Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/B6gjpAwyWeBO353srwBe3I3pGSc.roa
File: B6gjpAwyWeBO353srwBe3I3pGSc.roa (raw, json)
Hash identifier: T6IiE69DYmN57XMWQ3SmycRHHJoBiHw/RNYfqaSW1XA=
Subject key identifier: 07:A8:23:A4:0C:32:59:E0:4E:DF:9D:EC:AF:00:5E:DC:8D:E9:19:27
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01987B49C6C88A5FEB3D6EF2B381CAAE7CB0
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/B6gjpAwyWeBO353srwBe3I3pGSc.roa
Signing time: Tue 05 Aug 2025 17:31:29 +0000
ROA not before: Tue 05 Aug 2025 17:31:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207957
IP address blocks: 64.188.90.0/24 maxlen: 24
64.188.98.0/24 maxlen: 24
64.188.127.0/24 maxlen: 24
77.239.107.0/24 maxlen: 24
185.170.153.0/24 maxlen: 24
185.170.154.0/24 maxlen: 24
193.23.200.0/24 maxlen: 24
193.23.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 13:02:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:49:c6:c8:8a:5f:eb:3d:6e:f2:b3:81:ca:ae:7c:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Aug 5 17:31:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=07a823a40c3259e04edf9decaf005edc8de91927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b9:4c:08:ea:4d:b7:54:b6:90:80:f0:82:72:
e7:22:99:9d:3e:3e:80:44:1c:ec:2f:df:c5:81:e1:
20:23:5a:08:63:74:75:08:83:f0:c7:20:4f:74:ea:
ac:69:16:cb:52:a3:5f:e1:3b:b9:6b:b5:06:92:44:
53:d1:e7:2a:bf:0b:ba:76:86:d8:2b:0b:11:8c:f3:
b6:a1:8f:de:03:97:73:53:81:9f:d6:d6:c1:18:34:
16:f7:02:03:45:ce:90:c9:d3:b7:44:7c:74:3d:6c:
41:87:67:ff:a7:4c:32:3d:00:dc:3b:1a:74:06:d4:
35:91:f3:df:b2:97:fb:71:87:cf:62:af:61:19:81:
2d:52:59:70:9c:0b:20:1d:cf:78:25:e8:51:c2:b9:
3e:c9:12:17:fe:5a:be:cb:ae:a8:11:8f:29:91:89:
da:12:bf:67:41:37:0e:02:1c:b9:d5:19:52:7c:27:
83:68:ce:2d:3b:71:ad:21:77:44:74:7d:82:d7:7e:
9c:2b:ce:5c:75:37:be:c7:77:d4:99:ce:3a:bd:bf:
14:c2:df:a5:a7:d0:00:04:d8:e1:37:78:2b:2d:27:
6a:1a:25:ab:e6:c4:18:53:06:c5:59:e1:12:99:e7:
a4:cd:d5:a4:46:f0:0f:ed:95:f6:be:4a:85:0b:e3:
36:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:A8:23:A4:0C:32:59:E0:4E:DF:9D:EC:AF:00:5E:DC:8D:E9:19:27
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/B6gjpAwyWeBO353srwBe3I3pGSc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.188.90.0/24
64.188.98.0/24
64.188.127.0/24
77.239.107.0/24
185.170.153.0-185.170.154.255
193.23.200.0/23
Signature Algorithm: sha256WithRSAEncryption
51:48:6f:fc:3b:f8:9f:1a:09:b3:49:b5:27:46:0e:4b:d6:19:
11:03:fb:ba:04:87:1a:4e:2e:b5:8e:97:0a:af:d0:6d:96:6a:
44:89:35:77:ca:17:86:ba:13:07:8d:60:a7:f1:9e:94:57:5c:
32:86:89:65:f1:80:02:bb:c9:4d:88:c9:cd:ae:14:44:f0:f0:
fb:28:d2:16:f8:aa:88:2e:ed:23:15:9b:4a:d9:0e:f8:dc:c0:
59:65:b9:d9:b5:38:04:49:14:a3:27:ae:9c:fa:76:c3:b9:40:
0e:49:b0:95:f5:f0:ea:4f:14:84:f6:da:d2:6f:50:0f:5f:83:
97:fb:a2:d7:b0:25:ef:8f:30:4c:02:e1:11:5d:6d:25:13:7e:
7f:58:ed:31:fd:bc:45:8a:bf:74:9a:12:22:c0:53:0d:8d:7e:
6c:37:4d:a4:9c:af:28:39:f3:59:59:56:bb:e9:60:38:77:0b:
02:d2:b1:1c:eb:bd:6a:32:f0:58:c5:1a:c9:99:91:d7:39:66:
42:91:85:9d:ff:17:e8:41:df:da:fc:07:13:f0:ff:b3:52:15:
29:05:86:0b:30:2a:b2:72:5a:a5:aa:2b:45:94:d6:1c:04:dd:
99:d8:b7:af:b0:a3:52:bb:34:fa:16:67:3b:2c:03:a7:81:b8:
f3:9b:13:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:30:10 2025 by rpki-client