Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/B2iVgwtRHp9n_LIVbd4cpAfP_u4.roa
File: B2iVgwtRHp9n_LIVbd4cpAfP_u4.roa (raw, json)
Hash identifier: ZeT5JbQ3IPcHRbehHuPqdsmwc0qfhfPAdVbKCrIC4+Q=
Subject key identifier: 07:68:95:83:0B:51:1E:9F:67:FC:B2:15:6D:DE:1C:A4:07:CF:FE:EE
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 01995778C197BDC3361C214730D4B142FB5D
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/B2iVgwtRHp9n_LIVbd4cpAfP_u4.roa
Signing time: Wed 17 Sep 2025 11:39:15 +0000
ROA not before: Wed 17 Sep 2025 11:39:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34775
IP address blocks: 2a06:ba00::/48 maxlen: 48
2a09:12c0::/48 maxlen: 48
2a09:13c0::/48 maxlen: 48
2a09:4f40::/48 maxlen: 48
2a09:4fc0::/48 maxlen: 48
2a09:5040::/48 maxlen: 48
2a09:50c0::/48 maxlen: 48
2a09:5140::/48 maxlen: 48
2a09:5240::/48 maxlen: 48
2a09:95c0::/48 maxlen: 48
2a09:97c0::/48 maxlen: 48
2a09:9840::/48 maxlen: 48
2a09:9ac0::/48 maxlen: 48
2a09:9b40::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:57:78:c1:97:bd:c3:36:1c:21:47:30:d4:b1:42:fb:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Sep 17 11:39:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=076895830b511e9f67fcb2156dde1ca407cffeee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d9:35:f4:28:85:80:e1:9b:fc:28:17:d5:bc:
75:ae:b9:89:dd:17:e1:05:ac:a1:c7:a6:99:45:36:
31:66:07:be:9a:13:17:0c:30:a4:7e:ca:ab:04:b8:
c0:01:1d:32:30:7f:e9:22:1f:3a:0a:bb:36:0b:50:
5f:93:42:6a:32:cb:35:a4:cf:d9:ae:ab:18:f7:ed:
4c:11:99:a7:2f:7f:45:d8:bc:93:cc:43:21:27:11:
a5:63:0f:c0:5a:7c:4d:1f:af:5f:03:79:1d:77:ad:
33:86:98:14:90:0e:37:b3:43:81:1c:38:12:15:00:
8a:9a:78:31:16:27:1d:42:2e:73:2c:57:be:1a:ff:
12:08:d8:9a:a0:d7:42:bd:a7:3f:06:c0:cb:e2:de:
a4:37:74:63:c4:9f:51:a8:3b:14:7a:3e:5f:55:83:
49:c0:f0:28:33:58:cd:52:e5:08:a3:c7:bf:0c:74:
da:ef:c0:45:a4:b2:11:0b:7f:a9:5e:a4:04:d1:91:
9d:9b:1c:9e:57:3a:d1:c4:fd:56:85:10:a8:d6:c8:
8f:8e:31:70:f2:db:47:98:d4:f3:23:24:ad:e1:bf:
d9:6c:97:70:09:64:09:4f:8a:f7:d6:07:21:51:b2:
11:d7:70:8b:27:d1:e2:b9:a2:20:47:58:79:b2:05:
0e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:68:95:83:0B:51:1E:9F:67:FC:B2:15:6D:DE:1C:A4:07:CF:FE:EE
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/B2iVgwtRHp9n_LIVbd4cpAfP_u4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:ba00::/48
2a09:12c0::/48
2a09:13c0::/48
2a09:4f40::/48
2a09:4fc0::/48
2a09:5040::/48
2a09:50c0::/48
2a09:5140::/48
2a09:5240::/48
2a09:95c0::/48
2a09:97c0::/48
2a09:9840::/48
