Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/Bvjnu7SwPYSOA8TZSiYi9KzUHJ4.roa
File: Bvjnu7SwPYSOA8TZSiYi9KzUHJ4.roa (raw, json)
Hash identifier: MtSjcd7+N7cPuyoPStVlZxSs2Wdnne4qQqsrOHlSx2U=
Subject key identifier: 06:F8:E7:BB:B4:B0:3D:84:8E:03:C4:D9:4A:26:22:F4:AC:D4:1C:9E
Certificate issuer: /CN=8d84404e5f8a4b117ae44e73d53c44ecdd578342
Certificate serial: 0197C569EB6396507748E50CF1E3521820C7
Authority key identifier: 8D:84:40:4E:5F:8A:4B:11:7A:E4:4E:73:D5:3C:44:EC:DD:57:83:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/Bvjnu7SwPYSOA8TZSiYi9KzUHJ4.roa
Signing time: Tue 01 Jul 2025 09:55:42 +0000
ROA not before: Tue 01 Jul 2025 09:55:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44534
IP address blocks: 5.45.209.0/24 maxlen: 24
5.255.232.0/24 maxlen: 24
5.255.234.0/23 maxlen: 23
37.140.168.0/24 maxlen: 24
77.88.42.0/23 maxlen: 23
77.88.61.0/24 maxlen: 24
87.250.232.0/24 maxlen: 24
87.250.238.0/24 maxlen: 24
90.156.176.0/20 maxlen: 24
90.156.176.0/24 maxlen: 24
93.158.155.0/24 maxlen: 24
93.158.184.0/24 maxlen: 24
93.158.185.0/24 maxlen: 24
93.158.186.0/24 maxlen: 24
93.158.187.0/24 maxlen: 24
95.108.168.0/22 maxlen: 22
95.108.170.0/24 maxlen: 24
141.8.130.0/23 maxlen: 23
178.154.152.0/24 maxlen: 24
2a02:6bf:8000::/34 maxlen: 48
2a02:6bf:8005::/48 maxlen: 48
2a02:6bf:8006::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 21:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c5:69:eb:63:96:50:77:48:e5:0c:f1:e3:52:18:20:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d84404e5f8a4b117ae44e73d53c44ecdd578342
Validity
Not Before: Jul 1 09:55:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=06f8e7bbb4b03d848e03c4d94a2622f4acd41c9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b5:3e:2e:f9:3b:7d:52:b7:99:0b:1f:7e:16:
5d:dd:a4:43:cc:23:2e:29:5f:f6:22:6a:c0:f1:3e:
fb:cc:3b:89:b9:12:90:ea:9f:a1:77:5b:f0:7a:4e:
53:cb:86:91:1d:66:b7:f1:f3:48:7f:04:1a:e6:a5:
53:06:b6:a2:23:42:d9:b3:30:b2:54:dd:d1:de:10:
4b:01:91:d4:30:a3:f9:48:e0:01:45:48:5e:78:8a:
9b:d4:9f:4f:c9:42:87:6f:a0:b0:13:a7:9f:bc:81:
89:07:60:be:24:ab:a4:24:32:24:5e:d8:66:0f:ae:
4c:9f:cd:36:00:99:28:32:7c:be:5a:ee:e2:fa:15:
2f:0a:f0:64:c1:2a:90:e9:b7:a8:93:94:ac:e8:80:
01:7a:5f:7c:fc:1c:19:e3:a2:c3:a7:a2:7f:33:a1:
f5:d0:45:e2:6b:45:26:b5:1f:da:dd:3d:5c:4e:1d:
ef:c6:3f:9e:52:82:8f:2a:c5:26:56:94:ab:b3:62:
02:76:74:c1:d0:99:06:8e:bd:8c:21:a1:6e:e1:5c:
0e:83:b4:8b:75:51:fb:9e:2a:ca:1f:db:42:79:9d:
5b:cc:a4:b3:28:45:9a:ad:98:7c:8c:ee:3c:18:ec:
52:4f:44:89:dd:07:e6:5a:1f:52:ce:4b:e2:f8:37:
d7:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:F8:E7:BB:B4:B0:3D:84:8E:03:C4:D9:4A:26:22:F4:AC:D4:1C:9E
X509v3 Authority Key Identifier:
keyid:8D:84:40:4E:5F:8A:4B:11:7A:E4:4E:73:D5:3C:44:EC:DD:57:83:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/Bvjnu7SwPYSOA8TZSiYi9KzUHJ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.45.209.0/24
5.255.232.0/24
5.255.234.0/23
37.140.168.0/24
77.88.42.0/23
77.88.61.0/24
87.250.232.0/24
87.250.238.0/24
90.156.176.0/20
93.158.155.0/24
93.158.184.0/22
95.108.168.0/22
141.8.130.0/23
178.154.152.0/24
IPv6:
2a02:6bf:8000::/34
Signature Algorithm: sha256WithRSAEncryption
90:3a:5e:6e:d5:11:1a:a7:46:9c:ce:a3:53:ee:9e:c3:e8:ed:
0c:13:cb:df:17:8f:aa:76:2e:dc:e4:6b:65:b1:b6:eb:c1:c2:
a6:64:73:c0:77:3d:f4:b8:8b:1b:51:73:68:ea:b5:6b:70:07:
83:c3:89:cd:84:5a:7d:94:21:b5:2c:8d:26:07:9f:a4:39:95:
78:72:87:21:29:65:6d:49:87:28:a4:a7:17:42:6b:4c:f8:66:
8c:03:db:3c:15:e6:43:fe:05:05:87:7c:cf:cc:3e:9a:21:a3:
d3:eb:02:f1:75:e3:26:92:cc:a1:f0:38:40:8a:2c:12:e9:3b:
fb:58:5a:68:9b:89:00:fd:a7:32:a0:be:97:0e:19:61:0d:e5:
66:f7:7a:3d:93:1c:0c:03:7d:c3:11:ec:db:4c:e8:7c:4f:c5:
39:7b:94:b0:e4:dd:54:9d:34:71:8d:cf:63:b2:96:4e:88:08:
5a:68:ea:8c:92:50:7f:d5:b0:0a:a6:06:42:09:34:d9:2f:fa:
d9:0e:04:c5:74:9d:b9:3f:f3:99:a1:02:d5:65:73:96:32:e4:
b6:8b:b0:02:c3:15:0d:1e:c5:04:5d:c1:74:2d:66:cc:2f:b7:
2a:f9:43:05:e1:f3:21:0f:c2:80:42:ac:91:86:03:be:2b:b2:
8e:e8:aa:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 06:43:28 2025 by rpki-client