Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/BBzZtPEfxImyqxYJWpqzc2vGMoU.roa
File: BBzZtPEfxImyqxYJWpqzc2vGMoU.roa (raw, json)
Hash identifier: 9ncGBnciG7xHOtiemX2ZdLo7OmVH0kKJbyh1kJ1xeno=
Subject key identifier: 04:1C:D9:B4:F1:1F:C4:89:B2:AB:16:09:5A:9A:B3:73:6B:C6:32:85
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 01983B533470D6685E22301CB7AF5E93549E
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/BBzZtPEfxImyqxYJWpqzc2vGMoU.roa
Signing time: Thu 24 Jul 2025 07:26:05 +0000
ROA not before: Thu 24 Jul 2025 07:26:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13335
IP address blocks: 82.118.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 Aug 2025 17:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3b:53:34:70:d6:68:5e:22:30:1c:b7:af:5e:93:54:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Jul 24 07:26:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=041cd9b4f11fc489b2ab16095a9ab3736bc63285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c2:69:b2:62:88:9c:dd:ef:3a:72:b8:e3:3e:
f7:ef:fa:3c:a9:b0:6f:21:83:b2:4b:7a:02:a6:4e:
21:2b:05:15:28:fa:aa:e6:24:ae:27:b5:ae:30:b1:
6a:21:8f:09:b4:64:bb:5c:ba:e5:e3:64:04:9c:94:
2f:20:eb:d6:22:e1:02:31:db:f6:d8:f5:20:32:a4:
5e:57:8c:37:fa:14:d8:81:12:0b:0c:8c:ed:ac:b1:
6a:af:66:bc:c6:7f:21:c3:24:33:68:9c:7e:25:41:
ef:2a:2b:ed:75:62:92:f3:d3:6c:a6:6e:f5:78:ff:
fd:ce:95:10:83:01:e6:e2:5d:2f:ff:93:f7:7e:0d:
c5:b9:31:1f:b0:e3:3d:9d:1b:4e:5c:08:57:cb:1c:
f6:3e:bf:f5:c4:46:f5:7a:fe:72:68:f4:e5:54:21:
51:93:52:58:fd:95:9c:3e:c4:b1:dd:de:3f:89:a0:
5b:8b:74:e1:19:fa:01:0f:2b:14:14:62:21:bf:0f:
2f:45:82:b7:fa:76:b3:10:f4:34:34:81:03:76:0b:
21:be:ab:e1:72:ea:d4:17:af:9f:97:62:f3:36:cb:
c2:66:d1:4b:47:5c:b7:31:6a:ef:0a:a4:4c:1e:b2:
6e:89:0c:fd:cf:84:61:1e:33:86:cd:b7:04:6b:e7:
2b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:1C:D9:B4:F1:1F:C4:89:B2:AB:16:09:5A:9A:B3:73:6B:C6:32:85
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/BBzZtPEfxImyqxYJWpqzc2vGMoU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.118.242.0/24
Signature Algorithm: sha256WithRSAEncryption
68:01:b0:1a:0b:f3:e3:68:6e:1d:ab:dc:d5:8f:a2:e5:8a:ce:
4d:75:44:6d:ea:16:26:2b:dc:0e:5c:86:2d:9c:d0:75:20:3f:
5c:94:f3:49:13:b7:0e:52:f2:00:8c:0f:bf:33:48:fa:a6:76:
28:84:51:f2:71:14:13:bd:7f:ca:01:5c:6e:4c:3b:db:6d:78:
07:42:f0:be:c0:61:78:cb:1f:b9:b5:72:e3:73:fa:69:c4:78:
3a:80:44:89:9a:ea:ad:19:58:3a:e8:c7:b2:33:67:42:3c:c9:
7e:b9:ff:29:9e:c2:e5:6f:49:83:d7:2b:40:2e:48:d7:34:6e:
ed:19:a9:b4:bb:47:44:2f:e0:77:76:cc:98:ce:76:14:0d:c9:
20:30:7d:ad:fe:14:b6:50:17:32:a8:6e:1f:c5:ec:d3:17:d6:
10:61:98:5e:70:fa:1d:3b:2f:c9:4e:62:d6:07:2c:ca:14:54:
d7:39:13:00:ec:cf:cd:46:14:9a:ae:2d:73:0a:64:19:7a:71:
89:c6:29:cb:c0:0c:2f:c5:b5:0a:3f:75:a6:c9:52:52:b0:02:
96:34:ad:06:7e:6e:6a:42:2d:de:c4:b3:79:2b:77:bf:6f:a7:
f2:f3:a9:3c:ab:40:77:07:49:e0:21:85:8d:02:ae:30:6f:07:
6e:73:88:79
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZg7UzRw1mheIjAct69ek1SeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzNWVhYzY0ZWE0ODAyZTY4MjQ2ODZmN2MwZDIwMWYyYzg1
Y2IyYWEwHhcNMjUwNzI0MDcyNjA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNDFjZDliNGYxMWZjNDg5YjJhYjE2MDk1YTlhYjM3MzZiYzYzMjg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA18JpsmKInN3vOnK44z737/o8qbBv
IYOyS3oCpk4hKwUVKPqq5iSuJ7WuMLFqIY8JtGS7XLrl42QEnJQvIOvWIuECMdv2
2PUgMqReV4w3+hTYgRILDIztrLFqr2a8xn8hwyQzaJx+JUHvKivtdWKS89Nspm71
eP/9zpUQgwHm4l0v/5P3fg3FuTEfsOM9nRtOXAhXyxz2Pr/1xEb1ev5yaPTlVCFR
k1JY/ZWcPsSx3d4/iaBbi3ThGfoBDysUFGIhvw8vRYK3+nazEPQ0NIEDdgshvqvh
curUF6+fl2LzNsvCZtFLR1y3MWrvCqRMHrJuiQz9z4RhHjOGzbcEa+cr+wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAQc2bTxH8SJsqsWCVqas3NrxjKFMB8GA1UdIwQY
MBaAFMNerGTqSALmgkaG98DSAfLIXLKqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMt
ZGFjYjVmMzU2ZWEzLzEvQkJ6WnRQRWZ4SW15cXhZSldwcXpjMnZHTW9VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMtZGFjYjVmMzU2ZWEz
LzEvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUnbyMA0G
CSqGSIb3DQEBCwUAA4IBAQBoAbAaC/PjaG4dq9zVj6Llis5NdURt6hYmK9wOXIYt
nNB1ID9clPNJE7cOUvIAjA+/M0j6pnYohFHycRQTvX/KAVxuTDvbbXgHQvC+wGF4
yx+5tXLjc/ppxHg6gESJmuqtGVg66MeyM2dCPMl+uf8pnsLlb0mD1ytALkjXNG7t
Gam0u0dEL+B3dsyYznYUDckgMH2t/hS2UBcyqG4fxezTF9YQYZhecPodOy/JTmLW
ByzKFFTXORMA7M/NRhSari1zCmQZenGJxinLwAwvxbUKP3WmyVJSsAKWNK0Gfm5q
Qi3exLN5K3e/b6fy86k8q0B3B0ngIYWNAq4wbwduc4h5
-----END CERTIFICATE-----
Generated at Mon Aug 4 01:45:23 2025 by rpki-client