Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/bef2KuKcJAMamvz0TVXs-qJ_V7A.roa
File: bef2KuKcJAMamvz0TVXs-qJ_V7A.roa (raw, json)
Hash identifier: XsMssR0GRIHZKbVFvC5zdkQCQ8TXXybVYnAS1M8uGbw=
Subject key identifier: 6D:E7:F6:2A:E2:9C:24:03:1A:9A:FC:F4:4D:55:EC:FA:A2:7F:57:B0
Certificate issuer: /CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250
Certificate serial: 0199CA56EB9B142A7CC949D7742433F10292
Authority key identifier: 5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/bef2KuKcJAMamvz0TVXs-qJ_V7A.roa
Signing time: Thu 09 Oct 2025 18:58:37 +0000
ROA not before: Thu 09 Oct 2025 18:58:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8274
IP address blocks: 31.133.46.0/24 maxlen: 24
176.124.20.0/23 maxlen: 23
176.124.20.0/24 maxlen: 24
176.124.21.0/24 maxlen: 24
176.124.22.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ca:56:eb:9b:14:2a:7c:c9:49:d7:74:24:33:f1:02:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250
Validity
Not Before: Oct 9 18:58:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6de7f62ae29c24031a9afcf44d55ecfaa27f57b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:2c:ea:34:01:52:03:d6:60:8f:c8:50:ac:91:
7c:5c:4a:0a:3f:5e:6a:54:ed:a3:b2:3f:d7:0a:0a:
19:2a:3c:fc:99:ac:66:19:83:81:e4:b8:12:e5:fa:
bd:00:99:df:4b:26:54:ae:01:e7:b2:a1:4d:18:e1:
c8:a8:6e:96:9b:3e:a6:f5:18:11:a4:e7:12:30:dd:
64:c0:65:da:33:08:28:85:3d:67:32:10:55:62:c2:
e1:3f:35:ef:f4:2e:49:77:ae:67:db:04:1b:f6:86:
38:32:65:96:73:a0:d5:ec:8f:74:ed:c6:c4:ca:88:
f1:4d:ca:a3:a2:b6:31:5d:41:f6:d7:6b:60:d1:13:
83:91:c9:e5:8b:4f:28:09:6a:e5:78:dc:18:2c:0e:
d0:c7:c4:f6:db:05:ea:7d:cf:ec:73:02:b6:75:dc:
ea:e1:8d:be:06:30:57:46:e2:98:60:82:12:46:a6:
4e:f8:c1:78:3a:f4:d8:f3:ef:87:8b:f5:5e:a9:91:
e9:81:dc:47:2a:e0:f4:c1:73:44:68:be:e3:1c:ab:
88:e8:79:16:fc:78:ab:b6:e9:48:ab:87:0c:58:6c:
c2:77:4a:99:83:03:2f:58:6d:9b:51:02:3b:2e:be:
cc:ce:f1:b5:4e:0b:d6:3d:05:d3:d1:5a:79:21:3e:
da:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:E7:F6:2A:E2:9C:24:03:1A:9A:FC:F4:4D:55:EC:FA:A2:7F:57:B0
X509v3 Authority Key Identifier:
keyid:5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/bef2KuKcJAMamvz0TVXs-qJ_V7A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.133.46.0/24
176.124.20.0/22
Signature Algorithm: sha256WithRSAEncryption
81:97:cf:d9:0f:76:00:df:bc:ae:48:08:b4:3e:ce:fe:54:40:
f0:8a:3d:71:15:20:dd:37:ff:56:df:48:d1:44:37:3d:e3:1f:
