Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/e28ba6-aaaf-4d33-b8dc-0aee360b0ba4/1/BTQ2T4s7Bi8PsgUEyLikXn-pHWs.roa
File: BTQ2T4s7Bi8PsgUEyLikXn-pHWs.roa (raw, json)
Hash identifier: jvi2S16v32ozU1Uu3umrDAhUdlnlUTtdyHiZNaA97GQ=
Subject key identifier: 05:34:36:4F:8B:3B:06:2F:0F:B2:05:04:C8:B8:A4:5E:7F:A9:1D:6B
Certificate issuer: /CN=5a68d699d1a9457c78acfbec004f98677aa4cc16
Certificate serial: 0198D1EECB038DED2C8711B851D2262C0AEB
Authority key identifier: 5A:68:D6:99:D1:A9:45:7C:78:AC:FB:EC:00:4F:98:67:7A:A4:CC:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WmjWmdGpRXx4rPvsAE-YZ3qkzBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/e28ba6-aaaf-4d33-b8dc-0aee360b0ba4/1/BTQ2T4s7Bi8PsgUEyLikXn-pHWs.roa
Signing time: Fri 22 Aug 2025 13:19:04 +0000
ROA not before: Fri 22 Aug 2025 13:19:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12676
IP address blocks: 88.205.0.0/20 maxlen: 24
88.205.32.0/19 maxlen: 24
88.205.64.0/19 maxlen: 24
88.205.96.0/19 maxlen: 24
185.90.228.0/22 maxlen: 24
212.46.96.0/19 maxlen: 24
213.9.0.0/17 maxlen: 24
2a02:4c00::/40 maxlen: 40
2a02:4c00:100::/40 maxlen: 40
2a02:4c07:4000::/34 maxlen: 34
2a02:4c07:8000::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/e28ba6-aaaf-4d33-b8dc-0aee360b0ba4/1/WmjWmdGpRXx4rPvsAE-YZ3qkzBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/e28ba6-aaaf-4d33-b8dc-0aee360b0ba4/1/WmjWmdGpRXx4rPvsAE-YZ3qkzBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/WmjWmdGpRXx4rPvsAE-YZ3qkzBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 07:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d1:ee:cb:03:8d:ed:2c:87:11:b8:51:d2:26:2c:0a:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a68d699d1a9457c78acfbec004f98677aa4cc16
Validity
Not Before: Aug 22 13:19:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0534364f8b3b062f0fb20504c8b8a45e7fa91d6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:33:7a:df:d9:4c:b3:fa:3b:ae:91:6a:b7:54:
ac:62:58:c9:16:e6:03:69:9d:5f:c9:47:b7:bf:d6:
37:06:42:16:02:aa:d1:cf:ab:ec:40:b8:15:30:b6:
d9:c9:45:55:c2:09:16:ee:6d:d8:e5:ab:88:82:5e:
1b:85:bd:89:59:10:db:2a:33:b4:3f:91:7e:2e:c1:
1c:51:30:ef:f3:ad:83:d3:c4:f9:47:51:4e:be:49:
b0:01:f0:74:0d:07:cd:3f:a3:e6:d9:01:03:15:e9:
be:48:f2:01:af:f6:97:fe:ed:5c:22:90:52:39:fb:
ac:b2:41:02:af:70:06:e4:74:75:55:ed:f3:2a:ca:
20:5a:e7:87:b7:38:f3:d6:a9:84:8a:2f:38:b4:fe:
36:b3:0e:1e:70:93:43:b8:b0:c1:b5:e6:7c:e3:cc:
bf:3c:03:b9:2f:08:e4:8c:4e:26:f4:2f:e2:f3:d1:
80:47:b3:b5:82:b3:4a:ab:06:58:0c:58:7b:78:81:
34:d9:10:93:1b:ed:97:f0:d9:8d:76:59:ea:b1:0d:
df:21:1a:d6:f7:55:ee:09:5d:ff:5f:4c:43:d4:8c:
d2:36:67:f0:66:76:18:8f:76:9a:46:6b:83:50:b3:
44:77:6b:a9:0d:1d:13:e6:ea:be:32:33:47:d3:9f:
37:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:34:36:4F:8B:3B:06:2F:0F:B2:05:04:C8:B8:A4:5E:7F:A9:1D:6B
X509v3 Authority Key Identifier:
keyid:5A:68:D6:99:D1:A9:45:7C:78:AC:FB:EC:00:4F:98:67:7A:A4:CC:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WmjWmdGpRXx4rPvsAE-YZ3qkzBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e28ba6-aaaf-4d33-b8dc-0aee360b0ba4/1/BTQ2T4s7Bi8PsgUEyLikXn-pHWs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e28ba6-aaaf-4d33-b8dc-0aee360b0ba4/1/WmjWmdGpRXx4rPvsAE-YZ3qkzBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.205.0.0/20
88.205.32.0-88.205.127.255
185.90.228.0/22
212.46.96.0/19
213.9.0.0/17
IPv6:
2a02:4c00::/39
2a02:4c07:4000::-2a02:4c07:bfff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
8b:77:8a:d8:2e:07:fe:68:0b:e8:7b:cf:e1:af:20:29:68:c7:
e0:ea:02:23:f3:db:b2:bc:2a:b7:59:1a:a0:33:96:05:af:f8:
f4:50:21:df:58:bc:6b:f6:66:70:05:9b:c0:a5:02:13:ba:f8:
90:c0:e5:ee:ab:90:17:b0:9c:1c:47:48:5a:1b:9b:17:54:bd:
1d:0d:bc:ea:2f:d5:92:14:ed:70:80:58:ec:49:0a:b7:1d:84:
6d:bf:4b:57:73:c6:a4:d3:26:a6:be:17:27:8b:1f:11:4e:72:
f3:80:af:96:cb:09:48:37:a7:29:ea:fd:8f:e5:5c:45:00:48:
59:1b:cc:c9:95:71:a5:d9:92:b2:14:5e:b0:cf:08:92:2e:4f:
9e:bb:50:e2:f6:f9:81:f6:f1:5a:b7:69:92:55:94:61:b1:5c:
07:75:c1:d9:d0:2a:86:31:f7:7b:b1:71:b8:9e:ab:94:9a:c5:
79:95:c2:28:8c:da:35:bb:21:35:a8:c8:63:d2:d0:1b:41:91:
44:1e:49:bc:90:bd:35:92:7f:f7:8a:50:5f:74:fe:1d:6a:64:
5b:a2:18:5f:9f:8b:83:98:72:f0:0e:a1:e3:2e:f5:6e:cc:00:
72:b6:65:2f:92:76:75:66:e1:75:50:ae:b8:89:2c:75:b0:05:
04:5d:cb:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:17:48 2025 by rpki-client