Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/2026d3-9f33-463e-8410-726da4e9386b/1/BgjyJzMeRVM_dVplx0v4ClSs-Pc.roa
File: BgjyJzMeRVM_dVplx0v4ClSs-Pc.roa (raw, json)
Hash identifier: LJvxw/FC4zfjF5g6AQd70v6Cuwb0CtEa7nkrZMsWZts=
Subject key identifier: 06:08:F2:27:33:1E:45:53:3F:75:5A:65:C7:4B:F8:0A:54:AC:F8:F7
Certificate issuer: /CN=f17f6957fc23b8d46b9d3dc8bc7db122859876f0
Certificate serial: 019932F9952E04DE938D6D0EFE54F2301E25
Authority key identifier: F1:7F:69:57:FC:23:B8:D4:6B:9D:3D:C8:BC:7D:B1:22:85:98:76:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8X9pV_wjuNRrnT3IvH2xIoWYdvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/2026d3-9f33-463e-8410-726da4e9386b/1/BgjyJzMeRVM_dVplx0v4ClSs-Pc.roa
Signing time: Wed 10 Sep 2025 09:34:01 +0000
ROA not before: Wed 10 Sep 2025 09:34:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49367
IP address blocks: 91.199.223.0/24 maxlen: 24
91.199.248.0/24 maxlen: 24
91.203.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/2026d3-9f33-463e-8410-726da4e9386b/1/8X9pV_wjuNRrnT3IvH2xIoWYdvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/2026d3-9f33-463e-8410-726da4e9386b/1/8X9pV_wjuNRrnT3IvH2xIoWYdvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/8X9pV_wjuNRrnT3IvH2xIoWYdvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:32:f9:95:2e:04:de:93:8d:6d:0e:fe:54:f2:30:1e:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f17f6957fc23b8d46b9d3dc8bc7db122859876f0
Validity
Not Before: Sep 10 09:34:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0608f227331e45533f755a65c74bf80a54acf8f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:17:27:b5:47:9a:32:8a:e2:2d:67:f7:38:3d:
09:7c:f7:79:4d:ee:bf:89:ca:4e:aa:5c:7f:77:3c:
54:93:ad:85:aa:75:49:b2:0e:35:f8:a9:ff:48:d1:
ff:65:8c:4e:87:72:cc:06:02:59:0c:7c:81:72:d6:
b9:40:e2:69:fb:37:cd:a7:3a:65:ed:cd:43:f6:6f:
90:03:88:6e:aa:89:ee:cb:12:b2:0c:74:bb:85:7f:
d4:a1:e4:ef:a6:dc:eb:bc:5f:de:7d:1f:05:22:27:
71:bb:88:1e:a7:a4:e7:a9:6c:8f:b2:e3:77:92:38:
02:a6:58:96:34:b2:7f:81:be:54:f3:b0:54:0c:9f:
c6:b1:37:c7:fa:d4:ba:16:6c:a0:9e:34:0d:db:0b:
6f:95:b6:a1:8f:75:0e:2f:50:57:3e:dd:e1:56:f1:
c8:9e:fa:b5:1a:07:99:07:b7:64:b3:d1:64:cd:b1:
ec:4d:22:e0:f4:1a:da:ee:3d:ec:0f:11:c6:b3:37:
7e:80:73:17:8b:48:de:2a:6f:e1:42:a0:fd:f5:ce:
fd:c8:62:d8:fc:36:cf:58:6a:29:e8:a4:43:69:c5:
6f:98:09:89:4e:4b:f9:f0:ba:bc:b1:6e:dd:ad:b6:
08:5b:21:ff:78:b2:f3:bb:fe:e5:b4:5d:86:00:86:
8b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:08:F2:27:33:1E:45:53:3F:75:5A:65:C7:4B:F8:0A:54:AC:F8:F7
X509v3 Authority Key Identifier:
keyid:F1:7F:69:57:FC:23:B8:D4:6B:9D:3D:C8:BC:7D:B1:22:85:98:76:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8X9pV_wjuNRrnT3IvH2xIoWYdvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/2026d3-9f33-463e-8410-726da4e9386b/1/BgjyJzMeRVM_dVplx0v4ClSs-Pc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/2026d3-9f33-463e-8410-726da4e9386b/1/8X9pV_wjuNRrnT3IvH2xIoWYdvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.223.0/24
91.199.248.0/24
91.203.220.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:8e:87:62:82:69:e3:66:89:3f:a3:8e:43:50:cc:02:3b:c4:
1b:24:c6:41:93:91:fd:8c:e3:75:36:44:95:00:7b:5c:0d:da:
e3:6c:60:3d:2e:9c:cd:83:ae:82:a5:ca:75:a6:89:5a:ae:47:
91:e0:9b:98:8b:43:b1:6b:5c:4a:f1:1d:c6:26:53:8d:38:1c:
65:08:e1:8f:0d:eb:46:6a:a3:d2:b2:40:ab:d3:52:b9:38:1a:
dd:81:5d:7c:a0:b2:a5:15:97:8d:fe:4c:1f:f7:e4:08:37:9f:
f2:b0:a2:9a:50:3c:ce:32:3e:d9:57:f9:a5:63:d3:67:39:6f:
e3:01:4f:3b:6d:a4:50:d0:bb:b9:49:b0:fd:ed:cf:82:b3:12:
32:f5:01:55:7b:fc:04:2e:65:77:55:07:85:67:a9:7a:02:aa:
d8:74:2d:51:61:e4:e0:4a:00:cb:3f:b2:24:7f:62:b7:33:4a:
a8:d1:ab:66:f5:ad:9d:f4:fd:9f:d5:1f:2c:1b:80:ea:63:83:
c6:53:c8:de:31:48:e2:ed:c3:33:c6:77:f4:58:f6:9c:a9:51:
bd:c6:9d:6c:01:d7:d0:68:82:e5:e9:a8:cb:06:fe:0a:78:81:
dc:3e:bf:99:7b:e6:50:91:86:a8:0d:bc:d3:32:f5:ce:35:5d:
56:fa:ce:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:14:37 2025 by rpki-client