Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/B8bZtV2mRV9sCBezly3PXle-qIw.roa
File: B8bZtV2mRV9sCBezly3PXle-qIw.roa (raw, json)
Hash identifier: 5wW1JJ+c00QQaEYvk6qtqw+XWMri1beBJLlb9UntWns=
Subject key identifier: 07:C6:D9:B5:5D:A6:45:5F:6C:08:17:B3:97:2D:CF:5E:57:BE:A8:8C
Certificate issuer: /CN=064dcd0ee7014efb2e3b554fbb706384ef11d051
Certificate serial: 0199C330C82CABCEF9E368FBA4793CA2DD1A
Authority key identifier: 06:4D:CD:0E:E7:01:4E:FB:2E:3B:55:4F:BB:70:63:84:EF:11:D0:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bk3NDucBTvsuO1VPu3BjhO8R0FE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/B8bZtV2mRV9sCBezly3PXle-qIw.roa
Signing time: Wed 08 Oct 2025 09:39:38 +0000
ROA not before: Wed 08 Oct 2025 09:39:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198949
IP address blocks: 193.135.123.0/24 maxlen: 24
2a09:fb00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bk3NDucBTvsuO1VPu3BjhO8R0FE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c3:30:c8:2c:ab:ce:f9:e3:68:fb:a4:79:3c:a2:dd:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=064dcd0ee7014efb2e3b554fbb706384ef11d051
Validity
Not Before: Oct 8 09:39:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=07c6d9b55da6455f6c0817b3972dcf5e57bea88c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d2:c6:72:cb:23:cf:56:be:e2:c2:2d:a7:1a:
6b:1a:4e:ba:b1:47:ef:34:d9:f0:5a:92:64:e0:b1:
cc:ed:df:b3:b9:3d:b6:ac:f3:f6:5b:c5:b3:f8:08:
f1:09:cb:cc:50:6d:93:6a:41:88:62:98:08:b9:ff:
0a:bb:63:42:66:f0:81:ab:00:ed:d0:f5:de:18:8a:
e1:77:6d:35:80:47:3c:70:67:0a:28:68:09:0c:bf:
3d:08:27:89:67:da:04:08:9d:48:75:c5:25:ac:4a:
69:64:b0:9f:60:6b:d8:73:3f:bc:be:01:58:d2:3a:
99:1d:c7:a9:d9:07:af:d5:4b:b6:f0:b2:e0:fc:98:
5e:6a:19:3b:89:0a:59:58:9f:1a:31:65:d6:c1:f5:
cc:57:8f:af:78:7a:46:f1:91:81:92:e1:77:1b:86:
0e:8e:b8:cb:11:93:66:de:ac:8f:eb:41:e7:85:d5:
e3:2a:44:15:de:d7:47:70:b5:ae:7e:47:f4:31:9f:
36:f3:48:cc:8d:95:1b:45:eb:ac:02:7b:38:74:dc:
a7:ab:cf:71:55:c8:8d:8e:8d:2e:b2:14:84:8f:8a:
49:10:f2:b5:81:c9:a8:82:b8:f3:96:3a:78:91:36:
ea:87:fa:d9:dc:07:d3:a1:a4:07:dd:4b:c6:ac:41:
58:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:C6:D9:B5:5D:A6:45:5F:6C:08:17:B3:97:2D:CF:5E:57:BE:A8:8C
X509v3 Authority Key Identifier:
keyid:06:4D:CD:0E:E7:01:4E:FB:2E:3B:55:4F:BB:70:63:84:EF:11:D0:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bk3NDucBTvsuO1VPu3BjhO8R0FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/B8bZtV2mRV9sCBezly3PXle-qIw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.135.123.0/24
IPv6:
2a09:fb00::/29
Signature Algorithm: sha256WithRSAEncryption
b3:19:19:db:32:83:d8:dd:6b:9e:af:ae:98:d6:a9:66:a0:5d:
dd:e0:87:05:3a:62:3d:93:42:32:91:36:26:b2:93:61:1a:c2:
bf:d5:6d:db:b4:fe:62:72:fc:9e:bd:04:2b:ca:9c:3a:ea:8b:
e6:2e:44:3c:89:d1:2d:9e:3b:1f:91:96:ff:96:35:25:87:d4:
28:8c:3c:25:c0:fb:4b:54:54:58:ea:49:50:f2:0f:9a:e3:1b:
08:29:6a:b2:8e:54:67:96:e6:4e:b3:0d:71:7e:26:53:9e:7f:
9d:0c:4d:ae:ad:08:74:02:4d:b3:29:0a:97:c6:cf:a4:af:30:
21:86:9a:5d:18:ed:11:fb:98:5f:46:3e:26:ba:b8:d7:c6:c9:
3f:12:4b:96:4b:e8:45:11:dd:df:01:ed:c5:b0:1a:e5:f4:88:
ef:9a:9c:1b:26:e6:ea:ec:91:2a:32:79:2f:c7:f1:75:9a:0a:
90:09:49:40:79:9f:b0:dc:83:e8:3e:07:50:48:fe:f5:ba:d3:
20:1d:bb:4e:23:2f:88:5f:b9:27:8f:3b:4f:22:b6:f1:59:a8:
1a:37:38:86:b9:c5:2c:66:d9:6d:59:b2:d3:74:3a:b8:e9:0d:
87:6f:8b:6c:ac:10:36:d7:95:e3:f9:4c:cb:8b:af:3f:45:4c:
e1:2f:df:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:46:34 2025 by rpki-client