Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/bc1HzFd4K_TGK4SLLf_54MD78AY.roa
File: bc1HzFd4K_TGK4SLLf_54MD78AY.roa (raw, json)
Hash identifier: tkj1ydGWI4MOgmRQ4K/5dC6Xa1S3Lun92GS8MzVs/EM=
Subject key identifier: 6D:CD:47:CC:57:78:2B:F4:C6:2B:84:8B:2D:FF:F9:E0:C0:FB:F0:06
Certificate issuer: /CN=ada930587b4fd2fef728f056eca8688422c3b97c
Certificate serial: 019A4F21BF619149AF5FDCCE1BB201340537
Authority key identifier: AD:A9:30:58:7B:4F:D2:FE:F7:28:F0:56:EC:A8:68:84:22:C3:B9:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rakwWHtP0v73KPBW7KhohCLDuXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/bc1HzFd4K_TGK4SLLf_54MD78AY.roa
Signing time: Tue 04 Nov 2025 13:50:03 +0000
ROA not before: Tue 04 Nov 2025 13:50:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56553
IP address blocks: 193.219.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/rakwWHtP0v73KPBW7KhohCLDuXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:21:bf:61:91:49:af:5f:dc:ce:1b:b2:01:34:05:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ada930587b4fd2fef728f056eca8688422c3b97c
Validity
Not Before: Nov 4 13:50:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6dcd47cc57782bf4c62b848b2dfff9e0c0fbf006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:37:ac:6e:cb:cd:1f:92:1b:bc:aa:5a:76:e8:
3c:75:8f:74:d3:db:b4:8b:4d:82:61:ec:15:7a:89:
cd:ee:b1:54:35:05:8b:39:59:2c:1c:94:bb:c3:df:
51:00:9d:45:69:8a:af:ca:7f:d2:81:74:c4:7c:85:
02:85:11:71:6f:c5:14:ae:83:55:35:84:23:4e:fa:
18:8a:09:ae:51:83:8b:dc:73:3b:e3:44:a5:21:16:
e7:43:9e:89:07:52:2c:f1:22:9b:7b:14:d3:b0:84:
6a:16:92:c0:f9:ee:04:cb:81:cd:e0:b6:ad:f8:21:
b3:81:4b:6b:11:60:f7:ac:19:6d:be:d1:19:82:f0:
2e:dc:3e:72:0e:76:c0:14:bd:47:ae:d9:e1:5f:80:
36:a5:10:86:59:32:ad:74:69:da:ea:71:b0:0d:27:
d2:3b:d6:6d:ba:8b:9b:f9:1c:b3:3d:db:26:62:ec:
ad:d3:c3:a6:d0:97:03:4f:06:7d:76:3d:90:15:9b:
77:12:6e:80:b6:08:c8:d8:8d:0f:a8:9b:cd:18:41:
34:05:36:96:92:d3:3e:85:11:70:b7:34:bc:37:ef:
12:f5:82:dc:88:f8:22:f1:e6:e7:4c:df:ad:af:1d:
15:a2:ed:20:e9:4d:a1:12:8b:90:ce:31:0a:ca:3d:
52:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:CD:47:CC:57:78:2B:F4:C6:2B:84:8B:2D:FF:F9:E0:C0:FB:F0:06
X509v3 Authority Key Identifier:
keyid:AD:A9:30:58:7B:4F:D2:FE:F7:28:F0:56:EC:A8:68:84:22:C3:B9:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rakwWHtP0v73KPBW7KhohCLDuXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/bc1HzFd4K_TGK4SLLf_54MD78AY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.219.119.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:10:16:35:38:69:70:47:47:ab:2a:43:17:3f:a1:d5:1b:aa:
a1:99:b8:33:1c:52:ef:a1:41:b4:2a:79:1e:6d:4c:e1:d4:0c:
44:2d:e6:a6:1f:5f:c2:d3:b0:fe:0e:a9:cd:4d:0a:7f:6b:8e:
f9:31:ec:0e:57:ff:fb:75:2d:cc:9f:f9:dd:83:12:b3:a7:26:
dc:fa:3a:92:f7:a8:10:cb:08:55:ba:f3:53:82:93:f6:99:0b:
88:98:33:24:bc:b1:57:0c:43:86:4e:46:49:af:08:f0:30:65:
61:a7:9f:a3:f6:ed:e6:e7:65:3a:7e:b3:54:74:79:33:84:b3:
f1:e8:43:a0:69:97:f7:f4:91:c2:2e:f8:e7:0e:37:4e:90:9a:
f3:02:ac:51:8c:3e:64:31:97:10:84:53:6d:ff:3f:31:dc:74:
2e:1c:d7:1b:5c:43:20:c3:12:0d:e6:c2:fa:3c:9c:9c:44:c3:
1e:34:73:8a:37:ff:86:15:fe:7d:0b:74:29:17:ba:22:d8:14:
80:de:87:5a:8f:53:2a:67:a1:86:f4:ee:1f:08:f0:31:b6:49:
eb:0c:25:ec:ae:e7:18:c8:b2:9a:d2:82:b3:08:bc:bf:80:95:
63:97:58:ef:e7:4a:5a:15:f2:70:25:ff:6c:50:88:94:a2:11:
16:02:37:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:16:11 2025 by rpki-client