Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/U1WVDtRybfuA27Bw0OWg-bI_dzM.roa
File: U1WVDtRybfuA27Bw0OWg-bI_dzM.roa (raw, json)
Hash identifier: LsK7DiDulGpwVEDHiQ40BKAJ5fAZoyYV9dOv8KAEGzA=
Subject key identifier: 53:55:95:0E:D4:72:6D:FB:80:DB:B0:70:D0:E5:A0:F9:B2:3F:77:33
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 01998717B8DFE71ABE488DF2F3D8AC858DDB
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/U1WVDtRybfuA27Bw0OWg-bI_dzM.roa
Signing time: Fri 26 Sep 2025 17:35:02 +0000
ROA not before: Fri 26 Sep 2025 17:35:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 142578
IP address blocks: 213.176.8.0/21 maxlen: 24
213.176.32.0/19 maxlen: 24
213.176.80.0/21 maxlen: 24
213.176.96.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:87:17:b8:df:e7:1a:be:48:8d:f2:f3:d8:ac:85:8d:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Sep 26 17:35:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5355950ed4726dfb80dbb070d0e5a0f9b23f7733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:9c:8c:86:c3:26:f9:ed:2a:59:c9:88:57:93:
32:5a:b4:df:1e:a3:10:1a:c0:50:71:8e:1d:a4:4b:
66:e7:7b:93:76:b8:f4:d1:73:80:3c:c2:21:ae:5d:
f6:58:a2:82:b3:0b:b6:00:99:4a:ba:1c:29:c6:ee:
3c:02:ed:6e:f1:82:8a:ab:3c:a4:b6:52:40:ba:d4:
9c:d3:cb:9d:31:ef:db:67:67:59:96:83:eb:4a:7e:
42:dd:bd:e6:35:55:ed:66:0d:8f:87:6a:5b:e0:b0:
fb:4d:50:e5:58:89:9e:63:12:6d:ae:6d:93:e8:f4:
3b:6b:f6:49:cb:2d:37:7a:a2:91:ee:d2:63:60:36:
95:09:a6:9a:c9:72:d9:00:9e:c4:93:03:a1:46:fd:
43:f9:d3:0f:ea:9e:05:b9:94:29:60:a1:8c:f8:d9:
93:3b:b6:ee:7e:f6:c2:fb:b3:1f:5a:c1:cd:36:0e:
df:cb:55:4e:31:c2:9d:08:bb:8d:e4:6b:fe:26:65:
d5:26:d8:93:bb:bd:c5:a9:9b:b4:6a:8b:e3:cc:ea:
f3:be:8d:fb:da:8e:2c:3c:a3:52:e1:58:5d:c2:40:
1a:e1:d7:95:f6:8b:4f:3e:81:df:4e:fa:5f:ec:9d:
55:ab:93:53:01:68:06:c1:8a:53:41:63:23:4e:31:
05:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:55:95:0E:D4:72:6D:FB:80:DB:B0:70:D0:E5:A0:F9:B2:3F:77:33
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/U1WVDtRybfuA27Bw0OWg-bI_dzM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.176.8.0/21
213.176.32.0/19
213.176.80.0/21
213.176.96.0/20
Signature Algorithm: sha256WithRSAEncryption
5a:78:54:d0:bc:9f:68:3f:98:ba:38:f7:4b:ec:2e:dc:aa:e4:
2f:e6:5c:5e:81:de:f8:8e:44:08:b5:a7:13:ce:30:eb:21:5a:
3e:e1:32:3d:f8:d6:46:52:06:e3:ea:a5:fa:07:84:41:32:07:
d1:16:4e:d8:df:a2:64:81:68:7c:7a:31:a4:88:fd:87:12:0e:
6f:84:61:57:e2:b8:bd:f6:c6:27:a0:54:2e:6a:14:1a:3f:ff:
9d:43:67:5c:97:4c:c6:39:aa:e6:cd:4d:cc:25:d2:c0:e7:d5:
dd:71:34:d6:f0:98:57:ab:29:e4:0c:48:4a:52:4e:06:07:f1:
d7:20:74:96:81:10:81:97:f4:36:99:09:19:2b:8e:e4:df:14:
43:df:1b:4e:01:dc:ba:b2:cb:98:ad:9f:00:3c:71:54:52:ca:
05:f2:bf:8e:89:b3:a8:42:43:d5:9b:ae:ff:5c:78:0d:92:3e:
bc:91:59:78:91:3a:fb:7a:8e:24:1b:65:95:6c:bf:12:c6:f5:
34:f5:8e:7c:c9:d7:bc:19:b5:2e:f7:52:e6:0a:60:92:42:3e:
dc:89:08:70:67:b9:14:23:d9:99:d7:cf:b1:ee:4b:95:b6:a3:
2c:24:3a:b5:fe:f1:db:22:95:7e:5a:68:fa:08:f4:62:e1:5c:
57:d3:ee:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:09:10 2025 by rpki-client