Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/31d2ed-8e2f-4fa9-83ca-70405e3528af/1/Bia10WQI4xw0UI_i-ndQUbuN950.roa
File: Bia10WQI4xw0UI_i-ndQUbuN950.roa (raw, json)
Hash identifier: cjV4yJiHMdoyYcYcYJ8yPol8C2FCborf12L6f+mp+8Y=
Subject key identifier: 06:26:B5:D1:64:08:E3:1C:34:50:8F:E2:FA:77:50:51:BB:8D:F7:9D
Certificate issuer: /CN=76e2ba5cc150b353cbd34b9f045ea0509740844d
Certificate serial: 0197DDF09B31D7CCEDD9655734CE2DF0398D
Authority key identifier: 76:E2:BA:5C:C1:50:B3:53:CB:D3:4B:9F:04:5E:A0:50:97:40:84:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/duK6XMFQs1PL00ufBF6gUJdAhE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/31d2ed-8e2f-4fa9-83ca-70405e3528af/1/Bia10WQI4xw0UI_i-ndQUbuN950.roa
Signing time: Sun 06 Jul 2025 04:13:42 +0000
ROA not before: Sun 06 Jul 2025 04:13:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200069
IP address blocks: 185.211.120.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/31d2ed-8e2f-4fa9-83ca-70405e3528af/1/duK6XMFQs1PL00ufBF6gUJdAhE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/31d2ed-8e2f-4fa9-83ca-70405e3528af/1/duK6XMFQs1PL00ufBF6gUJdAhE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/duK6XMFQs1PL00ufBF6gUJdAhE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:dd:f0:9b:31:d7:cc:ed:d9:65:57:34:ce:2d:f0:39:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76e2ba5cc150b353cbd34b9f045ea0509740844d
Validity
Not Before: Jul 6 04:13:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0626b5d16408e31c34508fe2fa775051bb8df79d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b1:86:ad:71:06:69:d4:ed:37:1f:49:b3:a6:
2a:e2:db:09:e8:8f:7c:f6:f1:4d:21:c5:d0:65:60:
01:52:3f:3a:f3:06:9d:ab:3f:3a:73:94:dc:1d:49:
28:78:d7:44:99:42:d0:44:2a:50:c3:ff:0d:6c:51:
4e:ff:29:e6:72:ae:da:30:5d:03:f0:c4:09:fa:93:
f2:e0:e4:57:8b:ba:bb:a8:1c:ba:ca:ab:82:f0:bd:
8b:68:f3:77:1c:c7:cc:0b:38:8e:fc:99:17:fc:f8:
ac:0e:7c:90:f6:fd:d4:c7:3e:9c:97:cc:8e:aa:cc:
78:69:bf:3d:16:e3:6c:61:f1:63:b6:d4:71:d0:f0:
91:e2:fe:09:35:f5:f4:3d:0a:6d:b2:eb:c5:ad:d2:
99:24:da:62:51:18:b8:31:ec:29:d7:7e:8d:d4:2e:
bb:53:d7:1a:83:1e:d6:77:17:62:78:c0:5f:78:3c:
21:97:79:f1:91:60:c4:d0:70:12:f4:47:3d:78:24:
5f:2c:b5:8c:2a:17:e5:89:8a:79:e6:e1:7a:43:1e:
da:2a:3d:52:21:dc:7c:21:5c:89:9e:ea:d7:2b:b9:
25:10:81:7f:b9:2e:c9:cb:b4:26:e7:f5:0b:3b:4b:
32:1f:e8:7a:ee:59:d7:95:41:cf:14:a2:ad:33:94:
f5:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:26:B5:D1:64:08:E3:1C:34:50:8F:E2:FA:77:50:51:BB:8D:F7:9D
X509v3 Authority Key Identifier:
keyid:76:E2:BA:5C:C1:50:B3:53:CB:D3:4B:9F:04:5E:A0:50:97:40:84:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/duK6XMFQs1PL00ufBF6gUJdAhE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/31d2ed-8e2f-4fa9-83ca-70405e3528af/1/Bia10WQI4xw0UI_i-ndQUbuN950.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/31d2ed-8e2f-4fa9-83ca-70405e3528af/1/duK6XMFQs1PL00ufBF6gUJdAhE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.211.120.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:80:5e:6d:5f:77:55:5c:a1:b1:fe:e9:77:f5:29:78:44:49:
72:4f:08:56:6a:e1:63:6d:8e:bf:b0:e1:29:74:16:13:ec:bc:
31:c8:fe:d0:ac:00:12:fe:12:cb:15:6a:27:0d:2c:dc:c3:24:
2c:62:e3:87:ce:9b:e5:09:9c:3a:a4:74:a8:a6:9d:4c:b5:86:
a5:f5:e0:5c:4b:8c:cc:9d:fc:f4:b1:d3:79:81:17:1b:9a:1e:
5c:70:ea:04:7f:fb:e8:33:09:d3:0d:2d:45:a2:54:b3:67:01:
d5:46:e4:90:3a:a3:1a:e5:cd:65:e4:30:17:14:92:40:ed:81:
a4:85:9f:ca:9f:3d:be:62:2a:8f:53:c6:ab:b2:4e:70:2c:0b:
a1:96:ca:91:69:c4:0f:38:eb:73:43:fb:17:02:c9:c0:9e:4b:
5c:fe:36:d8:50:39:8b:22:67:19:a1:8c:64:32:23:ec:36:e3:
29:ff:20:96:38:92:1a:07:91:ef:ce:33:5c:76:fc:77:74:96:
52:85:cc:69:d6:50:37:82:4e:35:db:9c:0a:34:ee:85:1a:a6:
53:86:a3:b3:0c:b6:2b:93:da:ef:d4:75:7f:d6:d1:ff:53:ff:
e6:ab:e5:0d:ab:69:a8:9b:ff:29:85:d5:69:7b:e1:52:16:02:
4e:61:8c:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:37:09 2025 by rpki-client