Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/bHC2ueWGtBnFuzga67cV7J17YMs.roa
File: bHC2ueWGtBnFuzga67cV7J17YMs.roa (raw, json)
Hash identifier: CnM+bfRrpziNltRttQML3vHGfU6CRaZgL5tasDJnWsA=
Subject key identifier: 6C:70:B6:B9:E5:86:B4:19:C5:BB:38:1A:EB:B7:15:EC:9D:7B:60:CB
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 0197931F2FF00AA51365BEAABBBBE2593BC2
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/bHC2ueWGtBnFuzga67cV7J17YMs.roa
Signing time: Sat 21 Jun 2025 15:33:03 +0000
ROA not before: Sat 21 Jun 2025 15:33:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24699
IP address blocks: 80.66.144.0/20 maxlen: 20
81.20.96.0/20 maxlen: 20
88.85.160.0/20 maxlen: 20
109.108.32.0/19 maxlen: 19
212.124.16.0/20 maxlen: 20
212.124.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:93:1f:2f:f0:0a:a5:13:65:be:aa:bb:bb:e2:59:3b:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Jun 21 15:33:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6c70b6b9e586b419c5bb381aebb715ec9d7b60cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:17:8f:c3:66:79:64:7b:da:1c:38:1e:29:08:
af:57:66:d2:a9:e9:21:c3:fa:b9:b7:3f:33:3e:9d:
21:18:3d:d7:92:22:02:e0:3b:78:c6:37:16:9c:b7:
7c:20:ca:ea:59:b8:99:4c:b3:2a:51:32:8c:1f:5e:
3c:04:6e:97:3a:0e:4c:29:6c:a5:9b:9f:33:8c:99:
92:47:5c:11:fd:1e:12:98:3c:39:03:ec:7b:07:4b:
23:b1:f0:b4:f3:61:0b:8e:a8:15:cd:bc:b0:67:d7:
4a:0e:9b:17:7a:36:fc:12:0d:c1:68:fe:70:20:df:
fa:93:f9:77:94:1f:e6:51:e7:63:49:5e:53:2c:6c:
ce:3b:5d:01:46:96:0e:ec:13:5b:43:a8:60:94:29:
70:a6:18:29:43:4b:65:13:8d:d6:a4:bd:64:8e:47:
37:00:0a:82:9d:bd:2f:58:85:8f:f5:14:61:42:d3:
3b:e5:f8:a7:70:c8:e1:7d:9b:39:3b:bc:c2:8b:94:
22:b4:d6:92:24:62:20:d5:3e:96:af:bc:10:74:78:
d1:7d:03:10:dd:c2:10:57:21:df:4f:b3:b7:29:9c:
40:55:85:b5:20:8c:6a:38:ae:af:d6:83:f1:07:5c:
9f:0b:20:ab:0f:0c:57:47:e9:7f:9c:c8:f5:42:f2:
a9:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:70:B6:B9:E5:86:B4:19:C5:BB:38:1A:EB:B7:15:EC:9D:7B:60:CB
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/bHC2ueWGtBnFuzga67cV7J17YMs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.66.144.0/20
81.20.96.0/20
88.85.160.0/20
109.108.32.0/19
212.124.16.0/20
Signature Algorithm: sha256WithRSAEncryption
93:69:ec:d8:42:31:a8:42:51:23:dd:a0:a4:77:0d:f1:7c:58:
69:1b:75:f9:40:87:c3:3d:f2:e8:ef:d6:09:e9:22:9e:84:45:
c1:66:0f:98:6c:f9:c5:50:fb:aa:5b:6d:7d:1c:8c:e8:c3:29:
53:9b:1b:20:3b:82:dc:de:46:28:e4:98:c1:0a:ca:fb:9c:90:
9b:0d:35:df:62:e2:49:e0:cf:83:0b:bb:c9:8d:b5:57:15:d7:
d7:c2:ca:6c:bb:98:ef:d3:3c:4b:19:13:13:be:93:49:d0:93:
9a:9e:dd:16:80:c1:cd:65:68:f7:0a:f6:ac:72:e1:b5:39:09:
2f:76:fc:71:99:8b:7a:56:66:28:78:b0:34:97:e1:3e:65:cd:
7d:e2:e8:54:21:89:4d:12:6c:6c:bb:69:b6:52:5a:55:24:80:
d6:7c:ae:ce:a3:6b:fb:50:73:b8:59:d9:53:61:97:a2:2c:27:
29:b9:2b:11:41:3c:76:70:74:a2:c7:64:17:30:5f:3c:ac:a2:
1a:0e:16:9e:98:2c:1a:04:d9:34:95:e0:bb:07:a4:3d:07:6f:
11:5c:86:8c:f3:36:0b:a8:06:00:ff:6e:e3:d4:cc:62:36:52:
e1:01:91:2e:e0:fb:77:d5:78:37:f9:67:4d:af:38:3f:2f:ef:
8f:08:13:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 07:44:05 2025 by rpki-client