Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/4f687f-42fe-47ae-a0db-4c5960ddeb37/1/ug_6Y8ki9EP25vsoMMlfyRj48uY.roa
File: ug_6Y8ki9EP25vsoMMlfyRj48uY.roa (raw, json)
Hash identifier: iRz3po2Z+C7i19HNQJqYaoWDRng24eOA7rSUnQMnMPo=
Subject key identifier: BA:0F:FA:63:C9:22:F4:43:F6:E6:FB:28:30:C9:5F:C9:18:F8:F2:E6
Certificate issuer: /CN=f5840adf84fb0b758eba8a5a135a980393e8bf73
Certificate serial: 0198BC8008DBBDD1C318358DE4E094767D01
Authority key identifier: F5:84:0A:DF:84:FB:0B:75:8E:BA:8A:5A:13:5A:98:03:93:E8:BF:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9YQK34T7C3WOuopaE1qYA5Pov3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/4f687f-42fe-47ae-a0db-4c5960ddeb37/1/ug_6Y8ki9EP25vsoMMlfyRj48uY.roa
Signing time: Mon 18 Aug 2025 09:26:04 +0000
ROA not before: Mon 18 Aug 2025 09:26:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204178
IP address blocks: 185.109.0.0/22 maxlen: 22
185.109.0.0/24 maxlen: 24
185.109.1.0/24 maxlen: 24
185.109.2.0/24 maxlen: 24
185.109.3.0/24 maxlen: 24
2a0c:cc0::/29 maxlen: 32
2a0c:cc0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/4f687f-42fe-47ae-a0db-4c5960ddeb37/1/9YQK34T7C3WOuopaE1qYA5Pov3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/4f687f-42fe-47ae-a0db-4c5960ddeb37/1/9YQK34T7C3WOuopaE1qYA5Pov3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/9YQK34T7C3WOuopaE1qYA5Pov3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:bc:80:08:db:bd:d1:c3:18:35:8d:e4:e0:94:76:7d:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5840adf84fb0b758eba8a5a135a980393e8bf73
Validity
Not Before: Aug 18 09:26:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ba0ffa63c922f443f6e6fb2830c95fc918f8f2e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:22:55:63:b2:9c:6f:e6:bf:a4:5e:f8:87:d4:
52:42:fa:2d:19:b8:8d:bc:e5:ba:7d:81:af:be:0a:
7c:f8:70:e3:58:c4:6f:c5:72:c6:f7:d8:ee:4d:1b:
45:a0:7f:14:56:42:5f:08:1a:50:fb:0d:fc:de:bc:
24:a1:a7:c5:fc:96:98:86:c2:a8:f0:bb:25:bd:93:
00:fe:4b:b5:e5:d0:1a:ec:54:39:51:6c:29:a8:09:
f9:23:2d:31:3c:f1:fe:fa:b4:7c:13:33:83:c8:63:
ed:74:b3:ed:22:b9:3b:b0:cf:6c:2b:c4:c0:83:3a:
c8:b1:00:84:4f:fa:2c:4d:1b:c6:16:4e:52:74:0e:
da:7a:f3:94:67:e0:f0:fc:a3:6f:07:7a:33:93:7a:
d1:34:fa:d6:de:01:06:13:e2:3d:27:47:48:f4:8f:
ab:08:a9:4a:08:f8:41:95:5f:1a:1b:24:5f:34:de:
d9:dd:2f:05:6c:8a:46:9a:b2:c9:02:3f:e0:57:0b:
05:52:8e:78:fe:a6:4c:37:2d:69:0a:23:38:e0:29:
26:80:3d:f8:4d:54:9f:ba:d8:5a:c7:54:a4:f5:6e:
af:10:6f:ff:b3:aa:5c:a6:3f:f7:07:2f:a5:25:2f:
c9:33:04:7d:42:cb:eb:24:90:95:ca:03:34:b4:94:
f9:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:0F:FA:63:C9:22:F4:43:F6:E6:FB:28:30:C9:5F:C9:18:F8:F2:E6
X509v3 Authority Key Identifier:
keyid:F5:84:0A:DF:84:FB:0B:75:8E:BA:8A:5A:13:5A:98:03:93:E8:BF:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9YQK34T7C3WOuopaE1qYA5Pov3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/4f687f-42fe-47ae-a0db-4c5960ddeb37/1/ug_6Y8ki9EP25vsoMMlfyRj48uY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/4f687f-42fe-47ae-a0db-4c5960ddeb37/1/9YQK34T7C3WOuopaE1qYA5Pov3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.109.0.0/22
IPv6:
2a0c:cc0::/29
Signature Algorithm: sha256WithRSAEncryption
06:c5:f0:fd:7b:a6:10:22:95:85:73:17:83:2f:c8:85:17:db:
a8:0f:45:11:cd:be:60:1d:b3:7a:42:c4:4d:f8:16:3d:15:3f:
ce:6b:fd:56:5d:76:16:f0:eb:fd:ff:7d:e8:98:9f:d9:68:9a:
ad:46:cd:30:14:9b:ef:e8:55:8f:b9:66:d6:e1:d9:bf:14:71:
a4:19:f8:8f:3f:93:fe:73:fd:b0:b1:33:4b:f5:5b:e3:2c:db:
88:80:d2:69:6c:94:38:9d:0b:a7:df:e2:78:fa:ea:1b:15:0a:
e9:63:51:da:32:7a:c9:fc:6b:79:40:39:ff:07:cd:ad:ac:89:
74:d8:a8:3a:04:20:21:73:8b:8b:22:00:ed:54:e9:09:d3:84:
eb:d4:28:6f:a3:a8:c3:24:18:1f:6f:21:54:02:a7:2c:ad:06:
84:1c:03:b9:47:42:ee:5b:8e:ce:e2:26:99:72:33:17:6b:a2:
fc:b0:a9:5c:ac:24:14:3c:cc:75:51:38:fd:75:f7:bd:5e:ab:
26:35:1c:b4:1e:4d:ff:d5:34:06:85:fd:26:4f:ff:f0:bc:d8:
08:db:92:57:ba:af:ec:3c:4c:ad:bb:24:99:cf:ca:3e:0e:63:
f9:af:6a:a3:5e:ae:db:15:6c:7c:d7:2e:8a:8f:a6:c4:cf:9d:
fe:51:9e:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:28:35 2025 by rpki-client