Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/_cUgUw_BRt2ky383BgwJeRuvLBI.roa
File: _cUgUw_BRt2ky383BgwJeRuvLBI.roa (raw, json)
Hash identifier: mRndir2tfJNGSDw48vuCEotaV1wwM7VOqj41aXaU9a8=
Subject key identifier: FD:C5:20:53:0F:C1:46:DD:A4:CB:7F:37:06:0C:09:79:1B:AF:2C:12
Certificate issuer: /CN=215266435617fa0f1fd2837ec80c6d83b0b9d608
Certificate serial: 0199FDA47AD15754E53781214ACE02DCD737
Authority key identifier: 21:52:66:43:56:17:FA:0F:1F:D2:83:7E:C8:0C:6D:83:B0:B9:D6:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IVJmQ1YX-g8f0oN-yAxtg7C51gg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/_cUgUw_BRt2ky383BgwJeRuvLBI.roa
Signing time: Sun 19 Oct 2025 18:03:58 +0000
ROA not before: Sun 19 Oct 2025 18:03:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214526
IP address blocks: 194.26.195.0/24 maxlen: 24
217.114.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/IVJmQ1YX-g8f0oN-yAxtg7C51gg.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/IVJmQ1YX-g8f0oN-yAxtg7C51gg.mft
rsync://rpki.ripe.net/repository/DEFAULT/IVJmQ1YX-g8f0oN-yAxtg7C51gg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 18:03:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:a4:7a:d1:57:54:e5:37:81:21:4a:ce:02:dc:d7:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=215266435617fa0f1fd2837ec80c6d83b0b9d608
Validity
Not Before: Oct 19 18:03:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fdc520530fc146dda4cb7f37060c09791baf2c12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:74:18:27:7d:71:e8:eb:a2:29:a2:c2:7d:eb:
e5:2d:bc:ea:60:df:2f:53:20:45:0a:2b:4d:e5:28:
c3:8e:9e:f9:e2:33:cc:3d:3d:76:b5:c7:31:7d:94:
84:d7:d2:79:fb:dc:be:85:8a:71:de:52:df:c8:60:
5e:bf:7b:a1:59:2c:78:03:4d:15:ae:71:ab:30:e0:
2c:77:1b:4d:a7:f4:69:d3:e8:59:6c:8e:48:2c:66:
ac:92:8e:23:6f:4b:c6:aa:4f:98:34:ba:1e:57:eb:
73:6e:37:e5:52:b1:42:e0:66:96:11:1a:ff:e5:4e:
33:4e:d7:a5:87:a4:20:00:7e:c5:1c:46:8f:db:af:
e0:67:c4:98:8a:ec:21:20:c7:73:b8:6d:8a:d1:43:
1c:cc:75:36:26:42:71:4e:db:9d:8a:06:5e:dd:66:
40:37:e8:51:e8:55:41:a7:ba:de:96:bb:11:63:59:
92:cb:39:5b:b5:77:fc:ed:1d:6a:8c:0f:81:34:22:
fa:f8:db:59:9a:83:c4:5e:99:0d:ce:b5:75:00:fc:
83:c8:28:10:5b:22:90:ca:b2:62:da:6d:5b:a5:be:
2f:c6:d7:49:63:34:59:03:9f:7d:66:8d:06:5c:9f:
5c:c3:e1:eb:a2:57:c8:fc:6b:44:7b:73:66:b9:bf:
d3:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:C5:20:53:0F:C1:46:DD:A4:CB:7F:37:06:0C:09:79:1B:AF:2C:12
X509v3 Authority Key Identifier:
keyid:21:52:66:43:56:17:FA:0F:1F:D2:83:7E:C8:0C:6D:83:B0:B9:D6:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVJmQ1YX-g8f0oN-yAxtg7C51gg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/_cUgUw_BRt2ky383BgwJeRuvLBI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/IVJmQ1YX-g8f0oN-yAxtg7C51gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.195.0/24
217.114.40.0/24
Signature Algorithm: sha256WithRSAEncryption
21:20:1f:71:f9:3a:fa:52:15:11:4c:ca:9d:7c:09:12:56:7e:
c4:c6:68:2a:7e:61:8d:39:7c:47:30:8f:9d:d9:80:97:ba:95:
c2:96:9e:2a:4c:2f:f5:e0:f4:06:1c:65:f0:ca:f5:46:6a:aa:
09:e3:94:61:2c:bf:58:3c:50:4c:82:73:8f:1c:0a:1a:b4:ad:
8e:e9:bb:f7:87:2e:ab:7b:0f:92:e3:c7:e6:c2:da:00:88:c2:
d9:bf:b1:ec:b9:cc:cb:ef:38:a4:7b:64:a1:6c:04:d1:9d:cb:
31:b8:6d:3d:36:b0:07:75:ae:4d:6e:e0:a2:22:54:63:e6:66:
e3:5a:bb:f0:9f:0c:a2:f2:2c:a4:f6:59:50:64:07:48:2e:4b:
35:f0:25:1e:b0:ed:6c:c3:c8:24:9f:38:5e:36:bd:5c:f9:51:
52:00:f1:8e:fd:0a:52:9b:9e:77:95:b8:d8:f8:a2:2b:63:2d:
2c:4a:aa:9f:fb:99:ec:0b:e1:5d:31:03:3d:7c:da:4f:3b:b1:
2b:5b:b3:c5:23:24:b8:1f:b9:ce:9a:a2:45:a0:ef:4a:74:96:
fa:0a:79:59:70:f8:92:25:5b:e9:37:e6:91:45:cc:61:68:2e:
c1:4e:9b:2c:f8:17:4b:2f:41:d0:9a:77:38:1e:eb:2d:a0:df:
d9:eb:74:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:47:39 2025 by rpki-client