Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/b70f5c-e831-427a-ada4-3a73be90a506/1/uvlLUALpDF1wh1MewC4fR9s0Hsc.roa
File: uvlLUALpDF1wh1MewC4fR9s0Hsc.roa (raw, json)
Hash identifier: M16EAVQJOFd1bjjRXsF6MezxtZfD4eItTZd4rdVVcXI=
Subject key identifier: BA:F9:4B:50:02:E9:0C:5D:70:87:53:1E:C0:2E:1F:47:DB:34:1E:C7
Certificate issuer: /CN=34b960f6f19255ea39666f833ebe271761994b15
Certificate serial: 0199700B779B5C1627E7535E9FFE21E4B4CC
Authority key identifier: 34:B9:60:F6:F1:92:55:EA:39:66:6F:83:3E:BE:27:17:61:99:4B:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NLlg9vGSVeo5Zm-DPr4nF2GZSxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/b70f5c-e831-427a-ada4-3a73be90a506/1/uvlLUALpDF1wh1MewC4fR9s0Hsc.roa
Signing time: Mon 22 Sep 2025 06:10:23 +0000
ROA not before: Mon 22 Sep 2025 06:10:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50304
IP address blocks: 77.246.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/b70f5c-e831-427a-ada4-3a73be90a506/1/NLlg9vGSVeo5Zm-DPr4nF2GZSxU.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/b70f5c-e831-427a-ada4-3a73be90a506/1/NLlg9vGSVeo5Zm-DPr4nF2GZSxU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NLlg9vGSVeo5Zm-DPr4nF2GZSxU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:70:0b:77:9b:5c:16:27:e7:53:5e:9f:fe:21:e4:b4:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34b960f6f19255ea39666f833ebe271761994b15
Validity
Not Before: Sep 22 06:10:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=baf94b5002e90c5d7087531ec02e1f47db341ec7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:14:14:05:51:e5:aa:e0:07:fa:64:28:19:28:
70:4e:39:4b:05:d2:48:8e:b4:5b:9f:41:30:06:70:
e7:ee:27:ef:60:a0:cb:87:c4:07:41:60:a0:70:b8:
16:f5:69:e8:83:80:b6:e2:d9:1d:ad:20:7d:01:43:
52:45:e4:e5:8d:74:73:34:58:79:6d:3f:4c:32:76:
df:9a:4f:87:5f:16:e9:fb:53:c0:a0:f1:58:79:31:
ff:e1:de:31:83:ec:db:77:17:2c:1b:56:1b:4e:71:
c1:4b:d4:90:d4:fd:35:d4:05:5b:c0:9b:89:8a:71:
d8:75:af:20:22:d6:0d:71:82:9c:02:64:8e:29:a5:
a6:7e:d2:4c:03:86:68:93:29:42:aa:85:36:91:bb:
e2:08:29:dc:b6:48:d0:09:78:bc:ea:15:47:af:dd:
7c:a9:ac:34:71:56:2b:0a:e9:0b:ca:09:29:58:e0:
a1:91:00:36:ae:d0:96:17:1c:85:53:1e:74:6d:af:
32:8b:b5:63:d3:b0:73:ee:df:40:0d:21:a3:a5:6d:
18:ca:57:d1:15:f6:a3:e9:f0:d4:b1:ab:06:77:b5:
30:b6:10:5d:27:55:a4:01:fd:ae:4a:e8:a0:5c:76:
09:dd:2f:cf:b7:03:32:12:3c:9f:d2:cb:6b:21:36:
4c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:F9:4B:50:02:E9:0C:5D:70:87:53:1E:C0:2E:1F:47:DB:34:1E:C7
X509v3 Authority Key Identifier:
keyid:34:B9:60:F6:F1:92:55:EA:39:66:6F:83:3E:BE:27:17:61:99:4B:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLlg9vGSVeo5Zm-DPr4nF2GZSxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b70f5c-e831-427a-ada4-3a73be90a506/1/uvlLUALpDF1wh1MewC4fR9s0Hsc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b70f5c-e831-427a-ada4-3a73be90a506/1/NLlg9vGSVeo5Zm-DPr4nF2GZSxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.246.246.0/24
Signature Algorithm: sha256WithRSAEncryption
05:5c:42:47:04:32:02:d3:09:31:20:9e:59:35:06:fd:f6:b6:
45:7c:02:3a:55:4c:5e:6c:94:17:47:9c:ee:5e:56:df:b4:aa:
f5:d6:af:66:52:95:97:07:aa:47:2a:13:5f:35:b5:51:ea:6c:
3d:7b:21:23:a5:5a:3f:a8:f5:d3:84:ad:6e:2f:5b:99:4f:bc:
4d:41:e0:99:d1:b9:3d:06:70:8f:8e:42:51:98:af:1e:8d:ef:
cd:21:3b:02:34:d2:1b:7a:c7:4a:99:9a:a4:f5:42:e8:7d:4d:
f0:0e:db:b3:55:8a:97:e5:2a:85:e3:0a:3a:b0:c0:2c:70:31:
4e:e5:e3:0d:77:5f:d7:9b:3d:56:cf:6b:1e:08:9b:ed:77:d5:
68:70:d8:c8:03:0d:71:c1:d4:32:38:99:ab:73:c5:40:6f:db:
e2:20:70:4c:f3:26:b2:78:55:a4:a7:70:74:a8:6f:e2:36:6b:
09:b6:c3:b6:da:8d:04:7f:52:a4:66:e7:03:49:e2:52:d7:7b:
cf:68:15:12:b2:37:af:71:aa:56:4d:01:98:d7:06:68:fe:b5:
b0:45:ac:e6:03:f6:ed:73:6c:5e:c7:f2:3a:95:e8:8b:54:d6:
18:ce:93:a6:76:30:11:94:13:e5:3c:fd:ed:07:d5:5a:8e:52:
6e:18:79:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:42:38 2025 by rpki-client