Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/c0bb52-70de-4af0-a9fb-900034f00d9e/1/BDcLQxnyKWB9gtN2Um0ArdAi4Yo.roa
File: BDcLQxnyKWB9gtN2Um0ArdAi4Yo.roa (raw, json)
Hash identifier: QoejBXywxlS59Ku6I9XeNMEgUGcsO7GymdNfXSFLhps=
Subject key identifier: 04:37:0B:43:19:F2:29:60:7D:82:D3:76:52:6D:00:AD:D0:22:E1:8A
Certificate issuer: /CN=7aef069e7e3ed5bf70f682ce40c5810ff3e5e378
Certificate serial: 01999522146897A93E6C3B546020D5A36CF1
Authority key identifier: 7A:EF:06:9E:7E:3E:D5:BF:70:F6:82:CE:40:C5:81:0F:F3:E5:E3:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eu8Gnn4-1b9w9oLOQMWBD_Pl43g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/c0bb52-70de-4af0-a9fb-900034f00d9e/1/BDcLQxnyKWB9gtN2Um0ArdAi4Yo.roa
Signing time: Mon 29 Sep 2025 11:01:02 +0000
ROA not before: Mon 29 Sep 2025 11:01:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20722
IP address blocks: 85.204.44.0/24 maxlen: 24
85.204.47.0/24 maxlen: 24
85.204.56.0/21 maxlen: 21
85.204.56.0/24 maxlen: 24
85.204.57.0/24 maxlen: 24
85.204.58.0/24 maxlen: 24
85.204.59.0/24 maxlen: 24
85.204.60.0/24 maxlen: 24
85.204.61.0/24 maxlen: 24
85.204.62.0/24 maxlen: 24
85.204.63.0/24 maxlen: 24
185.88.128.0/22 maxlen: 22
185.88.128.0/23 maxlen: 23
185.88.129.0/24 maxlen: 24
185.88.130.0/23 maxlen: 23
185.88.131.0/24 maxlen: 24
194.102.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/c0bb52-70de-4af0-a9fb-900034f00d9e/1/eu8Gnn4-1b9w9oLOQMWBD_Pl43g.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/c0bb52-70de-4af0-a9fb-900034f00d9e/1/eu8Gnn4-1b9w9oLOQMWBD_Pl43g.mft
rsync://rpki.ripe.net/repository/DEFAULT/eu8Gnn4-1b9w9oLOQMWBD_Pl43g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:95:22:14:68:97:a9:3e:6c:3b:54:60:20:d5:a3:6c:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7aef069e7e3ed5bf70f682ce40c5810ff3e5e378
Validity
Not Before: Sep 29 11:01:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=04370b4319f229607d82d376526d00add022e18a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4a:de:a0:c3:e2:22:93:0c:5e:51:90:08:30:
75:5e:c5:0d:10:58:3d:de:5e:06:ee:d8:2a:61:5d:
eb:f7:0e:08:6f:1b:ce:13:66:75:92:9f:84:b6:84:
c1:1e:a5:24:2d:5d:34:50:fa:91:88:bb:d0:fd:4f:
07:f0:35:31:1b:f9:06:1e:54:94:7b:73:fb:ab:24:
e2:24:96:87:8b:da:1c:d2:46:cb:af:dc:d6:f4:ad:
be:87:b8:f8:d6:30:a4:9a:6d:76:06:e2:b2:ce:2b:
3b:c7:a8:1d:54:f8:45:5d:8e:c0:c3:e1:f2:3b:6a:
da:4a:80:a1:56:85:9b:fe:15:cf:bb:49:08:c6:da:
96:28:3a:c0:3e:96:a4:5d:65:19:8e:dd:e5:3c:13:
f2:d9:fc:23:5f:3f:5d:75:df:c6:75:d4:10:7d:52:
48:0c:29:d3:e1:22:23:9f:65:47:6d:47:2e:60:22:
56:28:e9:af:21:e4:eb:8a:44:c9:85:ce:cb:cb:e5:
33:ce:02:04:8d:7c:9f:93:56:81:61:8f:8b:4f:c2:
e4:37:08:61:0f:db:ba:f9:81:bb:9a:92:83:28:23:
e0:2d:cc:a8:9d:30:26:61:c0:aa:74:10:40:8d:28:
d2:ce:5c:d8:77:6c:63:63:a1:19:0f:df:11:1e:9d:
6e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:37:0B:43:19:F2:29:60:7D:82:D3:76:52:6D:00:AD:D0:22:E1:8A
X509v3 Authority Key Identifier:
keyid:7A:EF:06:9E:7E:3E:D5:BF:70:F6:82:CE:40:C5:81:0F:F3:E5:E3:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eu8Gnn4-1b9w9oLOQMWBD_Pl43g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c0bb52-70de-4af0-a9fb-900034f00d9e/1/BDcLQxnyKWB9gtN2Um0ArdAi4Yo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c0bb52-70de-4af0-a9fb-900034f00d9e/1/eu8Gnn4-1b9w9oLOQMWBD_Pl43g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.44.0/24
85.204.47.0/24
85.204.56.0/21
185.88.128.0/22
194.102.188.0/24
Signature Algorithm: sha256WithRSAEncryption
36:f9:00:31:e0:d8:4e:b4:75:9b:b6:04:69:e5:b0:10:70:7c:
d1:e1:a7:d5:6f:28:8f:5b:64:ae:e9:23:32:c8:ed:b3:6e:b8:
c0:f6:98:22:02:30:29:0b:43:97:7b:ca:62:1c:36:89:aa:9a:
2e:7a:25:c3:1e:33:43:5f:49:87:40:0e:d2:d1:13:aa:89:fd:
57:80:50:00:ba:ad:c2:3b:40:83:08:61:9f:2b:fe:e5:fb:e7:
5f:4d:a0:2b:53:e1:59:31:37:6f:ee:1c:37:b1:00:17:5b:1b:
bb:21:1c:30:18:06:c4:27:92:8e:a8:13:31:6a:82:39:74:f4:
2b:61:37:49:01:fb:a2:c2:28:dd:04:a9:73:6a:2c:dc:a7:41:
ae:0f:9d:d1:13:36:6a:e5:2f:40:fa:64:1c:fd:08:6b:c9:94:
5b:dc:62:3c:50:97:08:2b:3b:0c:5d:cd:ee:cc:34:c6:25:40:
43:5b:2b:8a:ca:e0:62:83:bd:97:de:e7:d6:68:1b:b9:db:c7:
dc:c0:b5:b3:be:7b:a5:a3:a0:76:e3:60:7b:52:a7:8b:e7:c0:
a6:72:d1:b8:95:2d:9c:96:1a:2a:2c:50:8e:32:66:ad:8c:c0:
9f:cc:c3:30:2f:31:c7:71:af:65:d3:05:dd:cd:53:19:41:9a:
ad:8f:af:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:04:12 2025 by rpki-client