Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/bsyTV4mp0M80JuvyrafOWZG18O4.roa
File: bsyTV4mp0M80JuvyrafOWZG18O4.roa (raw, json)
Hash identifier: 3svBpUiQj+7JWPVd5ZYhgDeFWkfcSU1ir4CWfZSCZU0=
Subject key identifier: 6E:CC:93:57:89:A9:D0:CF:34:26:EB:F2:AD:A7:CE:59:91:B5:F0:EE
Certificate issuer: /CN=8d84404e5f8a4b117ae44e73d53c44ecdd578342
Certificate serial: 01987FD3BCAE52E1DB3B598CDA948E632FC3
Authority key identifier: 8D:84:40:4E:5F:8A:4B:11:7A:E4:4E:73:D5:3C:44:EC:DD:57:83:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/bsyTV4mp0M80JuvyrafOWZG18O4.roa
Signing time: Wed 06 Aug 2025 14:40:39 +0000
ROA not before: Wed 06 Aug 2025 14:40:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44534
IP address blocks: 5.45.209.0/24 maxlen: 24
5.255.232.0/24 maxlen: 24
5.255.234.0/23 maxlen: 23
37.140.168.0/24 maxlen: 24
77.88.6.0/24 maxlen: 24
77.88.42.0/23 maxlen: 23
77.88.61.0/24 maxlen: 24
84.252.160.0/19 maxlen: 20
87.250.232.0/24 maxlen: 24
87.250.238.0/24 maxlen: 24
90.156.176.0/20 maxlen: 24
90.156.176.0/24 maxlen: 24
93.158.155.0/24 maxlen: 24
93.158.184.0/24 maxlen: 24
93.158.185.0/24 maxlen: 24
93.158.186.0/24 maxlen: 24
93.158.187.0/24 maxlen: 24
95.108.168.0/22 maxlen: 22
95.108.170.0/24 maxlen: 24
141.8.130.0/23 maxlen: 23
178.154.152.0/24 maxlen: 24
2a02:6bf:8000::/34 maxlen: 48
2a02:6bf:8005::/48 maxlen: 48
2a02:6bf:8006::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7f:d3:bc:ae:52:e1:db:3b:59:8c:da:94:8e:63:2f:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d84404e5f8a4b117ae44e73d53c44ecdd578342
Validity
Not Before: Aug 6 14:40:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6ecc935789a9d0cf3426ebf2ada7ce5991b5f0ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:df:1b:ac:96:93:fe:20:95:28:e8:e2:3c:43:
ff:5b:ab:15:3c:4c:d3:80:40:fb:ef:28:46:80:22:
51:4f:e0:a0:d0:9f:9e:69:56:17:a8:9f:66:3f:f7:
8f:3e:8b:1b:8a:e9:33:74:b0:37:5a:3b:0c:ee:ba:
94:d0:ba:52:2f:53:b8:59:03:2f:5e:00:2b:e9:78:
8c:90:3a:fa:54:51:c4:be:0d:c8:bc:9b:56:be:b9:
b4:07:68:e8:a1:a1:fa:f9:08:ad:5a:ba:a0:9e:9d:
c3:dc:0b:da:09:11:8e:c8:6c:46:10:f1:d4:00:2b:
3c:25:bf:e7:3c:9e:70:bd:43:89:db:1e:03:c3:52:
7f:92:bb:34:87:59:1e:9d:55:ff:b4:45:c3:7d:49:
5c:98:01:7f:9b:1e:2e:9d:5b:ae:37:2a:f1:07:38:
75:3b:a0:8b:03:7f:4a:7e:9f:ea:ac:79:6d:da:fc:
48:6c:92:35:40:90:4d:ee:87:6c:64:32:f1:e0:af:
91:bd:f9:99:71:69:e5:83:86:87:7f:5f:8b:25:52:
70:b8:89:1f:7f:b6:05:e7:ef:9d:b1:cf:9c:df:cf:
2d:68:17:fb:5a:c2:eb:f3:0a:06:74:83:69:dd:6c:
a5:fa:fc:5d:2f:d6:7f:f1:d8:6f:7a:b0:77:69:e9:
4c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:CC:93:57:89:A9:D0:CF:34:26:EB:F2:AD:A7:CE:59:91:B5:F0:EE
X509v3 Authority Key Identifier:
keyid:8D:84:40:4E:5F:8A:4B:11:7A:E4:4E:73:D5:3C:44:EC:DD:57:83:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/bsyTV4mp0M80JuvyrafOWZG18O4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.45.209.0/24
5.255.232.0/24
5.255.234.0/23
37.140.168.0/24
77.88.6.0/24
77.88.42.0/23
77.88.61.0/24
84.252.160.0/19
87.250.232.0/24
87.250.238.0/24
90.156.176.0/20
93.158.155.0/24
93.158.184.0/22
95.108.168.0/22
141.8.130.0/23
178.154.152.0/24
IPv6:
2a02:6bf:8000::/34
Signature Algorithm: sha256WithRSAEncryption
04:71:6d:40:0c:00:d6:68:7d:c5:96:b8:54:40:de:42:d1:86:
30:75:44:be:27:35:e6:77:6d:a9:8b:b1:94:46:4d:2c:d3:9f:
ac:53:37:18:6b:e9:74:53:b5:26:1a:92:30:80:2f:9e:1a:ce:
a9:49:d4:0d:27:97:68:eb:52:77:01:b9:7e:c1:4e:a0:70:2d:
45:d5:96:36:df:9c:00:01:b8:8f:40:a5:ef:6c:9c:c9:d7:84:
53:3d:64:9a:a7:d8:41:7c:1f:79:b6:98:cc:09:22:49:17:d2:
89:cc:ee:86:95:2b:34:12:9b:b8:10:13:07:3a:65:e0:73:48:
27:8d:a4:31:09:9a:9e:18:6c:c1:20:af:19:e1:71:e5:38:58:
d5:f0:f9:96:b7:3d:52:24:2e:c5:40:e1:aa:f5:1d:96:bb:10:
5c:8d:97:45:5d:76:6c:53:59:94:69:ac:d1:2b:c6:14:27:30:
c4:2c:d7:d0:bc:c9:2d:c3:69:59:f7:76:1a:3b:28:12:08:8d:
bd:84:8b:72:0d:ee:dd:19:6f:3c:69:20:f4:ab:04:28:90:3b:
83:96:0e:78:7b:3f:19:49:bf:29:bf:08:18:a6:b9:cd:3e:45:
5a:25:2a:ff:9e:27:ff:ca:34:41:8e:eb:3b:7f:ff:e8:11:a0:
0f:93:be:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:41:56 2025 by rpki-client