Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/3d2d7b-2c5c-498f-85bf-285ec8fe8ec6/1/BP7hIYhiDfgoLYC3EQ_BWDeI0kM.roa
File: BP7hIYhiDfgoLYC3EQ_BWDeI0kM.roa (raw, json)
Hash identifier: ojCr5JBVKUCnA0I9p1E7esZg/ahEto7MwTtjkK6NUEk=
Subject key identifier: 04:FE:E1:21:88:62:0D:F8:28:2D:80:B7:11:0F:C1:58:37:88:D2:43
Certificate issuer: /CN=7dbacb1fc2c2063042781631b517ce475233a2bd
Certificate serial: 019788A2D9D23985EA64D4D5860BD2AAE9F6
Authority key identifier: 7D:BA:CB:1F:C2:C2:06:30:42:78:16:31:B5:17:CE:47:52:33:A2:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fbrLH8LCBjBCeBYxtRfOR1Izor0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/3d2d7b-2c5c-498f-85bf-285ec8fe8ec6/1/BP7hIYhiDfgoLYC3EQ_BWDeI0kM.roa
Signing time: Thu 19 Jun 2025 14:41:03 +0000
ROA not before: Thu 19 Jun 2025 14:41:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207903
IP address blocks: 45.81.168.0/24 maxlen: 24
185.88.64.0/24 maxlen: 24
185.88.65.0/24 maxlen: 24
185.88.66.0/24 maxlen: 24
185.88.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/3d2d7b-2c5c-498f-85bf-285ec8fe8ec6/1/fbrLH8LCBjBCeBYxtRfOR1Izor0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/3d2d7b-2c5c-498f-85bf-285ec8fe8ec6/1/fbrLH8LCBjBCeBYxtRfOR1Izor0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fbrLH8LCBjBCeBYxtRfOR1Izor0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 05:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:88:a2:d9:d2:39:85:ea:64:d4:d5:86:0b:d2:aa:e9:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dbacb1fc2c2063042781631b517ce475233a2bd
Validity
Not Before: Jun 19 14:41:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=04fee12188620df8282d80b7110fc1583788d243
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:c9:09:15:f2:e4:c4:8a:f9:5d:be:7f:48:31:
77:69:14:1d:e1:57:a5:d9:6e:bd:f9:e3:24:40:57:
a8:83:e3:0a:6c:4e:75:c6:d7:10:5e:de:67:bf:bd:
8c:8e:6f:c6:ef:9a:3c:2b:b8:1f:ad:00:49:3f:46:
b9:4c:1e:2a:9b:4e:b6:86:ca:ad:2d:53:f9:e2:8b:
0e:94:e1:d5:fd:1d:2d:ee:ae:17:c2:83:5f:03:66:
39:72:79:f8:de:cc:af:57:90:00:d7:49:3a:6b:dc:
0d:e5:1e:75:3b:1c:f8:ac:36:ca:de:02:3a:14:4e:
38:e7:25:0f:c3:58:cb:68:3a:68:21:f2:60:7a:ba:
20:1b:38:1b:94:00:2e:f7:54:85:37:25:3b:77:34:
55:6d:7d:35:0b:f6:e7:87:ae:63:7e:7e:24:92:96:
b7:df:82:9c:8c:11:d6:b2:ad:bb:db:6b:80:e7:ad:
6b:f3:86:2e:04:b0:0c:63:41:ce:66:2d:96:fa:8c:
41:fa:36:04:20:4d:de:d8:87:b9:77:2d:e9:2a:9f:
6d:27:ec:92:9e:00:60:1e:62:87:46:a5:3b:1c:ed:
6f:10:e9:15:47:bc:79:d1:15:ed:00:c4:ca:33:f4:
44:0d:3a:0d:60:fc:95:13:2e:dc:0d:df:dc:00:b3:
f7:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:FE:E1:21:88:62:0D:F8:28:2D:80:B7:11:0F:C1:58:37:88:D2:43
X509v3 Authority Key Identifier:
