1b:05:a5:99:9e:d1:7c:f7:d1:
7a:81:e7:1e:c8:5b:ce:b7:84:b3:7f:5b:5d:80:57:
99:07:43:fd:37:a8:c4:3a:63:4c:a0:36:d3:b8:96:
f1:a0:f4:79:ef:39:27:c8:12:28:7a:85:aa:59:71:
1a:a3:e5:aa:50:b2:d1:e6:be:a2:59:88:93:d0:80:
49:e6:dd:4b:db:6e:88:d2:c8:96:67:89:b4:a2:3b:
48:41:b0:7c:89:01:e1:8f:cb:5b:11:81:41:be:8d:
67:b4:06:3d:26:52:84:1f:70:72:9a:e4:ac:1e:9e:
9f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:CC:29:5A:E3:5E:BE:DD:B5:0C:C5:81:A9:31:4C:01:92:18:A0:D2
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/BswpWuNevt21DMWBqTFMAZIYoNI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.188.76.0-64.188.83.255
87.251.16.0/22
193.23.216.0/24
193.23.221.0/24
Signature Algorithm: sha256WithRSAEncryption
97:21:b2:a4:04:6a:54:29:00:7b:5e:fe:ea:fa:7c:36:93:7b:
70:c6:90:c9:6a:a7:80:24:4b:2e:8e:dc:30:5e:be:b8:18:db:
84:10:10:2a:40:b4:e2:70:64:b5:f6:a5:c1:72:79:c2:6c:90:
95:67:cd:0c:d8:c0:a8:45:87:57:ad:73:12:bc:3b:b7:f9:e1:
5c:d9:19:e4:c0:ed:7d:25:2c:58:07:a1:45:54:82:95:dc:9d:
69:96:a3:46:49:b2:4c:1a:3a:fc:56:61:67:39:a1:b9:a3:92:
94:7c:a3:14:f8:92:e9:6d:11:d9:da:0a:e3:ec:98:d5:8d:d3:
30:e7:a7:4e:30:a8:e2:35:b6:fc:55:ab:ff:8a:29:44:79:f4:
08:f7:d4:f5:f7:da:bf:14:10:61:c0:d6:79:b6:e6:99:11:7a:
a6:c8:41:4f:01:07:0e:dd:04:04:70:b4:f2:ec:52:44:f0:30:
5b:b8:76:2f:72:cb:a7:09:10:a9:f3:69:29:00:af:12:77:f9:
a9:ba:62:6d:b0:5e:5c:ee:13:92:04:71:1b:8d:ac:00:ea:60:
28:73:3d:38:53:9a:10:e8:49:77:80:d3:f9:97:21:6e:4c:e7:
b4:e4:5c:bd:8e:d0:65:be:38:e4:80:e8:9d:0a:1c:37:e6:e5:
09:aa:0b:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:40:24 2025 by rpki-client