Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/bmLTewV0kZU9bfOTKlVtrHvIMyQ.roa
File: bmLTewV0kZU9bfOTKlVtrHvIMyQ.roa (raw, json)
Hash identifier: 1N2udKCYu0d+0ddwjQonUl6aLmfYMfYwRiupNuK5mRs=
Subject key identifier: 6E:62:D3:7B:05:74:91:95:3D:6D:F3:93:2A:55:6D:AC:7B:C8:33:24
Certificate issuer: /CN=d00b37b6f4b445645e6993a9c5ec608492425f0e
Certificate serial: 0199C85E774E02EB74D26C51004F93A15474
Authority key identifier: D0:0B:37:B6:F4:B4:45:64:5E:69:93:A9:C5:EC:60:84:92:42:5F:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/bmLTewV0kZU9bfOTKlVtrHvIMyQ.roa
Signing time: Thu 09 Oct 2025 09:47:38 +0000
ROA not before: Thu 09 Oct 2025 09:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214996
IP address blocks: 152.53.31.0/24 maxlen: 24
152.53.36.0/22 maxlen: 24
152.53.52.0/22 maxlen: 22
152.53.68.0/24 maxlen: 24
152.53.80.0/22 maxlen: 22
152.53.88.0/22 maxlen: 22
152.53.164.0/22 maxlen: 22
152.53.168.0/22 maxlen: 22
152.53.192.0/20 maxlen: 32
152.53.201.0/24 maxlen: 24
152.53.208.0/20 maxlen: 22
152.53.240.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c8:5e:77:4e:02:eb:74:d2:6c:51:00:4f:93:a1:54:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d00b37b6f4b445645e6993a9c5ec608492425f0e
Validity
Not Before: Oct 9 09:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6e62d37b057491953d6df3932a556dac7bc83324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:56:51:a7:2e:05:3f:45:fd:46:5a:4f:4f:55:
8f:15:d9:f3:c4:52:1c:27:b4:c9:37:80:b8:92:92:
bf:eb:ca:ff:7b:4f:64:f0:51:68:f2:bf:29:e2:39:
e8:42:4b:3c:88:71:6d:5b:d3:e8:24:8b:68:06:21:
21:30:43:dd:04:51:bb:40:52:bc:18:6f:8e:09:0d:
d4:d0:44:b0:af:c4:36:e5:5b:54:a0:c2:eb:f5:b7:
0e:00:d0:8e:b5:4f:6c:e6:89:bc:d9:27:78:a9:24:
4e:b3:c8:66:20:16:4a:1f:42:5f:3a:cd:4e:a0:5c:
ef:0a:bd:07:c1:db:0e:d4:93:72:fb:5a:f7:da:23:
19:1c:2e:96:ec:dd:60:48:f0:88:e5:c7:f5:4b:14:
38:61:c4:01:87:ee:58:c6:dc:73:06:34:df:d0:ed:
3f:e4:1e:02:f4:6a:02:10:ab:88:40:20:da:e9:8f:
39:3f:3e:32:0e:f5:5f:81:c6:ae:42:a6:b4:a5:9e:
07:c0:1a:9f:70:4f:fe:28:e1:70:f5:3f:55:0f:67:
65:49:7d:41:f3:c8:a9:2c:eb:6a:b9:36:fb:94:78:
a5:fe:90:36:18:15:36:d5:8c:20:8d:81:f1:d7:95:
65:fb:75:47:a6:2f:ab:f3:4c:89:30:a7:d8:c6:1d:
21:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:62:D3:7B:05:74:91:95:3D:6D:F3:93:2A:55:6D:AC:7B:C8:33:24
X509v3 Authority Key Identifier:
keyid:D0:0B:37:B6:F4:B4:45:64:5E:69:93:A9:C5:EC:60:84:92:42:5F:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/bmLTewV0kZU9bfOTKlVtrHvIMyQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.53.31.0/24
152.53.36.0/22
152.53.52.0/22
152.53.68.0/24
152.53.80.0/22
152.53.88.0/22
152.53.164.0-152.53.171.255
152.53.192.0/19
152.53.240.0/22
Signature Algorithm: sha256WithRSAEncryption
01:31:cd:79:62:96:fb:3f:3b:99:00:34:cf:0c:8a:17:0e:ab:
af:dc:30:7e:ee:5d:50:48:09:63:58:ae:79:74:56:ac:a0:c9:
16:c9:9c:08:a6:75:70:89:54:02:80:1e:f4:5a:ba:b0:82:09:
31:bf:c8:a9:1d:46:9b:49:fe:47:7e:21:17:6a:8a:c6:df:26:
34:5c:ea:94:2d:64:84:4b:60:a6:d3:33:26:73:a2:14:61:ce:
6d:f9:5c:6f:fe:10:24:36:d5:fa:bc:0c:cc:c8:7c:9b:27:4a:
26:5d:a6:4e:1d:33:85:33:05:1f:64:fb:af:e6:0d:cd:ae:c0:
17:da:9d:8d:88:cc:a1:4b:91:f1:f1:fa:4c:20:3d:e4:1e:d6:
34:bd:ea:fb:63:fe:06:27:32:03:72:85:fc:86:d8:9d:df:60:
d8:81:03:92:4a:49:34:ce:5e:56:02:a3:2f:e4:95:6d:b1:11:
5d:37:08:f4:86:84:ed:5c:62:5d:c2:31:c2:4c:ee:ad:f7:0e:
72:c3:99:8b:f4:e7:d8:fd:7c:ce:d1:5e:b8:56:48:99:f1:51:
c6:80:9e:9b:82:61:66:0a:29:07:3d:14:27:47:4a:49:6c:b5:
f3:42:0a:c6:bb:9a:ec:82:be:b9:6b:be:fa:d8:71:79:67:ea:
d1:6b:7d:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:16:09 2025 by rpki-client