af:b9:f8:ec:0a:62:c8:86:e6:45:6d:fd:7e:9f:7d:22:fc:ae:
bf:78:12:2b:17:0b:fe:5a:14:4f:c9:5d:2d:8f:81:fa:15:7f:
42:fc:5b:8f:24:2a:72:83:b6:72:15:7c:d7:04:40:4f:49:fa:
e1:8b:fc:da:fb:bd:e6:a3:f2:60:75:b0:09:ca:22:66:82:59:
30:13:df:ad:78:0b:32:34:d7:f1:88:c7:0f:53:37:b9:d0:31:
39:9e:b4:d8:ab:3d:3f:cc:35:17:b5:f8:f3:b9:f4:8a:a5:bd:
f4:0d:d7:f0:45:f0:c5:f7:4c:95:aa:b3:91:c5:ab:ee:e4:e7:
99:e7:29:d3:9c:95:64:49:17:be:0a:3a:b7:82:22:ef:f7:6c:
d0:58:b6:02:0a:d0:db:11:e7:a8:d5:2b:35:3d:57:6b:3c:ae:
8f:f8:cb:a8:1e:a1:e7:be:85:cd:3e:cd:ef:4d:19:08:e6:be:
0f:c7:59:00:bd:5f:f3:fc:92:00:2d:49:51:a5:7c:56:6f:65:
80:4c:78:1d:b0:08:ce:61:60:ad:d0:48:5b:b1:63:4e:c8:c9:
e8:da:53:9c
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZnKVuubFCp8yUnXdCQz8QKSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjNjRmOWQwNGVmZDVhOWZjMmUyM2I0MmQ1YjUxYWVmZDlh
NTAyNTAwHhcNMjUxMDA5MTg1ODM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZGU3ZjYyYWUyOWMyNDAzMWE5YWZjZjQ0ZDU1ZWNmYWEyN2Y1N2IwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzyzqNAFSA9Zgj8hQrJF8XEoKP15q
VO2jsj/XCgoZKjz8maxmGYOB5LgS5fq9AJnfSyZUrgHnsqFNGOHIqG6Wmz6m9RgR
pOcSMN1kwGXaMwgohT1nMhBVYsLhPzXv9C5Jd65n2wQb9oY4MmWWc6DV7I907cbE
yojxTcqjorYxXUH212tg0RODkcnli08oCWrleNwYLA7Qx8T22wXqfc/scwK2ddzq
4Y2+BjBXRuKYYIISRqZO+MF4OvTY8++Hi/VeqZHpgdxHKuD0wXNEaL7jHKuI6HkW
/HirtulIq4cMWGzCd0qZgwMvWG2bUQI7Lr7MzvG1TgvWPQXT0Vp5IT7a0wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFG3n9irinCQDGpr89E1V7Pqif1ewMB8GA1UdIwQY
MBaAFFxk+dBO/VqfwuI7QtW1Gu/ZpQJQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEdUNTBFNzlXcF9DNGp0QzFiVWE3OW1sQWxBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8xODQ5YTYtZjkyMS00YjUwLTkxNWUt
YjY2ZmE0ZjQ3NjNhLzEvYmVmMkt1S2NKQU1hbXZ6MFRWWHMtcUpfVjdBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS8xODQ5YTYtZjkyMS00YjUwLTkxNWUtYjY2ZmE0ZjQ3NjNh
LzEvWEdUNTBFNzlXcF9DNGp0QzFiVWE3OW1sQWxBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAH4UuAwQC
sHwUMA0GCSqGSIb3DQEBCwUAA4IBAQCBl8/ZD3YA37yuSAi0Ps7+VEDwij1xFSDd
N/9W30jRRDc94x+vufjsCmLIhuZFbf1+n30i/K6/eBIrFwv+WhRPyV0tj4H6FX9C
/FuPJCpyg7ZyFXzXBEBPSfrhi/za+73mo/JgdbAJyiJmglkwE9+teAsyNNfxiMcP
Uze50DE5nrTYqz0/zDUXtfjzufSKpb30DdfwRfDF90yVqrORxavu5OeZ5ynTnJVk
SRe+Cjq3giLv92zQWLYCCtDbEeeo1Ss1PVdrPK6P+MuoHqHnvoXNPs3vTRkI5r4P
x1kAvV/z/JIALUlRpXxWb2WATHgdsAjOYWCt0EhbsWNOyMno2lOc
-----END CERTIFICATE-----
Generated at Sun Oct 19 21:16:09 2025 by rpki-client