Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/BWjBHV7GLQYm_kFe7UVHpUwAkcY.roa
File: BWjBHV7GLQYm_kFe7UVHpUwAkcY.roa (raw, json)
Hash identifier: KmHgJDlPkXFpo1uiCXVfBs7N0PdhXHFV0wyXs4DH/BA=
Subject key identifier: 05:68:C1:1D:5E:C6:2D:06:26:FE:41:5E:ED:45:47:A5:4C:00:91:C6
Certificate issuer: /CN=1752391e0ad2e644cfe2dad762111d757f585f68
Certificate serial: 01996AB754D066EDD9A4C33FC2374055E9A6
Authority key identifier: 17:52:39:1E:0A:D2:E6:44:CF:E2:DA:D7:62:11:1D:75:7F:58:5F:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1I5HgrS5kTP4trXYhEddX9YX2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/BWjBHV7GLQYm_kFe7UVHpUwAkcY.roa
Signing time: Sun 21 Sep 2025 05:20:23 +0000
ROA not before: Sun 21 Sep 2025 05:20:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61308
IP address blocks: 192.144.48.0/24 maxlen: 24
192.144.50.0/24 maxlen: 24
192.144.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/F1I5HgrS5kTP4trXYhEddX9YX2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/F1I5HgrS5kTP4trXYhEddX9YX2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/F1I5HgrS5kTP4trXYhEddX9YX2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:6a:b7:54:d0:66:ed:d9:a4:c3:3f:c2:37:40:55:e9:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1752391e0ad2e644cfe2dad762111d757f585f68
Validity
Not Before: Sep 21 05:20:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0568c11d5ec62d0626fe415eed4547a54c0091c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3f:f5:f9:73:9e:e3:39:26:9e:a9:1c:1d:25:
91:1e:87:16:04:f7:6b:e2:d8:44:b1:f6:fe:5f:56:
e7:9f:7c:ee:46:ee:4d:6f:5b:61:da:d0:a1:0e:db:
57:bf:a4:6b:c8:ea:8f:e4:07:15:0c:e7:99:46:00:
8d:a5:70:0a:ef:1e:79:33:9f:75:52:34:69:be:d0:
7f:7a:36:13:01:7f:8c:e4:5f:38:82:d1:ca:2a:e9:
31:b2:af:96:9e:12:e6:72:ee:9f:2b:1f:f6:ee:2b:
b8:df:48:fd:e0:15:b4:9d:4a:38:c9:36:28:06:45:
eb:98:8c:41:6b:c5:39:47:40:74:86:a1:c6:7f:61:
71:52:05:14:e7:fa:e9:e2:05:01:c8:f8:b3:62:37:
6c:8f:20:86:41:e6:17:86:60:e3:aa:12:53:3c:a3:
9a:3f:86:6e:db:03:ff:3f:4e:1b:f5:be:bb:15:f0:
0b:b5:b1:0e:17:25:9e:39:8b:0c:ec:67:75:26:59:
8f:3d:37:46:30:07:04:b3:37:34:69:e8:5a:64:50:
01:cf:7a:c0:bd:5e:1a:46:72:97:6c:91:d4:52:c5:
ea:57:61:da:7a:14:56:47:1e:68:62:99:79:64:22:
12:81:03:03:76:76:fc:a7:5e:c1:04:f3:3e:e9:46:
ae:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:68:C1:1D:5E:C6:2D:06:26:FE:41:5E:ED:45:47:A5:4C:00:91:C6
X509v3 Authority Key Identifier:
keyid:17:52:39:1E:0A:D2:E6:44:CF:E2:DA:D7:62:11:1D:75:7F:58:5F:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1I5HgrS5kTP4trXYhEddX9YX2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/BWjBHV7GLQYm_kFe7UVHpUwAkcY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/F1I5HgrS5kTP4trXYhEddX9YX2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.144.48.0/24
192.144.50.0/23
Signature Algorithm: sha256WithRSAEncryption
c1:58:98:b9:9d:db:b2:05:e9:81:16:47:80:aa:50:c1:f9:4e:
6b:a3:c4:79:9e:fc:f8:7f:5d:57:67:68:68:04:38:fe:0f:0a:
ce:d9:53:9b:5c:72:15:f4:ca:ed:3a:e5:6b:b3:6c:37:12:2f:
7e:d8:72:19:36:b8:63:0a:a5:ef:c1:a8:75:2b:b4:d4:25:40:
3b:2d:c6:78:50:0a:b3:1b:0f:08:b7:76:25:bf:19:a5:74:71:
60:fb:08:2f:7a:0e:0e:f6:f2:24:f5:48:de:d2:ca:2b:d3:86:
1e:b2:50:2b:01:1f:71:f4:6a:16:8b:15:5f:e8:74:5a:43:22:
bd:bf:ef:1d:f3:82:42:32:e7:47:c8:32:19:98:65:05:76:9e:
b9:a5:a4:cd:c6:99:14:f3:3f:70:f4:0a:ad:9e:84:b4:96:48:
af:27:e9:90:16:cc:36:4f:56:33:c8:77:22:44:5b:41:2c:3d:
f0:a4:16:51:1d:8f:fe:49:ad:9c:62:c4:5d:a7:0e:72:00:62:
6f:e8:98:22:23:b0:35:1a:a3:ab:4c:7f:bc:7a:af:d6:fb:58:
d0:e9:31:98:03:48:d0:1d:20:6f:10:1c:f3:cb:70:57:f2:c5:
38:d1:87:3f:15:d7:2c:88:fa:e6:0c:a0:11:76:d2:b3:26:4d:
a6:55:95:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:23:59 2025 by rpki-client