Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/b428e7-653c-46c7-973f-9db614cb127a/1/Dc-BfiZIADDfJyyUXbSq_9zpR8c.roa
File: Dc-BfiZIADDfJyyUXbSq_9zpR8c.roa (raw, json)
Hash identifier: FPbL8Lg90NHmUgvGvaONurl4W9W2qlIvpuWREBmyr5M=
Subject key identifier: 0D:CF:81:7E:26:48:00:30:DF:27:2C:94:5D:B4:AA:FF:DC:E9:47:C7
Certificate issuer: /CN=04bec7578450f945d4f334df600c61a6f47232f2
Certificate serial: 01999AFBE213E8BAAAF9668F053A3F86AA4B
Authority key identifier: 04:BE:C7:57:84:50:F9:45:D4:F3:34:DF:60:0C:61:A6:F4:72:32:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BL7HV4RQ-UXU8zTfYAxhpvRyMvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/b428e7-653c-46c7-973f-9db614cb127a/1/Dc-BfiZIADDfJyyUXbSq_9zpR8c.roa
Signing time: Tue 30 Sep 2025 14:17:02 +0000
ROA not before: Tue 30 Sep 2025 14:17:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204692
IP address blocks: 185.243.29.0/24 maxlen: 24
185.243.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/b428e7-653c-46c7-973f-9db614cb127a/1/BL7HV4RQ-UXU8zTfYAxhpvRyMvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/b428e7-653c-46c7-973f-9db614cb127a/1/BL7HV4RQ-UXU8zTfYAxhpvRyMvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/BL7HV4RQ-UXU8zTfYAxhpvRyMvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:9a:fb:e2:13:e8:ba:aa:f9:66:8f:05:3a:3f:86:aa:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04bec7578450f945d4f334df600c61a6f47232f2
Validity
Not Before: Sep 30 14:17:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0dcf817e26480030df272c945db4aaffdce947c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:9a:43:54:19:0a:d5:a1:e0:60:47:9c:d7:bc:
38:18:92:3c:c6:d6:12:94:bc:17:95:86:90:07:04:
dd:e3:99:80:29:16:c1:e4:ce:a7:b6:e7:e3:86:77:
0c:cb:e6:f7:36:04:29:c0:e8:a6:2b:09:8e:92:ec:
58:df:7b:50:17:2f:3d:ac:85:c8:49:aa:0c:1d:92:
65:24:37:68:44:47:82:68:dd:d0:fb:81:2d:a2:e2:
80:fe:18:c4:1d:23:27:ee:83:be:a9:06:cd:fe:3f:
64:3f:3f:b1:91:bb:09:26:61:45:5e:24:4e:08:b5:
d8:7a:0d:27:91:70:03:55:86:24:ee:83:a4:b4:ac:
7c:16:f9:32:a9:67:22:70:80:fe:da:92:35:8b:34:
57:fb:a1:c5:c5:34:aa:12:64:ab:50:82:bb:a1:ab:
c1:6a:f6:ee:b7:51:92:16:f1:6d:59:0d:8b:21:c1:
9d:3f:66:3d:8e:d2:9c:5d:0b:e7:90:c2:56:7e:9d:
0b:fd:15:10:0b:c0:f4:fc:15:be:18:30:e7:42:a3:
14:7e:56:6a:ea:2f:b1:c9:a6:cd:09:ec:34:8e:0a:
26:fe:bb:b0:2d:8e:74:58:01:53:23:ba:da:e1:51:
26:89:8f:76:52:93:1b:7b:47:f0:e5:75:d7:f9:33:
d9:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:CF:81:7E:26:48:00:30:DF:27:2C:94:5D:B4:AA:FF:DC:E9:47:C7
X509v3 Authority Key Identifier:
keyid:04:BE:C7:57:84:50:F9:45:D4:F3:34:DF:60:0C:61:A6:F4:72:32:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BL7HV4RQ-UXU8zTfYAxhpvRyMvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b428e7-653c-46c7-973f-9db614cb127a/1/Dc-BfiZIADDfJyyUXbSq_9zpR8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b428e7-653c-46c7-973f-9db614cb127a/1/BL7HV4RQ-UXU8zTfYAxhpvRyMvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.243.29.0-185.243.30.255
Signature Algorithm: sha256WithRSAEncryption
0a:5c:2c:1f:10:82:ae:fc:03:7f:70:e9:f7:d5:a4:88:a6:9a:
2f:c0:aa:62:5a:f0:46:a1:8c:96:f5:83:7b:63:c4:2f:92:4a:
77:b5:75:b1:b0:11:14:9d:0a:f2:33:dc:8b:47:29:73:96:80:
50:5a:d5:f9:aa:2c:56:af:5f:a1:15:b9:38:30:e7:21:b7:21:
9c:23:7a:a9:71:09:51:45:15:4b:f8:b2:59:1d:ed:b5:3f:98:
c1:de:82:b4:4c:75:f8:02:b6:d9:ad:77:ec:e3:15:14:d9:36:
cb:37:9e:76:be:16:c9:19:84:e3:ff:7c:ce:a9:fd:d4:87:84:
e8:84:84:77:78:c6:56:8d:68:2c:3e:4c:69:86:6f:f0:69:ca:
e8:bf:45:f7:1c:76:60:96:9c:8f:2d:13:9a:42:7f:58:50:ab:
1d:a2:ce:6b:d5:bb:d0:44:a0:82:0d:a8:93:ee:c3:e3:f3:e3:
b9:48:ea:1e:5a:67:1a:4a:95:41:70:1b:44:79:a6:d7:6a:00:
2b:01:2c:1f:5b:40:93:be:eb:d5:36:32:fe:31:97:51:eb:d0:
bf:19:77:34:34:33:e9:11:86:c7:56:e0:5a:dd:dc:b9:19:9e:
3a:8f:eb:ce:d7:06:f1:ba:a4:af:5e:06:9d:7c:c3:2f:cd:36:
19:b6:d8:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:05:01 2025 by rpki-client