2a09:9ac0::/48
2a09:9b40::/48
Signature Algorithm: sha256WithRSAEncryption
5d:c5:ea:71:b5:3a:ba:8e:5b:9d:26:46:fc:dc:c4:b5:d2:04:
d8:14:fa:77:73:9a:f2:7c:93:7a:75:73:7d:d1:d1:ec:74:79:
04:fb:25:22:4c:99:5d:2c:99:79:0b:08:41:e3:10:2d:f9:a5:
06:70:75:3d:5d:c8:6b:90:a3:1c:9c:b5:b7:0f:8a:ea:8b:8e:
24:5d:81:22:40:dc:7b:89:ab:b5:03:b1:60:9c:3a:8e:32:62:
76:7d:e3:9d:e6:9d:40:c1:f7:99:87:24:ce:13:33:e3:6f:22:
39:63:9d:d2:9f:fb:88:d8:f9:81:0d:e1:77:d5:40:d1:90:2f:
be:a5:23:1e:c1:3f:57:6e:e4:93:cf:74:ee:b9:58:d7:77:dc:
88:43:5e:a7:b0:f3:42:0f:ec:0f:69:e4:78:52:eb:0e:54:18:
78:ac:ea:6e:d9:f2:1e:65:37:bc:5f:34:e8:b4:86:eb:a2:f1:
67:42:cc:36:7d:90:e3:48:68:e9:47:57:f3:ce:1d:71:d9:7d:
d6:1e:45:b9:03:cd:47:f3:ed:3c:30:6d:4f:72:e5:13:0d:ca:
eb:1a:91:f2:78:82:fd:f6:63:65:ff:f5:04:50:47:55:a5:22:
d3:59:ff:8c:c3:88:26:1d:8b:d8:47:18:cf:e8:26:fb:68:e3:
d7:35:7d:d9
-----BEGIN CERTIFICATE-----
MIIFeTCCBGGgAwIBAgISAZlXeMGXvcM2HCFHMNSxQvtdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj
Zjk3MDQwHhcNMjUwOTE3MTEzOTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNzY4OTU4MzBiNTExZTlmNjdmY2IyMTU2ZGRlMWNhNDA3Y2ZmZWVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNk19CiFgOGb/CgX1bx1rrmJ3Rfh
Bayhx6aZRTYxZge+mhMXDDCkfsqrBLjAAR0yMH/pIh86Crs2C1Bfk0JqMss1pM/Z
rqsY9+1MEZmnL39F2LyTzEMhJxGlYw/AWnxNH69fA3kdd60zhpgUkA43s0OBHDgS
FQCKmngxFicdQi5zLFe+Gv8SCNiaoNdCvac/BsDL4t6kN3RjxJ9RqDsUej5fVYNJ
wPAoM1jNUuUIo8e/DHTa78BFpLIRC3+pXqQE0ZGdmxyeVzrRxP1WhRCo1siPjjFw
8ttHmNTzIySt4b/ZbJdwCWQJT4r31gchUbIR13CLJ9HiuaIgR1h5sgUOfQIDAQAB
o4IChTCCAoEwHQYDVR0OBBYEFAdolYMLUR6fZ/yyFW3eHKQHz/7uMB8GA1UdIwQY
MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct
ZTg2MTIxYzU5NGRmLzEvQjJpVmd3dFJIcDluX0xJVmJkNGNwQWZQX3U0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm
LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGaBggrBgEFBQcBBwEB/wSBijCBhzCBhAQCAAIwfgMHACoG
ugAAAAMHACoJEsAAAAMHACoJE8AAAAMHACoJT0AAAAMHACoJT8AAAAMHACoJUEAA
AAMHACoJUMAAAAMHACoJUUAAAAMHACoJUkAAAAMHACoJlcAAAAMHACoJl8AAAAMH
ACoJmEAAAAMHACoJmsAAAAMHACoJm0AAADANBgkqhkiG9w0BAQsFAAOCAQEAXcXq
cbU6uo5bnSZG/NzEtdIE2BT6d3Oa8nyTenVzfdHR7HR5BPslIkyZXSyZeQsIQeMQ
LfmlBnB1PV3Ia5CjHJy1tw+K6ouOJF2BIkDce4mrtQOxYJw6jjJidn3jneadQMH3
mYckzhMz428iOWOd0p/7iNj5gQ3hd9VA0ZAvvqUjHsE/V27kk8907rlY13fciENe
p7DzQg/sD2nkeFLrDlQYeKzqbtnyHmU3vF806LSG66LxZ0LMNn2Q40ho6UdX884d
cdl91h5FuQPNR/PtPDBtT3LlEw3K6xqR8niC/fZjZf/1BFBHVaUi01n/jMOIJh2L
2EcYz+gm+2jj1zV92Q==
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:29:15 2025 by rpki-client