keyid:7D:BA:CB:1F:C2:C2:06:30:42:78:16:31:B5:17:CE:47:52:33:A2:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fbrLH8LCBjBCeBYxtRfOR1Izor0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/3d2d7b-2c5c-498f-85bf-285ec8fe8ec6/1/BP7hIYhiDfgoLYC3EQ_BWDeI0kM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/3d2d7b-2c5c-498f-85bf-285ec8fe8ec6/1/fbrLH8LCBjBCeBYxtRfOR1Izor0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.168.0/24
185.88.64.0/22
Signature Algorithm: sha256WithRSAEncryption
94:0a:fd:ab:ce:df:ef:3b:e7:e9:a2:82:54:81:b1:cd:c0:6c:
62:63:32:0e:39:10:2f:8f:b0:9f:ed:be:cc:e5:44:f8:26:5c:
1c:88:0d:1f:62:73:3e:dd:4e:ab:ae:ae:06:8b:76:c2:b8:bd:
93:34:32:cd:ed:1c:b0:ae:f3:26:77:e7:fb:a5:f3:4d:f0:1b:
9f:05:00:d1:5d:9d:46:45:e8:48:ba:18:6c:5f:0d:a3:81:22:
2e:5b:2d:f2:13:98:dc:7a:98:6a:d0:1b:8d:ee:5e:77:13:5e:
42:06:60:37:5e:a4:b2:d6:4a:7a:92:d6:9e:e2:e5:52:17:4f:
41:0a:ff:6a:58:4e:b7:15:a8:f3:63:9f:7c:19:60:ca:f4:d2:
73:56:9c:c2:ef:87:e8:aa:f7:4f:78:7f:56:ef:4f:11:24:2c:
7c:ef:39:57:b9:0e:ac:e5:6e:03:71:67:de:7d:f2:08:b8:0e:
2d:d9:4a:63:fd:5c:90:56:08:d5:89:7a:dc:89:3e:db:c0:1d:
80:94:f5:6f:2c:86:1d:24:81:2b:2b:98:dc:a7:80:06:68:00:
aa:4b:55:c9:29:1b:17:3d:63:3e:e2:0a:6f:cd:4f:ad:31:a3:
ba:bf:b1:99:44:ca:7d:71:f3:8a:f5:e2:6e:5f:eb:16:0b:02:
06:1c:1b:6a
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZeIotnSOYXqZNTVhgvSqun2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYmFjYjFmYzJjMjA2MzA0Mjc4MTYzMWI1MTdjZTQ3NTIz
M2EyYmQwHhcNMjUwNjE5MTQ0MTAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNGZlZTEyMTg4NjIwZGY4MjgyZDgwYjcxMTBmYzE1ODM3ODhkMjQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhskJFfLkxIr5Xb5/SDF3aRQd4Vel
2W69+eMkQFeog+MKbE51xtcQXt5nv72Mjm/G75o8K7gfrQBJP0a5TB4qm062hsqt
LVP54osOlOHV/R0t7q4XwoNfA2Y5cnn43syvV5AA10k6a9wN5R51Oxz4rDbK3gI6
FE445yUPw1jLaDpoIfJgerogGzgblAAu91SFNyU7dzRVbX01C/bnh65jfn4kkpa3
34KcjBHWsq2722uA561r84YuBLAMY0HOZi2W+oxB+jYEIE3e2Ie5dy3pKp9tJ+yS
ngBgHmKHRqU7HO1vEOkVR7x50RXtAMTKM/REDToNYPyVEy7cDd/cALP3PQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFAT+4SGIYg34KC2AtxEPwVg3iNJDMB8GA1UdIwQY
MBaAFH26yx/CwgYwQngWMbUXzkdSM6K9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmJyTEg4TENCakJDZUJZeHRSZk9SMUl6b3IwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8zZDJkN2ItMmM1Yy00OThmLTg1YmYt
Mjg1ZWM4ZmU4ZWM2LzEvQlA3aElZaGlEZmdvTFlDM0VRX0JXRGVJMGtNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC8zZDJkN2ItMmM1Yy00OThmLTg1YmYtMjg1ZWM4ZmU4ZWM2
LzEvZmJyTEg4TENCakJDZUJZeHRSZk9SMUl6b3IwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALVGoAwQC
uVhAMA0GCSqGSIb3DQEBCwUAA4IBAQCUCv2rzt/vO+fpooJUgbHNwGxiYzIOORAv
j7Cf7b7M5UT4JlwciA0fYnM+3U6rrq4Gi3bCuL2TNDLN7RywrvMmd+f7pfNN8Buf
BQDRXZ1GRehIuhhsXw2jgSIuWy3yE5jcephq0BuN7l53E15CBmA3XqSy1kp6ktae
4uVSF09BCv9qWE63FajzY598GWDK9NJzVpzC74foqvdPeH9W708RJCx87zlXuQ6s
5W4DcWfeffIIuA4t2Upj/VyQVgjViXrciT7bwB2AlPVvLIYdJIErK5jcp4AGaACq
S1XJKRsXPWM+4gpvzU+tMaO6v7GZRMp9cfOK9eJuX+sWCwIGHBtq
-----END CERTIFICATE-----
Generated at Tue Jul 1 13:12:13 2025 by rpki-client