Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/BAmcZLC8c1pYbRVx9bEwz7hXkh4.roa
File: BAmcZLC8c1pYbRVx9bEwz7hXkh4.roa (raw, json)
Hash identifier: Gw4Wc6UKh9AqIVk4VRz0Ra02r6VzzByuN/IWwFfcpD8=
Subject key identifier: 04:09:9C:64:B0:BC:73:5A:58:6D:15:71:F5:B1:30:CF:B8:57:92:1E
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 0198D23AC78B8C7BF2BD03E9657A2D3A830D
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/BAmcZLC8c1pYbRVx9bEwz7hXkh4.roa
Signing time: Fri 22 Aug 2025 14:42:04 +0000
ROA not before: Fri 22 Aug 2025 14:42:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21859
IP address blocks: 77.246.220.0/24 maxlen: 24
88.80.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d2:3a:c7:8b:8c:7b:f2:bd:03:e9:65:7a:2d:3a:83:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Aug 22 14:42:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=04099c64b0bc735a586d1571f5b130cfb857921e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a4:fe:da:9b:56:ad:69:57:ad:09:b3:17:03:
0a:51:50:dd:1c:5c:65:fe:19:8f:36:aa:0c:86:cc:
86:36:b9:32:3c:59:6f:ee:68:4f:64:2b:d4:9b:9e:
2f:cd:23:9d:c4:15:be:1d:54:71:9c:ad:59:83:26:
48:eb:65:4c:b7:97:9e:66:ed:ad:b0:c7:2a:ef:c6:
ef:04:e4:15:88:81:79:dd:ab:b0:db:45:07:45:fb:
c1:30:3b:10:a9:ef:0c:19:92:9d:8d:45:18:45:67:
b9:98:86:c1:cf:14:af:58:a5:96:b3:7b:4e:2c:15:
65:d2:c3:74:22:1c:48:9a:a7:de:e2:da:5c:8f:84:
8e:35:fb:55:14:02:83:40:c9:c6:7e:af:f9:98:d8:
3f:2e:fa:50:50:2b:7d:5b:14:b4:16:b1:55:86:00:
8b:85:a1:62:bf:93:31:47:ce:f2:63:08:14:7c:54:
c8:93:8f:64:12:2b:b3:3e:bb:fc:5c:de:35:15:00:
3e:1c:a8:2f:f3:7e:81:fb:3c:56:ec:eb:1d:6b:c4:
eb:0d:ee:06:c3:db:66:96:3d:0c:82:c4:97:8a:cf:
6c:47:51:79:87:12:a8:e1:69:c0:f0:42:de:76:c0:
25:93:4a:16:be:b2:00:af:b2:b5:cf:7a:ec:39:08:
0f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:09:9C:64:B0:BC:73:5A:58:6D:15:71:F5:B1:30:CF:B8:57:92:1E
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/BAmcZLC8c1pYbRVx9bEwz7hXkh4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.246.220.0/24
88.80.139.0/24
Signature Algorithm: sha256WithRSAEncryption
37:5c:55:bc:f5:79:bc:55:0e:63:3d:d3:0a:47:19:4f:b6:d7:
99:79:92:90:4e:c6:28:ca:03:37:43:8b:8c:70:76:cd:84:e5:
be:7e:f0:d4:94:fb:fa:fb:65:31:fa:92:58:ba:9c:f2:72:d5:
a7:63:6b:31:e6:68:7a:f4:49:02:c4:c9:a9:9d:0e:a7:d3:7d:
bf:10:e1:27:a1:13:60:5d:d8:95:a4:95:ba:5b:86:e2:c0:0f:
09:53:2f:4b:60:3d:80:13:b9:fe:89:26:94:b1:f7:06:58:d0:
40:66:b2:b4:09:d0:42:ad:0d:20:8d:02:d5:07:cb:3c:53:0c:
cb:b6:53:8a:89:43:91:63:5e:5f:6d:03:78:1b:c7:a6:7e:86:
90:c9:e7:cd:54:48:1d:d4:c7:63:72:5f:f9:60:1d:70:2d:9c:
5d:36:50:03:c3:4b:0a:0a:1b:5c:67:2a:48:aa:a6:ec:5f:cd:
e0:3f:2b:70:de:77:b3:f4:06:4a:d6:b4:87:b0:ea:13:c6:15:
84:85:ff:49:6f:d8:a9:0e:9e:b8:35:c1:53:97:4a:62:8d:29:
62:11:b0:0a:46:c9:c3:6d:19:28:59:8b:de:03:9c:8c:e0:e7:
e6:db:4d:f7:54:0c:8b:7e:3c:0a:06:05:c6:5e:25:d0:3d:eb:
f0:92:34:49
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZjSOseLjHvyvQPpZXotOoMNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxMjRmYmExZTQwMWMwM2U1YmExY2Q3N2FlOWVlMzljZmQ2
MzFiZmIwHhcNMjUwODIyMTQ0MjA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNDA5OWM2NGIwYmM3MzVhNTg2ZDE1NzFmNWIxMzBjZmI4NTc5MjFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKT+2ptWrWlXrQmzFwMKUVDdHFxl
/hmPNqoMhsyGNrkyPFlv7mhPZCvUm54vzSOdxBW+HVRxnK1ZgyZI62VMt5eeZu2t
sMcq78bvBOQViIF53auw20UHRfvBMDsQqe8MGZKdjUUYRWe5mIbBzxSvWKWWs3tO
LBVl0sN0IhxImqfe4tpcj4SONftVFAKDQMnGfq/5mNg/LvpQUCt9WxS0FrFVhgCL
haFiv5MxR87yYwgUfFTIk49kEiuzPrv8XN41FQA+HKgv836B+zxW7Osda8TrDe4G
w9tmlj0MgsSXis9sR1F5hxKo4WnA8ELedsAlk0oWvrIAr7K1z3rsOQgPFwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFAQJnGSwvHNaWG0VcfWxMM+4V5IeMB8GA1UdIwQY
MBaAFFEk+6HkAcA+W6HNd66e45z9Yxv7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEt
YWI4ZjFmMzM4N2VlLzEvQkFtY1pMQzhjMXBZYlJWeDliRXd6N2hYa2g0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEtYWI4ZjFmMzM4N2Vl
LzEvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATfbcAwQA
WFCLMA0GCSqGSIb3DQEBCwUAA4IBAQA3XFW89Xm8VQ5jPdMKRxlPtteZeZKQTsYo
ygM3Q4uMcHbNhOW+fvDUlPv6+2Ux+pJYupzyctWnY2sx5mh69EkCxMmpnQ6n032/
EOEnoRNgXdiVpJW6W4biwA8JUy9LYD2AE7n+iSaUsfcGWNBAZrK0CdBCrQ0gjQLV
B8s8UwzLtlOKiUORY15fbQN4G8emfoaQyefNVEgd1Mdjcl/5YB1wLZxdNlADw0sK
ChtcZypIqqbsX83gPytw3nez9AZK1rSHsOoTxhWEhf9Jb9ipDp64NcFTl0pijSli
EbAKRsnDbRkoWYveA5yM4Ofm2033VAyLfjwKBgXGXiXQPevwkjRJ
-----END CERTIFICATE-----
Generated at Sat Aug 23 22:54:30 2025 by rpki-client