Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/971b11-280e-4ced-b99c-bbccab913b5d/1/Bk90iRHQbjjUJbXbIoCrmIUPVKg.roa
File: Bk90iRHQbjjUJbXbIoCrmIUPVKg.roa (raw, json)
Hash identifier: 2vZbpJ5kGWmtCTPNu+LnDVtMf49vjpIIGHq8bmC5+kQ=
Subject key identifier: 06:4F:74:89:11:D0:6E:38:D4:25:B5:DB:22:80:AB:98:85:0F:54:A8
Certificate issuer: /CN=eea02b197dbaf7deb74e0a27d9d4ecd3fae1e8ed
Certificate serial: 0199855F5A658268F2BFF18BCD547B8FEF95
Authority key identifier: EE:A0:2B:19:7D:BA:F7:DE:B7:4E:0A:27:D9:D4:EC:D3:FA:E1:E8:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7qArGX269963Tgon2dTs0_rh6O0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/971b11-280e-4ced-b99c-bbccab913b5d/1/Bk90iRHQbjjUJbXbIoCrmIUPVKg.roa
Signing time: Fri 26 Sep 2025 09:34:02 +0000
ROA not before: Fri 26 Sep 2025 09:34:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57152
IP address blocks: 104.247.170.0/24 maxlen: 24
104.247.171.0/24 maxlen: 24
104.247.172.0/24 maxlen: 24
104.247.174.0/24 maxlen: 24
104.247.175.0/24 maxlen: 24
104.247.176.0/24 maxlen: 24
104.247.177.0/24 maxlen: 24
104.247.178.0/24 maxlen: 24
104.247.179.0/24 maxlen: 24
104.247.180.0/24 maxlen: 24
104.247.181.0/24 maxlen: 24
104.247.182.0/24 maxlen: 24
104.247.184.0/24 maxlen: 24
104.247.185.0/24 maxlen: 24
104.247.186.0/24 maxlen: 24
104.247.187.0/24 maxlen: 24
104.247.190.0/24 maxlen: 24
104.247.191.0/24 maxlen: 24
185.73.128.0/22 maxlen: 24
185.73.129.0/24 maxlen: 24
185.137.215.0/24 maxlen: 24
2a03:a5a0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/971b11-280e-4ced-b99c-bbccab913b5d/1/7qArGX269963Tgon2dTs0_rh6O0.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/971b11-280e-4ced-b99c-bbccab913b5d/1/7qArGX269963Tgon2dTs0_rh6O0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7qArGX269963Tgon2dTs0_rh6O0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:85:5f:5a:65:82:68:f2:bf:f1:8b:cd:54:7b:8f:ef:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eea02b197dbaf7deb74e0a27d9d4ecd3fae1e8ed
Validity
Not Before: Sep 26 09:34:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=064f748911d06e38d425b5db2280ab98850f54a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:08:73:87:f4:43:95:1a:90:be:91:91:ff:42:
d9:91:d8:ca:58:e2:ea:d1:bb:67:2d:ba:f8:d3:e4:
ea:d2:22:8f:fb:c2:17:47:c8:d3:88:98:c0:0f:18:
3c:27:1e:6f:16:82:6c:8f:ae:4a:99:1b:7e:a6:ae:
cb:20:fd:a9:7e:30:28:e6:a3:0d:50:06:49:88:dd:
61:cb:48:14:67:6a:35:8a:50:24:5c:ea:37:c8:33:
0d:07:c2:ae:75:45:4f:eb:42:d6:9c:77:92:8d:cc:
0a:b6:93:f1:fb:2a:ad:44:fd:b3:29:dc:48:52:1a:
fe:fa:d3:fa:36:3c:ca:8e:f6:70:e1:59:16:57:eb:
2a:a8:30:2e:a2:32:c8:21:b2:dd:6b:9a:dc:db:24:
49:82:d4:e8:56:70:40:23:d7:7d:4c:91:87:af:31:
5a:fd:77:98:8b:f0:15:81:76:3a:4b:e2:7f:cd:aa:
b2:82:15:0b:6b:a2:39:79:7c:d4:29:30:84:a5:22:
13:9f:66:68:4e:59:07:55:16:d2:71:2b:5e:e1:5d:
59:6d:e7:6b:d4:00:21:70:8e:55:cf:c4:af:ed:c9:
06:e0:1e:d2:f5:f3:38:f9:16:f7:6d:b3:19:18:be:
b3:6b:ae:d4:11:a6:05:fe:0e:cf:7b:73:5e:1a:f7:
33:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:4F:74:89:11:D0:6E:38:D4:25:B5:DB:22:80:AB:98:85:0F:54:A8
X509v3 Authority Key Identifier:
keyid:EE:A0:2B:19:7D:BA:F7:DE:B7:4E:0A:27:D9:D4:EC:D3:FA:E1:E8:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7qArGX269963Tgon2dTs0_rh6O0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/971b11-280e-4ced-b99c-bbccab913b5d/1/Bk90iRHQbjjUJbXbIoCrmIUPVKg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/971b11-280e-4ced-b99c-bbccab913b5d/1/7qArGX269963Tgon2dTs0_rh6O0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.247.170.0-104.247.172.255
104.247.174.0-104.247.182.255
104.247.184.0/22
104.247.190.0/23
185.73.128.0/22
185.137.215.0/24
IPv6:
2a03:a5a0::/32
Signature Algorithm: sha256WithRSAEncryption
91:57:06:84:3e:56:0c:02:cc:1b:1e:91:a0:91:92:b5:da:eb:
10:51:79:06:79:25:af:65:be:e3:80:fc:6e:08:50:cd:e6:cc:
e3:ae:c5:ea:3e:57:fe:ad:81:0b:7f:66:b2:0e:ff:c3:79:a4:
7d:e6:5c:8c:b0:e5:5b:8b:ec:11:dc:c3:a1:c3:d1:1d:8f:9c:
c6:93:f8:87:f1:e5:3d:5e:f8:48:7a:78:3e:4d:33:6b:34:90:
64:c8:61:ea:a2:84:e5:23:cb:4b:67:01:0a:08:af:83:dd:c6:
ca:25:f4:b4:b3:3d:43:fe:38:d8:8f:d9:b0:6b:89:b2:54:9f:
3e:5c:e9:5c:ec:16:f0:e5:2f:e7:89:71:e6:88:23:97:f4:8c:
ec:34:4d:75:b6:68:3e:1f:0e:d7:12:a6:b8:e3:b7:ea:48:df:
0f:0d:c3:88:49:79:9e:8e:f0:75:a6:fc:1d:47:52:26:17:57:
8d:45:0d:56:9c:80:b2:85:54:bc:34:b3:b4:a2:32:6e:bf:cd:
15:86:0d:85:13:0c:67:89:c0:44:09:d7:0f:25:dd:a9:fa:d7:
55:b4:16:2e:2b:8f:19:c8:94:3e:9a:6e:40:fe:dc:53:b3:33:
4b:f4:44:4f:44:09:ec:4e:6c:b0:3d:9d:ab:71:d8:85:24:2e:
5a:d9:c6:a7
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Oct 19 14:34:04 2025 by rpki-client