Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/BWgUE5LQmQAlbqO83qL9kXVbJhs.roa
File: BWgUE5LQmQAlbqO83qL9kXVbJhs.roa (raw, json)
Hash identifier: /fMSUtfGmY+JcL7z6W7dyCJcUIJvH6qPGmmkSm17J+A=
Subject key identifier: 05:68:14:13:92:D0:99:00:25:6E:A3:BC:DE:A2:FD:91:75:5B:26:1B
Certificate issuer: /CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Certificate serial: 019999A74E817FA55A4C52C33E20BD44424D
Authority key identifier: FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/BWgUE5LQmQAlbqO83qL9kXVbJhs.roa
Signing time: Tue 30 Sep 2025 08:05:02 +0000
ROA not before: Tue 30 Sep 2025 08:05:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21859
IP address blocks: 109.122.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:99:a7:4e:81:7f:a5:5a:4c:52:c3:3e:20:bd:44:42:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Validity
Not Before: Sep 30 08:05:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0568141392d09900256ea3bcdea2fd91755b261b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b2:91:cc:f6:da:aa:7a:52:d9:ef:2b:44:55:
92:fd:8b:52:69:b5:50:21:f4:6b:b4:59:ee:48:ad:
bc:ac:ab:df:6f:76:c1:6f:e1:7c:34:01:88:d9:4c:
6f:4e:9a:a2:4d:97:38:16:7b:02:ec:43:b5:c3:41:
21:d5:91:10:ab:2c:ba:d9:bc:43:c6:a4:ff:28:e8:
41:11:46:8f:ce:82:0f:ed:61:66:39:bd:9d:90:16:
ff:f5:98:ea:6b:a8:87:e2:9d:10:1f:10:45:f6:34:
cb:34:31:7f:ca:1a:23:86:bd:b6:c8:b2:63:ba:59:
67:58:72:38:f9:80:bc:ac:75:0a:aa:7f:2d:ec:26:
75:8d:4f:47:f9:36:1c:f8:b7:15:3f:7c:a1:ef:dd:
34:a2:41:ad:48:34:02:43:4e:43:f2:73:68:b4:89:
88:c0:44:59:63:08:f8:ec:e0:53:9e:71:44:37:1b:
64:6f:2d:02:e1:67:17:0b:bd:76:62:eb:4c:c8:ff:
6d:3e:e0:13:68:c3:55:bb:7a:20:d3:78:f0:5b:7f:
44:5a:fb:f5:31:73:24:f1:87:22:01:5d:46:37:58:
11:ef:b9:b4:90:46:f1:83:19:01:7d:72:4b:b0:ea:
43:58:8d:d5:e0:12:67:e2:a7:67:10:be:38:3e:00:
07:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:68:14:13:92:D0:99:00:25:6E:A3:BC:DE:A2:FD:91:75:5B:26:1B
X509v3 Authority Key Identifier:
keyid:FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/BWgUE5LQmQAlbqO83qL9kXVbJhs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.4.0/24
Signature Algorithm: sha256WithRSAEncryption
20:d2:80:8d:26:57:56:90:03:7a:ff:9b:ff:a7:a6:97:46:c1:
e5:1a:a4:9d:93:29:08:61:7e:c7:1a:4c:89:26:2f:6b:06:e7:
75:c3:83:5a:cb:16:3f:92:8d:4a:d6:f2:7a:05:25:c0:12:17:
d4:59:2e:14:25:13:7d:6e:87:68:a7:8f:48:17:e6:9c:e1:f0:
d4:0b:49:45:74:60:ba:a6:91:4f:d3:d2:a2:3f:8b:bd:f2:18:
a8:ea:d8:5e:7a:10:8b:ca:dd:7b:a4:9d:af:87:fb:fb:19:50:
66:26:0c:b1:b3:99:fa:fe:fa:47:72:6b:0b:b7:34:6b:f8:06:
df:c7:75:9d:be:ad:77:cc:56:b5:aa:b2:04:62:5a:fe:c8:56:
e1:e4:10:95:03:18:96:c5:75:21:18:f6:ad:a9:35:2a:16:38:
c0:b1:44:9c:4a:f4:2d:19:0f:fb:bb:ed:b3:a5:17:4b:6b:22:
a9:0d:8a:70:9b:de:e1:f9:66:21:04:cf:16:b4:ed:b2:50:0e:
ad:70:d5:e3:f1:20:20:c1:83:db:ad:d5:ce:b8:c4:bc:0f:c8:
85:72:5c:ee:e8:85:1d:22:1a:ff:88:28:26:82:8f:3d:b3:c6:
13:41:96:70:13:4e:c8:8b:40:71:1d:4f:21:df:80:ea:5e:17:
62:d9:75:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:58:04 2025 by rpki-client