Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/622fdb-0e56-4c87-866b-b31f252f1969/1/BTfaTJRkv38NK3OV8P41ApchwpU.roa
File: BTfaTJRkv38NK3OV8P41ApchwpU.roa (raw, json)
Hash identifier: YG+c62cfsP2iujTwoHOL3MZnp6ckxYppxq1JP02lQgk=
Subject key identifier: 05:37:DA:4C:94:64:BF:7F:0D:2B:73:95:F0:FE:35:02:97:21:C2:95
Certificate issuer: /CN=2fba003756d1013b943eb4f507fb4e7c74778269
Certificate serial: 0199EE307CD1772A4D8B74C1E17F9F0E9282
Authority key identifier: 2F:BA:00:37:56:D1:01:3B:94:3E:B4:F5:07:FB:4E:7C:74:77:82:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L7oAN1bRATuUPrT1B_tOfHR3gmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/622fdb-0e56-4c87-866b-b31f252f1969/1/BTfaTJRkv38NK3OV8P41ApchwpU.roa
Signing time: Thu 16 Oct 2025 18:02:58 +0000
ROA not before: Thu 16 Oct 2025 18:02:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49981
IP address blocks: 87.236.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/622fdb-0e56-4c87-866b-b31f252f1969/1/L7oAN1bRATuUPrT1B_tOfHR3gmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/622fdb-0e56-4c87-866b-b31f252f1969/1/L7oAN1bRATuUPrT1B_tOfHR3gmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/L7oAN1bRATuUPrT1B_tOfHR3gmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 12:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ee:30:7c:d1:77:2a:4d:8b:74:c1:e1:7f:9f:0e:92:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fba003756d1013b943eb4f507fb4e7c74778269
Validity
Not Before: Oct 16 18:02:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0537da4c9464bf7f0d2b7395f0fe35029721c295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c6:dc:d5:79:3c:29:8b:c8:7b:a2:28:d1:13:
a4:26:2e:d6:d6:27:ff:3a:5f:ac:bc:56:b3:71:52:
93:9e:85:e4:4c:f1:14:db:b0:30:cf:90:5b:6e:6d:
2d:1b:2f:01:30:d8:27:8b:c6:41:56:8a:5c:23:65:
c9:58:02:fa:c6:b2:ec:0a:7c:07:9c:f7:c4:f0:93:
bf:f3:c1:65:a8:22:d3:a2:b9:53:d2:21:e7:7e:52:
53:64:76:e1:61:5f:ed:3c:fa:1f:15:f3:d4:3e:ac:
c2:ae:eb:fa:ca:29:12:5c:ce:49:78:a8:c4:c3:5f:
14:65:11:29:ad:79:b4:63:67:6c:a8:7e:d0:7d:3e:
dd:00:14:c5:bd:48:27:b1:75:3f:0a:cd:37:e2:d9:
b2:f8:1b:85:3f:b6:90:ef:a6:0f:35:6a:01:20:7d:
8f:6c:c2:1a:1e:2a:85:7e:96:ac:57:aa:61:c1:7b:
5a:ea:b2:cb:1b:62:00:6e:8b:04:b8:97:cf:a4:3e:
86:a7:42:5d:1e:7f:d2:39:27:73:44:75:de:42:5f:
a1:22:88:07:5e:a8:b9:4c:a9:cd:a4:96:0b:ba:54:
a7:94:39:92:10:aa:03:27:b8:92:38:36:86:f6:ae:
25:82:09:a2:d6:60:bb:00:0c:8d:39:b5:88:a3:8e:
07:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:37:DA:4C:94:64:BF:7F:0D:2B:73:95:F0:FE:35:02:97:21:C2:95
X509v3 Authority Key Identifier:
keyid:2F:BA:00:37:56:D1:01:3B:94:3E:B4:F5:07:FB:4E:7C:74:77:82:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L7oAN1bRATuUPrT1B_tOfHR3gmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/622fdb-0e56-4c87-866b-b31f252f1969/1/BTfaTJRkv38NK3OV8P41ApchwpU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/622fdb-0e56-4c87-866b-b31f252f1969/1/L7oAN1bRATuUPrT1B_tOfHR3gmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.236.147.0/24
Signature Algorithm: sha256WithRSAEncryption
03:e1:17:df:db:ae:a0:96:22:e9:72:51:d2:42:7b:bb:52:b0:
17:97:28:5f:bf:82:d7:45:80:f8:4b:ab:4f:42:cd:4b:95:39:
87:4e:0e:6d:19:c1:f2:14:f2:3d:f5:68:3f:51:dc:74:5c:da:
04:b8:15:79:2f:01:66:f8:b9:6e:91:d6:f3:7b:fa:7c:5c:c1:
77:44:3b:fd:aa:db:00:f7:b0:64:c6:ac:02:09:a7:bc:3f:f7:
a8:2b:4a:23:be:2e:f0:8d:68:94:52:bb:cd:e4:df:05:35:4b:
52:4b:7d:25:de:f6:61:67:bc:99:c3:1b:d3:79:e7:ea:0e:60:
9c:87:b2:a1:71:fe:fa:51:fa:48:51:07:e2:b3:b8:71:37:b4:
17:03:b2:93:b4:fd:41:76:ee:b9:41:fb:4f:bf:89:9e:59:bf:
ab:d0:24:02:44:e5:bf:77:55:d2:81:ed:4a:3f:86:2e:95:08:
53:58:3a:86:ae:77:c7:68:39:cb:c0:92:30:d2:95:60:12:f9:
25:8f:bd:07:4e:73:2e:78:f8:25:61:63:5c:c9:14:97:06:4a:
1c:8e:78:19:5a:97:c8:44:8d:27:b1:ac:dc:f0:26:16:33:8b:
5e:b1:3a:86:8e:e9:6b:81:bd:6e:b4:6b:76:e6:91:ec:ea:7a:
0e:d4:eb:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:22:08 2025 by rpki-client