Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/Ucc7G6fkISNX-DJdUKSUnr0NJcI.roa
File: Ucc7G6fkISNX-DJdUKSUnr0NJcI.roa (raw, json)
Hash identifier: pjuPJruYmJVk/cl4SauyxNZ2fbLPsC7KQwzOn9KeIkQ=
Subject key identifier: 51:C7:3B:1B:A7:E4:21:23:57:F8:32:5D:50:A4:94:9E:BD:0D:25:C2
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 01989E82BC3AED6649EF2AEABF0FF90B2F18
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/Ucc7G6fkISNX-DJdUKSUnr0NJcI.roa
Signing time: Tue 12 Aug 2025 13:40:24 +0000
ROA not before: Tue 12 Aug 2025 13:40:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212396
IP address blocks: 46.244.96.0/24 maxlen: 24
170.62.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 07:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9e:82:bc:3a:ed:66:49:ef:2a:ea:bf:0f:f9:0b:2f:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Aug 12 13:40:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=51c73b1ba7e4212357f8325d50a4949ebd0d25c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:93:bc:19:65:81:d9:f0:61:69:1a:f0:f5:4a:
90:bc:ad:cd:6c:d0:73:8b:a6:1f:ec:c0:98:8a:f6:
84:50:03:5e:19:a9:b5:d6:5a:a2:66:b2:ee:d0:2c:
d5:b4:30:40:67:ea:54:3f:9d:75:59:14:3f:a9:be:
2e:cb:53:8f:a6:20:3a:91:f7:7b:83:4a:99:24:12:
42:48:5a:b9:10:10:a8:44:37:e0:24:cc:db:b1:2d:
2c:2a:8b:e3:de:52:14:12:80:41:36:8f:c2:00:ee:
c2:59:75:87:83:e4:4f:39:9c:03:42:61:c1:a4:71:
e1:24:02:12:c7:38:46:82:6c:08:06:3e:ee:ad:cb:
2b:29:cb:e7:18:b5:05:5b:1c:27:58:c1:cb:0a:2d:
31:dc:fe:bf:85:f2:73:34:d5:e4:94:48:70:5c:96:
2d:a7:53:25:c1:79:9c:34:06:1d:65:2c:b1:00:c0:
98:85:34:81:b9:fd:3b:26:a8:94:64:7a:00:fc:95:
10:e2:6a:27:dc:f4:4b:46:c4:c2:f2:e5:42:a9:85:
78:79:b0:d8:6a:88:45:8d:ae:ca:73:2a:39:a7:38:
31:fa:46:41:bd:8e:08:38:f3:b1:ba:80:1e:d7:30:
01:52:c4:76:37:20:65:b2:86:40:ba:aa:82:94:e8:
f0:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:C7:3B:1B:A7:E4:21:23:57:F8:32:5D:50:A4:94:9E:BD:0D:25:C2
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/Ucc7G6fkISNX-DJdUKSUnr0NJcI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.244.96.0/24
170.62.202.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:fd:1d:8d:03:2a:07:ce:b0:ea:38:59:8c:4b:40:61:be:43:
19:c5:be:58:fb:e8:9d:33:ec:53:e4:76:99:b4:8c:b3:11:4e:
71:5f:1e:a4:81:db:5c:bc:14:91:08:ed:fa:38:52:1b:ea:e4:
1d:3b:6c:81:f1:0d:4b:6a:a5:d0:2e:05:63:d7:b4:6f:03:43:
6b:17:65:24:2a:0a:cb:88:f8:2b:25:2c:38:59:23:70:40:09:
00:61:bf:36:e7:70:a6:41:53:8e:74:87:e7:11:0b:c8:19:a2:
2d:8e:b5:c9:67:37:78:5a:c1:64:e7:c4:ae:d6:eb:2e:c4:2e:
65:d8:c0:23:f9:96:b6:7a:c1:25:93:3e:6b:1c:65:88:cd:40:
4b:9d:fc:2e:20:69:e4:5b:8b:11:44:a7:b0:84:ce:83:0f:e6:
e1:54:87:d9:2b:74:be:97:f9:fb:e1:56:93:88:51:d9:89:0a:
1e:66:26:e6:f8:2a:ec:cc:dd:dd:c9:6e:e6:af:77:e2:5d:6d:
cf:8a:76:e3:6f:0c:36:79:52:10:07:35:30:b4:a2:3f:73:b6:
8c:72:06:5e:02:1f:cd:ac:43:5b:d3:e2:7b:e1:47:55:83:b1:
a8:89:40:92:c1:58:88:e2:a7:d2:62:9a:24:b2:9d:24:05:9e:
c5:b9:da:da
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZiegrw67WZJ7yrqvw/5Cy8YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwNGE1ODA0N2YzN2JiYzA1Nzk0NGJiZjhjYWQ4NzQyODc5
NTkyZGEwHhcNMjUwODEyMTM0MDI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MWM3M2IxYmE3ZTQyMTIzNTdmODMyNWQ1MGE0OTQ5ZWJkMGQyNWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspO8GWWB2fBhaRrw9UqQvK3NbNBz
i6Yf7MCYivaEUANeGam11lqiZrLu0CzVtDBAZ+pUP511WRQ/qb4uy1OPpiA6kfd7
g0qZJBJCSFq5EBCoRDfgJMzbsS0sKovj3lIUEoBBNo/CAO7CWXWHg+RPOZwDQmHB
pHHhJAISxzhGgmwIBj7urcsrKcvnGLUFWxwnWMHLCi0x3P6/hfJzNNXklEhwXJYt
p1MlwXmcNAYdZSyxAMCYhTSBuf07JqiUZHoA/JUQ4mon3PRLRsTC8uVCqYV4ebDY
aohFja7Kcyo5pzgx+kZBvY4IOPOxuoAe1zABUsR2NyBlsoZAuqqClOjwvwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFHHOxun5CEjV/gyXVCklJ69DSXCMB8GA1UdIwQY
MBaAFPBKWAR/N7vAV5RLv4yth0KHlZLaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYt
ZjVmYjcxYjlhNTFmLzEvVWNjN0c2ZmtJU05YLURKZFVLU1VucjBOSmNJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYtZjVmYjcxYjlhNTFm
LzEvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALvRgAwQA
qj7KMA0GCSqGSIb3DQEBCwUAA4IBAQDI/R2NAyoHzrDqOFmMS0BhvkMZxb5Y++id
M+xT5HaZtIyzEU5xXx6kgdtcvBSRCO36OFIb6uQdO2yB8Q1LaqXQLgVj17RvA0Nr
F2UkKgrLiPgrJSw4WSNwQAkAYb8253CmQVOOdIfnEQvIGaItjrXJZzd4WsFk58Su
1usuxC5l2MAj+Za2esElkz5rHGWIzUBLnfwuIGnkW4sRRKewhM6DD+bhVIfZK3S+
l/n74VaTiFHZiQoeZibm+CrszN3dyW7mr3fiXW3Pinbjbww2eVIQBzUwtKI/c7aM
cgZeAh/NrENb0+J74UdVg7GoiUCSwViI4qfSYpoksp0kBZ7Fudra
-----END CERTIFICATE-----
Generated at Sat Aug 23 16:58:56 2025 by rpki-client