Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/BXgVouFdoBZH9PxQN6YZC-UNnp8.roa
File: BXgVouFdoBZH9PxQN6YZC-UNnp8.roa (raw, json)
Hash identifier: IG8ZE4QQHca+u7/RIuaDccmD8aLVhSHwZtoLhRiyOnk=
Subject key identifier: 05:78:15:A2:E1:5D:A0:16:47:F4:FC:50:37:A6:19:0B:E5:0D:9E:9F
Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Certificate serial: 0199DEEF72737B5B0B6E9578BEE651B2D17C
Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/BXgVouFdoBZH9PxQN6YZC-UNnp8.roa
Signing time: Mon 13 Oct 2025 18:57:38 +0000
ROA not before: Mon 13 Oct 2025 18:57:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48120
IP address blocks: 170.168.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 15:16:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:de:ef:72:73:7b:5b:0b:6e:95:78:be:e6:51:b2:d1:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Validity
Not Before: Oct 13 18:57:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=057815a2e15da01647f4fc5037a6190be50d9e9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c4:61:5d:88:cc:f8:02:69:f0:ad:31:51:fa:
2d:19:ff:bc:52:99:17:99:ad:92:e7:67:90:3d:32:
77:c4:82:ff:e4:f5:5f:b1:17:f9:10:1a:a8:72:e1:
6b:58:e3:f6:a2:45:68:d9:03:88:37:2a:d9:66:96:
a7:a0:b6:d8:46:48:a3:9b:eb:f7:4b:27:f4:65:42:
41:ae:8e:7f:ab:db:f6:70:78:f7:07:34:a4:bd:c8:
3a:fb:19:46:15:b9:80:ed:fd:8b:b4:47:9a:c8:9d:
7f:84:6b:de:72:27:6b:f6:bd:a9:3c:c8:41:7d:f4:
be:f1:61:d0:ab:96:2b:ae:09:e3:c5:18:21:91:90:
90:2f:3f:f9:ad:49:fa:c4:dc:3e:83:74:67:39:18:
c4:b2:0e:e1:d2:3a:13:1f:08:0c:3d:be:49:d4:a0:
61:1a:c1:e4:ad:9c:26:97:5a:97:13:65:d2:1b:b7:
84:d6:85:cd:92:3e:6a:70:69:99:34:b4:99:3d:06:
4b:99:db:73:0b:74:03:58:07:ef:c5:f5:83:3a:16:
28:51:65:e5:b9:92:dd:fe:47:87:c8:7d:a7:7d:68:
eb:45:a1:02:dd:3a:fe:09:f3:20:9f:a8:f4:85:85:
8e:41:ab:49:4f:94:97:d3:61:17:73:d9:c4:28:06:
47:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:78:15:A2:E1:5D:A0:16:47:F4:FC:50:37:A6:19:0B:E5:0D:9E:9F
X509v3 Authority Key Identifier:
keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/BXgVouFdoBZH9PxQN6YZC-UNnp8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.168.73.0/24
Signature Algorithm: sha256WithRSAEncryption
03:68:db:fd:e1:f3:74:42:14:9a:7b:3b:bb:a1:a2:47:57:13:
0a:b3:82:b3:a7:3c:5e:e4:6a:ee:f9:3c:23:75:ea:ec:ca:a5:
5a:5b:f4:ba:79:c8:09:b6:7e:4a:23:f7:f8:44:4d:99:34:f1:
68:63:fd:d2:f2:d8:02:c2:48:72:46:72:5e:8d:79:ee:3b:41:
77:8f:72:f8:64:8e:b2:d1:2a:75:21:80:a2:68:70:fc:5e:38:
47:6d:0f:37:fd:8b:2f:b3:79:44:80:82:23:37:98:5d:ec:18:
88:92:da:28:8b:10:43:37:b7:e0:2b:b6:c5:09:6f:d5:eb:c4:
25:e0:f9:22:28:91:6a:18:cf:d2:54:91:33:bf:a7:7e:af:75:
cf:77:d4:6f:b3:82:6b:e1:b2:b2:01:d9:07:62:c3:50:b0:80:
96:6d:24:89:dc:5a:4e:cb:ff:0b:e1:f5:db:d9:e5:3f:5a:52:
0c:9a:2c:df:b0:5b:c7:4a:fd:6d:43:e8:37:03:82:16:e1:e3:
84:be:bc:bf:a9:97:21:17:be:42:2e:8c:36:65:10:6f:05:9a:
cf:01:d0:01:ca:a8:15:a2:27:7d:66:2e:5c:da:af:f8:c3:61:
fd:7a:49:5a:dd:1e:06:85:36:7c:60:ac:94:98:d4:9a:bd:65:
fa:b7:ea:2e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZne73Jze1sLbpV4vuZRstF8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlNmE4NmU2MmYwY2U5OGUwMmU5ODA4NjlmZjQ0MTRlZTJh
MGYwY2UwHhcNMjUxMDEzMTg1NzM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNTc4MTVhMmUxNWRhMDE2NDdmNGZjNTAzN2E2MTkwYmU1MGQ5ZTlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocRhXYjM+AJp8K0xUfotGf+8UpkX
ma2S52eQPTJ3xIL/5PVfsRf5EBqocuFrWOP2okVo2QOINyrZZpanoLbYRkijm+v3
Syf0ZUJBro5/q9v2cHj3BzSkvcg6+xlGFbmA7f2LtEeayJ1/hGvecidr9r2pPMhB
ffS+8WHQq5YrrgnjxRghkZCQLz/5rUn6xNw+g3RnORjEsg7h0joTHwgMPb5J1KBh
GsHkrZwml1qXE2XSG7eE1oXNkj5qcGmZNLSZPQZLmdtzC3QDWAfvxfWDOhYoUWXl
uZLd/keHyH2nfWjrRaEC3Tr+CfMgn6j0hYWOQatJT5SX02EXc9nEKAZH+QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAV4FaLhXaAWR/T8UDemGQvlDZ6fMB8GA1UdIwQY
MBaAFC5qhuYvDOmOAumAhp/0QU7ioPDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2Et
YTY2N2JiNzY1MDYwLzEvQlhnVm91RmRvQlpIOVB4UU42WVpDLVVObnA4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2EtYTY2N2JiNzY1MDYw
LzEvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqqhJMA0G
CSqGSIb3DQEBCwUAA4IBAQADaNv94fN0QhSaezu7oaJHVxMKs4Kzpzxe5Gru+Twj
dersyqVaW/S6ecgJtn5KI/f4RE2ZNPFoY/3S8tgCwkhyRnJejXnuO0F3j3L4ZI6y
0Sp1IYCiaHD8XjhHbQ83/Ysvs3lEgIIjN5hd7BiIktooixBDN7fgK7bFCW/V68Ql
4PkiKJFqGM/SVJEzv6d+r3XPd9Rvs4Jr4bKyAdkHYsNQsICWbSSJ3FpOy/8L4fXb
2eU/WlIMmizfsFvHSv1tQ+g3A4IW4eOEvry/qZchF75CLow2ZRBvBZrPAdAByqgV
oid9Zi5c2q/4w2H9ekla3R4GhTZ8YKyUmNSavWX6t+ou
-----END CERTIFICATE-----
Generated at Tue Oct 21 01:08:16 2025 by rpki-client