Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/2b2cdf-2ee5-4689-863b-3d13e9776ff7/1/bglm7OBH7qMueWHwWp8x13IQumU.roa
File: bglm7OBH7qMueWHwWp8x13IQumU.roa (raw, json)
Hash identifier: KuVFh8acpsLYsRfes4W/qZZMayuNHOlxpXdjCaCH3rE=
Subject key identifier: 6E:09:66:EC:E0:47:EE:A3:2E:79:61:F0:5A:9F:31:D7:72:10:BA:65
Certificate issuer: /CN=f05a17dd3beb8dc848fbe7629061d6080141e7d4
Certificate serial: 0199A0B88851771671DF087885FCF8C7D16C
Authority key identifier: F0:5A:17:DD:3B:EB:8D:C8:48:FB:E7:62:90:61:D6:08:01:41:E7:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8FoX3TvrjchI--dikGHWCAFB59Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/2b2cdf-2ee5-4689-863b-3d13e9776ff7/1/bglm7OBH7qMueWHwWp8x13IQumU.roa
Signing time: Wed 01 Oct 2025 17:01:12 +0000
ROA not before: Wed 01 Oct 2025 17:01:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7979
IP address blocks: 164.138.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/2b2cdf-2ee5-4689-863b-3d13e9776ff7/1/8FoX3TvrjchI--dikGHWCAFB59Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/2b2cdf-2ee5-4689-863b-3d13e9776ff7/1/8FoX3TvrjchI--dikGHWCAFB59Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/8FoX3TvrjchI--dikGHWCAFB59Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:a0:b8:88:51:77:16:71:df:08:78:85:fc:f8:c7:d1:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f05a17dd3beb8dc848fbe7629061d6080141e7d4
Validity
Not Before: Oct 1 17:01:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6e0966ece047eea32e7961f05a9f31d77210ba65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ca:4f:d5:9c:10:be:7d:74:b9:2a:6b:78:12:
89:de:74:4b:16:6f:e6:4f:8c:d3:74:d1:2c:2c:55:
f2:29:32:43:ac:bd:4c:2c:69:ae:92:8a:a5:a9:ce:
92:82:7b:29:62:6d:3a:5d:e0:e5:88:0b:22:8f:53:
b7:0a:e4:fd:ea:63:81:96:ea:a7:55:44:39:56:b9:
55:74:ce:9a:3a:fd:1f:99:3f:8f:25:5b:4c:d2:88:
df:7d:ed:ee:1c:68:d5:29:79:fc:22:7e:0d:5f:9a:
f8:98:7d:53:bd:e6:fb:9a:36:7e:d1:21:55:7e:00:
8b:5d:7c:17:6a:aa:5c:61:03:ca:03:77:d1:ef:1e:
5f:3b:3e:a1:f3:9f:d3:bc:b0:ff:93:30:f3:7a:3e:
de:21:f5:7a:bf:02:95:a9:24:fd:1e:3e:eb:a2:d5:
44:8c:f5:f4:4f:de:10:f1:55:f8:db:9b:0d:a9:0b:
da:1e:6a:19:b5:49:e9:d6:ef:08:99:e4:a2:78:bc:
79:88:f4:79:87:03:67:85:50:01:44:72:bd:27:e9:
4a:7a:3b:47:ea:a1:ee:2a:61:55:42:2a:0c:25:6d:
83:62:9f:fb:cd:3f:f5:7c:f9:be:b5:06:1b:64:a4:
b9:e3:3b:cc:cb:87:3f:53:e1:49:28:3b:fd:8f:a0:
0c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:09:66:EC:E0:47:EE:A3:2E:79:61:F0:5A:9F:31:D7:72:10:BA:65
X509v3 Authority Key Identifier:
keyid:F0:5A:17:DD:3B:EB:8D:C8:48:FB:E7:62:90:61:D6:08:01:41:E7:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8FoX3TvrjchI--dikGHWCAFB59Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2b2cdf-2ee5-4689-863b-3d13e9776ff7/1/bglm7OBH7qMueWHwWp8x13IQumU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2b2cdf-2ee5-4689-863b-3d13e9776ff7/1/8FoX3TvrjchI--dikGHWCAFB59Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.138.99.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:12:c2:31:d0:a1:2b:54:d4:48:7b:66:9c:8d:c6:a9:12:e8:
f8:80:45:0f:3c:17:50:d6:fa:b6:3b:10:90:99:70:82:d2:c7:
bf:00:4c:5d:99:dc:dc:27:96:f1:73:2b:64:f0:b9:8a:5f:f9:
0b:2f:c5:3d:c7:d1:b1:3d:c0:80:ed:9a:60:0d:e1:69:b8:dc:
3f:a7:84:97:06:10:ea:cb:b9:14:9f:62:0f:a9:ab:48:5f:93:
39:cc:21:08:7c:24:cc:40:93:17:49:9d:05:f7:ab:81:3c:94:
b6:a6:8f:db:76:ef:3e:0b:54:e6:e1:10:13:20:b3:76:66:e4:
a5:05:97:2b:f3:e5:0f:e0:fd:75:1f:c4:82:fc:8d:4a:3a:cc:
f8:1c:f1:73:5a:13:4d:78:35:13:66:09:7b:2a:60:4c:a7:95:
84:e2:65:35:ac:1a:9c:b0:5f:98:be:68:a8:d8:62:47:7b:bf:
a6:2a:fb:15:40:8e:cd:da:70:90:32:73:07:96:93:82:e5:d4:
a8:ce:85:cc:8b:46:f0:93:37:87:ae:1f:7e:d2:6d:32:ad:42:
c1:92:60:a3:22:94:13:e9:97:1c:13:21:33:51:dc:58:11:ae:
a7:da:a0:0a:f8:b4:26:1c:b7:8f:ad:61:c2:41:61:e8:e1:64:
4a:e0:df:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:25:19 2025 by rpki-client