Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/d79d2c-4cb4-4a74-b6ac-d7c6ff933c23/1/Bu48zWFxDyJn3-akty1oLQtgV8E.roa
File: Bu48zWFxDyJn3-akty1oLQtgV8E.roa (raw, json)
Hash identifier: FVRZ2ohOc+cHt3W4qA7rMsRi0xv5228mt/NvOFwJ/Cg=
Subject key identifier: 06:EE:3C:CD:61:71:0F:22:67:DF:E6:A4:B7:2D:68:2D:0B:60:57:C1
Certificate issuer: /CN=05a991acd7b2273d9e1865afa2755e6f5e672e55
Certificate serial: 019868537159CCF68E77E54A9438C2AED5E0
Authority key identifier: 05:A9:91:AC:D7:B2:27:3D:9E:18:65:AF:A2:75:5E:6F:5E:67:2E:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BamRrNeyJz2eGGWvonVeb15nLlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/d79d2c-4cb4-4a74-b6ac-d7c6ff933c23/1/Bu48zWFxDyJn3-akty1oLQtgV8E.roa
Signing time: Sat 02 Aug 2025 01:09:15 +0000
ROA not before: Sat 02 Aug 2025 01:09:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208439
IP address blocks: 45.136.164.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/d79d2c-4cb4-4a74-b6ac-d7c6ff933c23/1/BamRrNeyJz2eGGWvonVeb15nLlU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/d79d2c-4cb4-4a74-b6ac-d7c6ff933c23/1/BamRrNeyJz2eGGWvonVeb15nLlU.mft
rsync://rpki.ripe.net/repository/DEFAULT/BamRrNeyJz2eGGWvonVeb15nLlU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 Aug 2025 07:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:68:53:71:59:cc:f6:8e:77:e5:4a:94:38:c2:ae:d5:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05a991acd7b2273d9e1865afa2755e6f5e672e55
Validity
Not Before: Aug 2 01:09:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=06ee3ccd61710f2267dfe6a4b72d682d0b6057c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d6:0c:f3:17:fa:21:8d:dc:5f:46:e0:79:fa:
f5:ad:79:82:62:af:fe:39:0b:8b:93:db:be:32:b5:
ba:6f:b1:a4:35:ce:74:e7:c5:62:4e:61:a4:3c:72:
95:34:d0:98:8d:90:63:76:0c:d5:9c:a9:53:f3:46:
4b:ca:9a:0c:fa:6f:4f:19:49:1d:b6:98:63:30:fb:
05:bb:aa:90:02:af:90:3d:f6:cc:39:e4:a1:0a:df:
dd:a0:ec:f4:f5:b6:f7:d5:85:89:5d:2c:e0:aa:ff:
7a:68:53:0f:fe:95:39:49:70:a8:49:4f:84:7b:1b:
fa:4e:a3:2a:fd:3f:c5:ad:2a:d2:fb:ae:35:87:e6:
ec:48:11:e5:6c:87:0c:6f:ed:cf:cc:e3:3f:a1:79:
af:02:c1:3d:97:d3:4f:31:08:d8:de:57:7d:e6:8a:
50:97:e1:c4:38:93:43:b5:b3:5d:18:d5:20:a4:21:
7b:10:1b:c0:08:78:d0:f3:c2:cd:3d:15:d0:e4:a2:
db:91:f5:a8:62:b8:63:18:dd:c2:37:a9:2a:24:52:
3c:c6:9d:3e:83:fb:57:aa:a4:ce:e8:97:78:a9:56:
3e:5f:66:fe:bb:53:68:5b:f3:82:2d:81:b5:66:d1:
6c:d6:77:22:1a:cf:4d:bd:9a:76:30:2d:7d:a0:5a:
52:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:EE:3C:CD:61:71:0F:22:67:DF:E6:A4:B7:2D:68:2D:0B:60:57:C1
X509v3 Authority Key Identifier:
keyid:05:A9:91:AC:D7:B2:27:3D:9E:18:65:AF:A2:75:5E:6F:5E:67:2E:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BamRrNeyJz2eGGWvonVeb15nLlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d79d2c-4cb4-4a74-b6ac-d7c6ff933c23/1/Bu48zWFxDyJn3-akty1oLQtgV8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d79d2c-4cb4-4a74-b6ac-d7c6ff933c23/1/BamRrNeyJz2eGGWvonVeb15nLlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.164.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:f6:29:c3:15:4c:21:4a:de:c2:2f:a5:a6:3f:d9:2f:95:39:
af:90:7e:63:6f:c7:30:38:64:ea:84:8a:23:14:43:4e:fd:df:
6a:13:fa:7f:56:73:c8:75:20:a8:0b:37:45:63:5f:9d:f2:02:
35:98:28:a2:51:09:b4:d5:26:9b:b3:a2:a5:35:ed:81:5e:20:
9a:de:fe:ef:96:71:a7:33:24:7f:b7:ee:0b:36:33:e0:03:e1:
64:a4:81:5c:70:ea:5d:4c:2a:d5:4f:ac:c5:2c:cb:f7:af:88:
60:ca:0c:56:0a:0d:ba:f1:46:0b:e1:1e:f9:9a:78:27:34:7d:
bd:a7:01:ca:49:55:c1:e7:6a:db:8d:db:d5:bf:f3:71:52:cd:
78:e7:20:8c:c7:5b:59:e7:e8:5a:a1:da:3f:47:3c:d2:bf:b0:
e5:d3:d6:cc:1a:57:22:8b:0d:93:be:33:29:c3:40:6d:1d:8b:
ed:3f:66:10:e0:37:32:03:d0:c3:15:0a:db:2e:2d:be:bd:0a:
f7:2e:39:48:3b:3f:f7:01:fd:ea:77:4b:e6:8b:96:d5:32:28:
10:38:4d:57:2d:58:bc:d8:df:86:58:42:23:ab:d0:26:a3:8b:
45:eb:1a:2f:ed:55:b7:e1:d7:b9:8a:f2:a6:21:08:0d:b9:46:
44:5c:67:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 13:23:13 2025 by rpki-client