Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/Bxlqb263-kgcZfZlhtFTxe2oed0.roa
File: Bxlqb263-kgcZfZlhtFTxe2oed0.roa (raw, json)
Hash identifier: eqsbbHmoTOsOtEu29zQFjJDx1yzG+kHgnHrdI5HRceM=
Subject key identifier: 07:19:6A:6F:6E:B7:FA:48:1C:65:F6:65:86:D1:53:C5:ED:A8:79:DD
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 0199921E4B3DCB0EEBC6F5924B724E089503
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/Bxlqb263-kgcZfZlhtFTxe2oed0.roa
Signing time: Sun 28 Sep 2025 20:58:02 +0000
ROA not before: Sun 28 Sep 2025 20:58:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216382
IP address blocks: 2a0c:9a40:9cc0::/44 maxlen: 48
2a0c:9a46:1e00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:92:1e:4b:3d:cb:0e:eb:c6:f5:92:4b:72:4e:08:95:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Sep 28 20:58:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=07196a6f6eb7fa481c65f66586d153c5eda879dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:74:79:6a:a8:f0:c2:88:be:e9:14:0d:87:11:
b6:f4:9c:6b:2b:66:c0:4a:1b:d1:1e:2b:1e:2d:60:
3f:e5:b7:49:37:fb:ed:01:83:8d:cc:36:de:e2:c0:
f4:d8:f2:b0:34:85:95:f7:b0:63:61:f2:bb:4f:be:
eb:6c:01:a5:a0:ec:01:6d:65:5b:dc:d6:aa:d9:85:
43:c0:96:a8:0b:e1:a6:53:1a:25:e8:bd:e5:27:cd:
98:e7:61:e0:bc:15:a3:8b:b4:83:72:1d:05:42:99:
97:f8:76:ac:63:0e:dd:e4:ec:97:a1:06:6c:c9:90:
5c:36:38:d4:16:dc:89:ff:ab:11:70:ed:41:4e:2f:
5a:88:10:4f:0c:26:97:90:3d:42:44:8a:d5:4c:8e:
dd:a9:f3:4c:2c:83:5b:d5:f1:37:5f:a4:86:38:12:
ce:ab:f2:de:30:48:22:b0:04:31:cd:a4:62:0d:5a:
b3:0b:1a:f9:1a:bb:c5:d0:d9:3b:db:47:84:f1:91:
32:67:ef:b0:ec:a7:b1:8b:cd:54:4b:a7:77:0b:52:
5d:21:4b:99:23:ff:72:7a:5a:69:b3:87:12:4a:3e:
47:a0:f1:93:e7:01:d0:a6:1e:29:34:e1:c4:d6:ff:
03:68:8f:40:27:c6:ec:de:60:50:10:f2:2e:ec:f0:
9d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:19:6A:6F:6E:B7:FA:48:1C:65:F6:65:86:D1:53:C5:ED:A8:79:DD
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/Bxlqb263-kgcZfZlhtFTxe2oed0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:9cc0::/44
2a0c:9a46:1e00::/40
Signature Algorithm: sha256WithRSAEncryption
b4:b5:17:50:5b:6e:04:6e:1b:61:fa:0f:61:28:51:5d:38:c4:
d8:53:6c:cc:c8:1f:8c:66:23:22:bf:e4:d8:ce:58:44:e9:8c:
99:32:f1:89:33:91:a2:51:e3:fa:f2:b1:11:2d:9a:36:40:2f:
39:a1:80:66:b3:ec:f0:51:ea:4c:1d:8d:b5:83:19:4f:72:3d:
80:0d:8d:d4:98:a8:7b:03:ce:e2:64:c5:1c:52:c7:66:6e:83:
a6:08:fe:dc:9d:36:4e:23:cc:7e:ee:be:b2:db:24:b7:ce:c8:
bc:c0:5d:f8:6e:5f:e9:2d:9e:a9:54:9b:8a:e1:ac:6d:59:b0:
3e:ef:10:00:c2:58:ce:9c:b1:79:eb:0c:23:17:7c:29:a4:2f:
62:72:a8:68:f5:c0:99:1c:d7:44:30:29:b1:1b:84:73:09:b2:
d8:75:0c:f9:5c:0c:6e:b3:77:f4:d4:f3:bf:55:ec:bc:5f:9a:
9e:5a:ec:ce:1a:68:9b:72:e7:aa:20:1b:8c:86:33:f3:a8:70:
38:11:ae:a7:88:66:1f:ed:01:fc:35:a6:a3:36:6f:51:24:0f:
b0:87:a2:38:5a:5e:36:68:98:60:7b:e4:5a:17:12:ca:bd:d5:
4f:3c:85:8e:80:af:93:bd:5f:d4:1d:8c:4f:84:a1:d8:b6:7d:
5f:c1:e8:bf
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgISAZmSHks9yw7rxvWSS3JOCJUDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl
NDgwMDgwHhcNMjUwOTI4MjA1ODAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNzE5NmE2ZjZlYjdmYTQ4MWM2NWY2NjU4NmQxNTNjNWVkYTg3OWRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3R5aqjwwoi+6RQNhxG29JxrK2bA
ShvRHiseLWA/5bdJN/vtAYONzDbe4sD02PKwNIWV97BjYfK7T77rbAGloOwBbWVb
3Naq2YVDwJaoC+GmUxol6L3lJ82Y52HgvBWji7SDch0FQpmX+HasYw7d5OyXoQZs
yZBcNjjUFtyJ/6sRcO1BTi9aiBBPDCaXkD1CRIrVTI7dqfNMLINb1fE3X6SGOBLO
q/LeMEgisAQxzaRiDVqzCxr5GrvF0Nk720eE8ZEyZ++w7Kexi81US6d3C1JdIUuZ
I/9yelpps4cSSj5HoPGT5wHQph4pNOHE1v8DaI9AJ8bs3mBQEPIu7PCdFwIDAQAB
o4ICFDCCAhAwHQYDVR0OBBYEFAcZam9ut/pIHGX2ZYbRU8XtqHndMB8GA1UdIwQY
MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt
YmY0ZTUyN2I5ZmE4LzEvQnhscWIyNjMta2djWmZabGh0RlR4ZTJvZWQwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4
LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCoGCCsGAQUFBwEHAQH/BBswGTAXBAIAAjARAwcEKgyaQJzA
AwYAKgyaRh4wDQYJKoZIhvcNAQELBQADggEBALS1F1BbbgRuG2H6D2EoUV04xNhT
bMzIH4xmIyK/5NjOWETpjJky8YkzkaJR4/rysREtmjZALzmhgGaz7PBR6kwdjbWD
GU9yPYANjdSYqHsDzuJkxRxSx2Zug6YI/tydNk4jzH7uvrLbJLfOyLzAXfhuX+kt
nqlUm4rhrG1ZsD7vEADCWM6csXnrDCMXfCmkL2JyqGj1wJkc10QwKbEbhHMJsth1
DPlcDG6zd/TU879V7Lxfmp5a7M4aaJty56ogG4yGM/OocDgRrqeIZh/tAfw1pqM2
b1EkD7CHojhaXjZomGB75FoXEsq91U88hY6Ar5O9X9QdjE+Eodi2fV/B6L8=
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:46:10 2025 by rpki-client