Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/31a2df-dcde-49f2-8f1e-2fecdd88e575/1/BxWtid_-E8rZCQpiPweDOTdOKeU.roa
File: BxWtid_-E8rZCQpiPweDOTdOKeU.roa (raw, json)
Hash identifier: eIpy/irnZIzZ2iTcdnKoq7vKHPC2KdLXiq5W/929yzo=
Subject key identifier: 07:15:AD:89:DF:FE:13:CA:D9:09:0A:62:3F:07:83:39:37:4E:29:E5
Certificate issuer: /CN=b004f5869f5675f65f9b10cff4b65f74f76bed17
Certificate serial: 0198569DF468A4EE7FCC0D379F76322E1C00
Authority key identifier: B0:04:F5:86:9F:56:75:F6:5F:9B:10:CF:F4:B6:5F:74:F7:6B:ED:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/31a2df-dcde-49f2-8f1e-2fecdd88e575/1/BxWtid_-E8rZCQpiPweDOTdOKeU.roa
Signing time: Tue 29 Jul 2025 14:37:28 +0000
ROA not before: Tue 29 Jul 2025 14:37:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215227
IP address blocks: 193.107.245.0/24 maxlen: 24
212.108.123.0/24 maxlen: 24
2a14:2140::/29 maxlen: 29
2a14:2140::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/31a2df-dcde-49f2-8f1e-2fecdd88e575/1/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/31a2df-dcde-49f2-8f1e-2fecdd88e575/1/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.mft
rsync://rpki.ripe.net/repository/DEFAULT/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 08:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:56:9d:f4:68:a4:ee:7f:cc:0d:37:9f:76:32:2e:1c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b004f5869f5675f65f9b10cff4b65f74f76bed17
Validity
Not Before: Jul 29 14:37:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0715ad89dffe13cad9090a623f078339374e29e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:be:0e:92:e9:30:06:90:ab:35:8c:81:26:48:
05:0a:08:ff:d2:26:90:23:1b:b3:b1:2f:76:f6:b4:
32:bf:3c:b5:e7:f4:29:0c:de:87:c4:1f:37:44:c7:
df:25:79:5a:90:6f:65:b8:2b:72:c7:41:9c:48:bd:
a7:42:27:0a:fc:17:e5:d7:65:4b:c3:d7:d7:b4:ad:
4e:48:3f:3e:7b:f7:23:09:be:5c:69:67:b1:62:6e:
97:08:20:b2:43:32:bf:91:b4:4e:67:0c:f6:5d:38:
1b:33:ff:1e:34:87:39:62:2c:be:da:33:f4:c9:74:
23:d9:65:f7:69:47:e9:4c:d3:0c:a6:97:60:38:e9:
56:c7:72:f1:6a:b9:ab:0e:1e:16:a5:1f:5f:d6:02:
54:29:b7:99:ef:e0:b4:6d:0d:c3:6b:ee:72:70:0c:
61:e2:37:00:96:de:47:3f:a4:c6:2b:8f:ff:bb:44:
39:bd:13:0f:34:73:9a:1c:9c:c0:c5:44:ef:31:40:
be:78:ae:74:aa:4a:08:ce:2b:c7:6d:c3:4b:7c:f5:
ac:fb:da:30:04:af:17:b9:73:b4:62:3e:1e:72:df:
1a:bb:37:7d:43:47:ae:32:4c:d5:89:1f:7c:3e:0f:
07:93:a9:f1:81:17:39:f3:81:fe:ba:fa:64:17:63:
b8:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:15:AD:89:DF:FE:13:CA:D9:09:0A:62:3F:07:83:39:37:4E:29:E5
X509v3 Authority Key Identifier:
keyid:B0:04:F5:86:9F:56:75:F6:5F:9B:10:CF:F4:B6:5F:74:F7:6B:ED:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/31a2df-dcde-49f2-8f1e-2fecdd88e575/1/BxWtid_-E8rZCQpiPweDOTdOKeU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/31a2df-dcde-49f2-8f1e-2fecdd88e575/1/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.107.245.0/24
212.108.123.0/24
IPv6:
2a14:2140::/29
Signature Algorithm: sha256WithRSAEncryption
05:fd:78:ef:05:c5:19:a4:35:c2:c4:9b:47:cb:da:2e:10:74:
e6:d3:5d:3b:d0:9b:4f:58:9e:85:05:ef:b6:f7:42:72:6a:cf:
c1:99:53:62:f6:0d:76:87:4d:ba:3a:33:16:9a:dc:47:70:3a:
7f:cc:86:bb:a9:b0:45:4f:64:90:67:6c:08:90:e6:ef:51:20:
6f:24:5c:40:4a:74:ee:4d:16:33:ab:75:a4:c3:53:1c:a9:4e:
c0:83:09:2c:2b:ed:29:20:37:9e:ae:6f:bb:aa:05:8a:fc:96:
4d:43:47:28:62:f6:07:6c:ab:55:1a:58:8e:53:86:d7:6f:b0:
13:4f:9c:4e:8d:c0:4c:45:21:44:9e:ab:51:10:8b:5e:42:a3:
40:82:56:7f:b7:4f:6a:58:d8:10:d8:b2:0a:65:51:63:6c:0a:
b9:8b:b9:d4:b8:8d:61:9b:70:66:b1:ff:9b:79:d1:ac:f7:38:
44:c6:74:e6:a7:17:da:ff:c3:bc:40:91:8a:34:44:02:c1:43:
b2:bc:2c:83:71:d5:75:de:cb:93:95:3a:ca:2c:82:31:59:b5:
9a:bc:d0:a0:39:cc:5e:dc:2d:af:bb:72:04:e3:5a:d4:51:6b:
76:05:8c:d8:e2:f9:a3:13:1d:6d:90:44:c4:9d:d2:c2:36:4c:
cd:e6:2e:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 13:06:38 2025 by rpki-client