Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/uGHkI7wOvkKjI8OoL9aXLCEVDII.roa
File: uGHkI7wOvkKjI8OoL9aXLCEVDII.roa (raw, json)
Hash identifier: bbv8y0FVeuGBwYa6rCHsI6HiNoLXXg+4RDwa0bINQec=
Subject key identifier: B8:61:E4:23:BC:0E:BE:42:A3:23:C3:A8:2F:D6:97:2C:21:15:0C:82
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01999EA90C83913D2E6F7BA1798CB41F791C
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/uGHkI7wOvkKjI8OoL9aXLCEVDII.roa
Signing time: Wed 01 Oct 2025 07:25:02 +0000
ROA not before: Wed 01 Oct 2025 07:25:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 401476
IP address blocks: 194.231.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:9e:a9:0c:83:91:3d:2e:6f:7b:a1:79:8c:b4:1f:79:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Oct 1 07:25:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b861e423bc0ebe42a323c3a82fd6972c21150c82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5f:78:43:c9:8f:13:4a:38:15:59:81:48:ee:
64:b2:51:86:fc:8d:d4:ab:08:16:e0:b1:8f:df:0d:
e6:5b:67:06:ce:42:14:6a:c2:e9:c1:0b:c1:c8:0a:
10:9b:3f:d1:f0:9d:44:dc:1a:5f:6f:70:d6:8b:24:
00:43:67:67:99:5a:d0:0e:b4:80:04:cb:09:95:eb:
76:76:16:15:d6:74:f7:e4:59:31:99:7b:cf:a4:70:
5e:a1:17:b7:16:f6:5f:28:87:5d:16:a6:87:44:fb:
88:26:5f:10:fe:bc:ab:fd:8b:76:ca:d5:06:be:cd:
61:c5:ad:52:8a:22:2c:28:ae:74:5f:cd:46:68:11:
67:a7:c7:ee:a0:6d:c1:71:f6:a3:1b:83:9a:50:a6:
06:de:42:33:61:79:9e:ab:06:af:b7:71:c0:50:ab:
5d:c5:fd:fb:35:55:3e:27:23:ef:f3:b4:94:db:3d:
8d:a7:40:75:36:66:2c:34:37:ea:07:49:2d:27:bb:
71:b0:4a:8c:6a:a1:7b:fe:e8:ba:ea:28:de:7e:15:
96:7b:8d:db:70:b7:c4:57:b6:b9:da:8b:cf:41:63:
6a:1b:cc:d7:b1:ff:3a:dc:54:8b:c3:e7:6f:65:1f:
d8:3e:c5:4c:6d:f3:bf:07:5a:3a:18:58:2d:ac:fa:
3c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:61:E4:23:BC:0E:BE:42:A3:23:C3:A8:2F:D6:97:2C:21:15:0C:82
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/uGHkI7wOvkKjI8OoL9aXLCEVDII.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.231.215.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:2c:e8:e7:57:ce:45:00:d3:6a:d0:07:96:ce:4d:57:f4:ac:
2d:e9:26:25:cb:f3:bc:23:fa:64:8a:93:e2:87:43:f9:47:d6:
a7:3d:7e:0b:e6:03:58:f2:ce:2e:6d:ba:e2:d2:4d:2b:d7:8b:
ea:f0:db:f9:7d:02:11:2e:3e:f6:cd:1b:f9:22:ec:96:14:4d:
9d:6d:29:71:28:59:42:56:63:3d:36:54:ac:bb:cf:18:90:f8:
14:de:c7:2b:eb:b5:f9:7e:2a:0d:a9:f8:62:d2:1e:e4:81:1a:
9e:ac:94:0d:bf:42:f1:55:07:07:02:1d:86:87:6d:56:be:d0:
88:98:78:a9:49:21:32:b9:51:91:b9:8e:8f:57:f1:29:21:16:
a3:1d:5f:09:f0:60:f1:c3:6b:a5:9e:76:d5:34:e2:c7:02:23:
a6:ce:84:a0:94:f1:b5:c0:8b:d6:4c:f1:84:e6:ed:eb:64:54:
6c:64:2b:7e:ba:2f:9e:63:4c:3f:61:dc:da:3d:02:06:21:f0:
ef:01:e5:12:c8:ae:e7:8b:a5:bf:f1:dd:40:dc:62:66:d1:bb:
be:8e:4b:e2:2c:35:85:fa:95:fb:23:36:cf:4c:71:58:cb:4d:
32:4f:7d:84:b7:35:33:16:a0:84:d6:20:e3:b7:30:00:8d:0f:
e5:d1:05:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:46:16 2025 by rpki-client