Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/i-BpcnBIQppslPVpu9Ytz-GUVDI.roa
File: i-BpcnBIQppslPVpu9Ytz-GUVDI.roa (raw, json)
Hash identifier: v2afblKiPEHq9bVQqxQqdwwNaJR3fRJr4v5JF0bAYU8=
Subject key identifier: 8B:E0:69:72:70:48:42:9A:6C:94:F5:69:BB:D6:2D:CF:E1:94:54:32
Certificate issuer: /CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Certificate serial: 01996C125111A07DADA3D2D4362341107871
Authority key identifier: 9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/i-BpcnBIQppslPVpu9Ytz-GUVDI.roa
Signing time: Sun 21 Sep 2025 11:39:23 +0000
ROA not before: Sun 21 Sep 2025 11:39:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206388
IP address blocks: 85.9.94.0/24 maxlen: 24
95.215.160.0/23 maxlen: 23
185.155.14.0/23 maxlen: 23
185.169.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.mft
rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:6c:12:51:11:a0:7d:ad:a3:d2:d4:36:23:41:10:78:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Validity
Not Before: Sep 21 11:39:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8be069727048429a6c94f569bbd62dcfe1945432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:d2:d9:81:32:2d:e6:fa:06:43:6b:3a:12:75:
bd:d5:88:58:30:cb:f8:a9:5d:df:d6:3f:e6:74:74:
a7:7e:0d:f8:dc:70:2b:0f:3f:91:07:f3:f0:53:ac:
d8:3c:d1:78:6d:f2:d8:d7:fd:e8:08:9d:54:a3:fc:
6f:ef:47:03:7b:7a:b1:cb:f3:a6:d8:18:04:3b:b1:
c4:16:24:85:23:bf:49:28:a3:be:e2:73:64:40:8b:
4d:03:85:9d:57:46:2e:42:04:60:75:0e:25:55:06:
5a:c3:1b:eb:44:17:2e:e3:d0:02:a2:db:f9:4e:d7:
c0:d3:d6:89:c3:c1:59:e9:a7:eb:56:ac:49:4f:d1:
ff:ba:af:fb:41:b4:3b:78:39:24:77:ce:16:48:47:
0f:bf:40:35:d3:9b:e1:fc:bb:a8:dd:95:55:0e:ec:
fa:22:a8:bb:08:71:d4:40:53:cf:fa:cc:ea:2c:99:
fe:b1:3f:e6:a6:fa:72:8c:da:a5:29:ef:33:ec:67:
13:73:d1:31:c6:f8:f5:2e:9a:28:cf:19:f7:7d:ba:
ed:31:8e:1e:e4:f4:09:a2:ca:2d:96:35:bd:4f:20:
3b:08:f7:28:85:2d:4b:0a:f0:75:a6:d1:80:c6:28:
a4:94:76:12:02:b4:e1:6e:db:c4:78:fe:2c:5c:82:
67:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:E0:69:72:70:48:42:9A:6C:94:F5:69:BB:D6:2D:CF:E1:94:54:32
X509v3 Authority Key Identifier:
keyid:9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/i-BpcnBIQppslPVpu9Ytz-GUVDI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.9.94.0/24
95.215.160.0/23
185.155.14.0/23
185.169.37.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:f3:48:35:91:fc:ac:25:e8:ff:81:9c:37:eb:0b:54:8e:a6:
d4:d2:c8:d7:c7:2e:e6:a7:9c:f2:00:82:f8:2c:4e:a0:da:d0:
a5:af:2b:b5:1e:f3:01:6b:bd:39:d4:74:17:67:42:db:f1:04:
d1:32:62:c6:34:44:8e:2b:43:e6:6b:23:65:f1:6e:72:07:8a:
e9:13:aa:61:3c:ed:ad:9a:74:6c:03:cf:6d:df:f9:aa:41:43:
1d:14:52:dc:67:ef:e9:6c:22:72:f8:fc:89:d2:c7:15:26:1b:
32:27:5f:97:83:fa:e0:8c:d0:b8:da:be:b5:db:88:8c:82:61:
21:ff:64:0f:c3:4d:15:d8:6a:af:39:e4:9c:80:18:f0:4d:52:
52:4d:9b:c6:4e:6f:24:6f:d2:50:37:ca:da:af:72:4f:0c:0f:
24:d3:56:6a:f0:ce:9a:46:b0:5d:05:b9:31:8c:9e:2f:9e:ea:
40:65:b8:26:71:25:43:bb:63:11:d3:43:f4:5c:d7:d1:ec:1a:
09:2a:2e:03:b5:6a:71:32:4b:b7:8f:1a:25:c1:0b:47:35:d8:
1b:fb:b0:b9:b7:7d:73:18:0c:b8:f1:1b:42:1b:b4:3f:5a:d5:
6e:66:4d:b8:52:fd:a3:25:95:c6:5b:9b:a2:26:0d:f8:79:b0:
2d:65:34:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:34:09 2025 by rpki-client