Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/UKet4xguKhNRTVagZCZpq6RZTow.roa
File: UKet4xguKhNRTVagZCZpq6RZTow.roa (raw, json)
Hash identifier: kR15GULz6AESOB/iUESWqC+TtSLiOAtxU4Jvx6zpQ7w=
Subject key identifier: 50:A7:AD:E3:18:2E:2A:13:51:4D:56:A0:64:26:69:AB:A4:59:4E:8C
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 0199B359584FAD4F2C9A835923FE701D0E53
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/UKet4xguKhNRTVagZCZpq6RZTow.roa
Signing time: Sun 05 Oct 2025 07:50:00 +0000
ROA not before: Sun 05 Oct 2025 07:50:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214347
IP address blocks: 194.231.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:b3:59:58:4f:ad:4f:2c:9a:83:59:23:fe:70:1d:0e:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Oct 5 07:50:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=50a7ade3182e2a13514d56a0642669aba4594e8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d2:86:56:9c:21:2f:8d:12:42:f4:e8:05:cc:
bd:93:8e:32:cd:08:b8:82:5e:d5:ac:3e:33:88:16:
65:5a:96:a6:6f:3a:7f:c2:d3:c2:c0:49:a0:ef:68:
fd:fd:c8:58:23:dd:fe:0e:b9:6f:12:9b:c4:d7:6a:
e0:34:40:cc:ef:85:2a:c1:0b:8b:89:3f:10:e8:f7:
1c:12:40:06:3a:ec:de:b5:55:8e:61:ae:4f:af:d1:
0d:95:86:ff:aa:da:a1:3c:de:6a:7b:c8:49:79:e7:
a9:4b:29:03:5a:0a:8e:d7:b4:a3:dc:55:a5:93:5d:
09:38:d1:92:89:8d:3a:2f:7e:e2:f8:83:b5:3b:8a:
89:94:de:c4:90:08:59:b0:ad:41:33:bb:93:ed:8f:
b8:41:1f:44:ab:c7:93:7d:9a:2c:63:4e:9c:89:7c:
f7:aa:d2:94:b7:b6:80:a5:69:4b:ea:26:14:2d:84:
5d:1d:5e:f7:ea:64:c1:27:64:82:34:e2:96:36:b2:
dd:83:4a:26:54:1b:2c:75:2e:ec:c4:bf:e7:e6:ce:
45:83:b1:4a:3a:57:e4:77:65:c6:fb:b7:6a:19:03:
04:b9:89:0a:1d:d2:58:84:9a:20:2f:25:d0:89:5f:
be:f0:3d:fa:7f:58:cd:01:93:de:7c:91:d8:e1:cb:
5a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:A7:AD:E3:18:2E:2A:13:51:4D:56:A0:64:26:69:AB:A4:59:4E:8C
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/UKet4xguKhNRTVagZCZpq6RZTow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.231.194.0/24
Signature Algorithm: sha256WithRSAEncryption
e5:79:92:88:76:e5:a9:d1:31:31:a8:e3:5c:e4:d3:81:61:f4:
08:3a:a9:fd:02:dd:fb:63:a2:5d:fd:34:f1:c3:f9:06:46:47:
15:f5:d1:73:84:1d:72:67:90:a3:b6:91:eb:8f:a0:23:ec:ad:
8f:64:bc:8d:3d:00:65:bf:47:40:8c:8e:53:37:72:2f:6c:e6:
08:cf:f9:f9:09:65:13:b7:c5:49:44:4d:95:6c:97:30:80:e9:
a4:e1:60:d2:43:18:5c:5d:4d:b2:76:f4:18:5b:11:37:2d:77:
48:2a:6c:ab:f3:b3:7e:86:8f:0b:ba:87:ea:3c:23:17:78:db:
a5:5b:6a:f5:bd:64:b9:76:7a:14:72:5a:92:56:b3:80:21:a7:
dd:ad:92:18:06:37:bf:54:25:4b:45:a4:b8:b1:72:0c:fb:a7:
82:e2:de:34:22:4b:82:7d:cf:e9:3a:70:f5:78:db:fe:cf:46:
a5:d6:ed:e8:a0:15:fc:e2:87:ee:83:19:5f:5b:94:a4:f4:2c:
06:14:7f:19:00:87:15:c2:5d:d6:6c:f3:0c:28:58:f7:17:35:
6d:9e:ee:05:36:b2:eb:31:fd:48:99:35:94:e6:2e:bf:ca:2b:
e2:f6:cd:ca:f1:b5:7e:e7:68:10:21:98:6d:e4:a4:e7:1c:e2:
bb:05:55:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:12:57 2025 by rpki-client