Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/d07035-6192-45ef-88ad-e89e41c5b106/1/BM0t-14d93ZG0R2K9vbiuUEqvH0.roa
File: BM0t-14d93ZG0R2K9vbiuUEqvH0.roa (raw, json)
Hash identifier: zILQAxauVBbxhkjsH77rTPNJrcJf7t+yGNN3JFnYJQc=
Subject key identifier: 04:CD:2D:FB:5E:1D:F7:76:46:D1:1D:8A:F6:F6:E2:B9:41:2A:BC:7D
Certificate issuer: /CN=7a09b7623a085457d8c76b494ecd884d8fefa4d1
Certificate serial: 019999F548510235541BAD90E63B9871ED8E
Authority key identifier: 7A:09:B7:62:3A:08:54:57:D8:C7:6B:49:4E:CD:88:4D:8F:EF:A4:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/egm3YjoIVFfYx2tJTs2ITY_vpNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/d07035-6192-45ef-88ad-e89e41c5b106/1/BM0t-14d93ZG0R2K9vbiuUEqvH0.roa
Signing time: Tue 30 Sep 2025 09:30:12 +0000
ROA not before: Tue 30 Sep 2025 09:30:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214651
IP address blocks: 195.42.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/d07035-6192-45ef-88ad-e89e41c5b106/1/egm3YjoIVFfYx2tJTs2ITY_vpNE.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/d07035-6192-45ef-88ad-e89e41c5b106/1/egm3YjoIVFfYx2tJTs2ITY_vpNE.mft
rsync://rpki.ripe.net/repository/DEFAULT/egm3YjoIVFfYx2tJTs2ITY_vpNE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:99:f5:48:51:02:35:54:1b:ad:90:e6:3b:98:71:ed:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a09b7623a085457d8c76b494ecd884d8fefa4d1
Validity
Not Before: Sep 30 09:30:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=04cd2dfb5e1df77646d11d8af6f6e2b9412abc7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b9:31:bb:70:ce:ed:d4:7b:b4:4e:89:bd:03:
31:9b:a0:2e:3a:97:ed:45:b1:4b:c7:29:10:dd:2a:
ee:5d:7e:4a:ef:f3:2f:0c:ae:f9:19:7c:45:6c:40:
eb:9f:e2:a5:ec:72:b3:35:9a:93:9e:9e:5a:70:a2:
01:b5:11:ac:09:d1:d0:6c:1b:23:5f:78:d3:6f:d0:
9c:ac:b2:c3:cf:e8:bf:99:eb:60:de:66:a6:ab:a4:
3d:22:63:b7:52:ea:8d:98:d0:4b:3d:4a:e4:ac:52:
89:24:67:d3:eb:dc:53:68:f7:8b:7e:9f:85:0e:8d:
7c:d3:bd:e3:03:51:6d:c8:1f:32:25:da:72:3d:03:
d8:3e:9e:5b:1a:7c:0f:6e:b9:fc:10:45:34:fb:e1:
53:0e:6c:56:f8:79:5e:7a:f1:83:46:26:12:8d:d6:
a1:e8:3a:47:c7:79:0e:9a:6b:81:ca:1a:f0:ed:71:
7d:91:c8:a1:68:13:6b:0f:ff:3e:20:df:f6:ec:c8:
b6:2c:50:aa:ee:14:94:9c:b7:87:b2:f6:83:2b:5d:
e0:ad:93:40:3c:c8:76:d5:75:51:b5:aa:de:c7:97:
f8:c2:f7:ff:50:3f:50:8f:15:40:8e:b1:49:1f:90:
8d:ac:3d:5e:1a:1e:77:2a:04:df:18:7f:31:48:60:
7f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:CD:2D:FB:5E:1D:F7:76:46:D1:1D:8A:F6:F6:E2:B9:41:2A:BC:7D
X509v3 Authority Key Identifier:
keyid:7A:09:B7:62:3A:08:54:57:D8:C7:6B:49:4E:CD:88:4D:8F:EF:A4:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/egm3YjoIVFfYx2tJTs2ITY_vpNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d07035-6192-45ef-88ad-e89e41c5b106/1/BM0t-14d93ZG0R2K9vbiuUEqvH0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d07035-6192-45ef-88ad-e89e41c5b106/1/egm3YjoIVFfYx2tJTs2ITY_vpNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.42.115.0/24
Signature Algorithm: sha256WithRSAEncryption
85:30:1d:0b:a5:9e:ac:b4:65:72:dd:7b:f3:ca:32:66:f8:ae:
65:ee:fd:23:b6:98:d6:93:0a:24:26:8b:67:92:36:9e:67:65:
03:42:49:75:9c:27:f5:02:16:bb:50:c6:1d:c5:e5:8a:6a:f1:
60:8c:ad:eb:d8:4d:66:43:5f:d8:b7:ce:78:b7:ba:94:b7:6a:
c2:99:c4:63:88:cc:3e:cd:7e:1c:cb:f4:32:eb:c0:1f:27:c2:
4b:f6:9f:e6:f9:9e:92:78:0a:4c:43:90:47:4d:6a:9f:73:31:
fb:b6:53:88:85:ed:3c:32:28:8e:ea:e8:fd:6e:74:46:c9:48:
29:47:87:42:b8:3b:6a:e1:c2:65:39:a5:bc:52:5b:5c:7e:17:
9f:7f:99:aa:1c:a6:b3:9e:7a:9e:d4:f0:0f:2e:5d:ac:b6:6a:
d0:cd:2b:ce:da:ad:f5:10:e6:62:aa:b0:fd:3c:03:3d:89:48:
e2:17:b1:2f:04:a7:dc:0f:b0:7e:66:c3:28:0e:b2:df:90:e2:
44:87:bf:d8:93:2d:4d:67:b2:71:db:e2:d3:70:f7:8a:3b:15:
c9:49:81:21:da:eb:05:99:36:e9:41:6d:b7:af:d0:28:35:6d:
dd:48:53:cd:cd:4e:23:08:fd:37:f6:e9:19:f2:7e:4b:fc:c3:
0a:ee:4b:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:36:21 2025 by rpki-client