Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/UCV_wWObO7yn0rdsq3WdkI9c0ao.roa
File: UCV_wWObO7yn0rdsq3WdkI9c0ao.roa (raw, json)
Hash identifier: /hdTNc7Vsm2zFa0tev+TWkzp0ilL4Wfo3WC4MWXESGk=
Subject key identifier: 50:25:7F:C1:63:9B:3B:BC:A7:D2:B7:6C:AB:75:9D:90:8F:5C:D1:AA
Certificate issuer: /CN=d4c3b12c8d635190ec928437bbd6cb0e8c38f9a9
Certificate serial: 0197ABFC850BC4B781D0102B387B80B1D8E0
Authority key identifier: D4:C3:B1:2C:8D:63:51:90:EC:92:84:37:BB:D6:CB:0E:8C:38:F9:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1MOxLI1jUZDskoQ3u9bLDow4-ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/UCV_wWObO7yn0rdsq3WdkI9c0ao.roa
Signing time: Thu 26 Jun 2025 11:25:42 +0000
ROA not before: Thu 26 Jun 2025 11:25:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48918
IP address blocks: 80.66.96.0/20 maxlen: 20
80.66.96.0/23 maxlen: 23
80.66.98.0/24 maxlen: 24
80.66.101.0/24 maxlen: 24
80.66.102.0/24 maxlen: 24
80.66.104.0/23 maxlen: 23
80.66.107.0/24 maxlen: 24
80.66.110.0/24 maxlen: 24
185.198.200.0/22 maxlen: 24
195.20.20.0/22 maxlen: 24
2a0a:8ec0::/29 maxlen: 29
2a0a:8ec0:2001::/48 maxlen: 48
2a0a:8ec0:2002::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1MOxLI1jUZDskoQ3u9bLDow4-ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1MOxLI1jUZDskoQ3u9bLDow4-ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/1MOxLI1jUZDskoQ3u9bLDow4-ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ab:fc:85:0b:c4:b7:81:d0:10:2b:38:7b:80:b1:d8:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4c3b12c8d635190ec928437bbd6cb0e8c38f9a9
Validity
Not Before: Jun 26 11:25:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=50257fc1639b3bbca7d2b76cab759d908f5cd1aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:1e:48:26:61:57:28:fb:dd:4f:7e:ef:ef:69:
28:e0:ea:6a:51:4f:18:ad:9c:ad:26:25:87:c9:a8:
6c:aa:ea:66:d5:09:35:f4:d6:60:2c:99:b3:2c:94:
2b:35:e6:84:a6:d8:b6:29:65:4a:42:3e:c9:ed:c5:
f0:5b:ee:b5:ba:42:d6:1f:c5:e2:d0:ed:6b:26:22:
a9:e9:2c:c1:d9:df:67:08:a3:f5:c0:55:02:fe:62:
f1:73:6f:4e:71:1c:1a:19:4b:be:6e:30:82:43:a5:
09:61:2a:8f:6f:f4:ed:ad:83:ac:db:b4:dc:7e:98:
28:29:b2:28:84:96:5c:47:e3:8d:b9:a3:1b:63:1a:
b9:22:80:1b:a8:16:e0:91:64:d9:03:80:0e:66:85:
aa:02:ad:96:d3:f6:66:49:96:90:60:3e:e7:33:0a:
7c:f3:8d:90:c9:e8:72:1c:db:06:4a:f8:c6:91:2e:
3e:d8:c9:43:6e:ea:f1:da:96:15:d3:b8:14:1b:6a:
ad:09:d4:9e:d5:5e:e9:f0:1a:c1:ba:b6:27:a1:7f:
b0:16:a8:7c:fc:48:bc:da:56:24:e6:b5:74:17:8f:
8a:09:c7:52:17:01:d9:53:2a:b7:46:bc:e5:a3:61:
76:65:d7:3b:1b:4f:72:34:df:67:dd:3b:b6:b7:c5:
19:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:25:7F:C1:63:9B:3B:BC:A7:D2:B7:6C:AB:75:9D:90:8F:5C:D1:AA
X509v3 Authority Key Identifier:
keyid:D4:C3:B1:2C:8D:63:51:90:EC:92:84:37:BB:D6:CB:0E:8C:38:F9:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1MOxLI1jUZDskoQ3u9bLDow4-ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/UCV_wWObO7yn0rdsq3WdkI9c0ao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1MOxLI1jUZDskoQ3u9bLDow4-ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.66.96.0/20
185.198.200.0/22
195.20.20.0/22
IPv6:
2a0a:8ec0::/29
Signature Algorithm: sha256WithRSAEncryption
70:df:0f:5f:9e:3c:51:d6:17:b2:b1:ca:62:53:a1:66:a7:1f:
bb:4e:6d:b4:9a:94:63:56:23:7c:19:07:8c:88:21:7c:8a:ab:
11:d1:f7:9b:44:3d:e4:19:e1:36:bc:40:f2:96:92:2d:18:1f:
71:72:77:7b:de:f5:fb:65:e7:7c:d8:34:16:f7:c4:9c:ec:53:
d4:bb:b5:b6:72:53:c6:88:16:cc:e9:4b:83:64:5a:b1:18:a1:
9f:31:1a:ee:64:65:c1:48:24:5f:a2:e6:b8:58:99:80:ef:67:
1b:3d:32:27:4e:37:3b:50:15:b5:f7:f4:db:3e:f8:31:58:23:
69:b9:5b:82:ae:b2:bd:2a:4d:7e:bd:a3:40:48:f7:7e:d6:02:
fd:13:b1:7d:ea:06:7d:91:b2:bd:c5:ea:a5:ed:09:c7:84:6f:
ec:58:6f:4b:34:f6:bb:bf:bd:0c:64:ae:4e:4d:21:d4:8f:7d:
57:2c:d9:b0:d0:45:77:6b:b8:f1:28:fd:ec:6d:91:ba:62:99:
a8:f4:cd:db:fd:96:81:25:6a:4d:57:ee:d8:6c:45:19:9e:78:
4c:5c:f5:12:5d:15:2b:a9:65:8f:19:65:ed:77:0e:8b:d8:c3:
6c:2f:ab:8e:29:99:d9:a5:8d:e7:e1:a4:fd:f8:01:2c:51:67:
c2:08:e7:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 07:51:46 2025 by rpki-client