Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/UxDhbbGiLqhG0cjqvQTDDPyodT8.roa
File: UxDhbbGiLqhG0cjqvQTDDPyodT8.roa (raw, json)
Hash identifier: /jH4fHuxOiDmcdoWH8bkN08eFhE6HPAkApmfAQgC6ts=
Subject key identifier: 53:10:E1:6D:B1:A2:2E:A8:46:D1:C8:EA:BD:04:C3:0C:FC:A8:75:3F
Certificate issuer: /CN=a3f1b22b2054502bfd3889138291103d83b6a50e
Certificate serial: 019884ADE286669CDEB51C30E04F851BA154
Authority key identifier: A3:F1:B2:2B:20:54:50:2B:FD:38:89:13:82:91:10:3D:83:B6:A5:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/UxDhbbGiLqhG0cjqvQTDDPyodT8.roa
Signing time: Thu 07 Aug 2025 13:17:24 +0000
ROA not before: Thu 07 Aug 2025 13:17:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208972
IP address blocks: 46.235.14.0/24 maxlen: 24
178.210.180.0/24 maxlen: 24
217.70.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:84:ad:e2:86:66:9c:de:b5:1c:30:e0:4f:85:1b:a1:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3f1b22b2054502bfd3889138291103d83b6a50e
Validity
Not Before: Aug 7 13:17:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5310e16db1a22ea846d1c8eabd04c30cfca8753f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1a:82:cd:2c:d4:86:15:7a:02:48:fb:2f:9d:
18:f2:e9:e1:88:c6:26:0a:2d:5b:c3:6d:8a:aa:c9:
05:15:62:03:f7:6e:fd:42:40:38:f0:b4:99:d3:d2:
2f:80:39:01:e6:e2:2b:66:79:41:30:0d:68:0a:5b:
f8:cb:88:f2:dd:91:53:66:f1:f2:99:d2:1d:a5:57:
9d:b5:90:47:c1:a1:94:87:93:48:f4:34:b7:3f:0e:
82:ac:bf:8a:ac:6f:33:45:9d:ec:4f:2e:ff:50:88:
ec:94:6a:92:ac:77:1c:20:52:09:29:53:b6:29:44:
51:94:33:a7:41:d9:97:db:74:0d:cf:ec:b3:f8:ed:
80:1a:8c:2c:b9:2d:7a:8b:db:da:35:ce:9e:17:87:
1c:a4:3f:93:4c:10:ba:3c:aa:f6:c7:3f:ab:01:93:
0d:7c:d0:65:9c:48:61:82:e1:7a:eb:c9:36:90:8d:
17:f5:1c:eb:e6:4d:05:a7:21:db:74:6d:98:6b:90:
bd:b9:32:1c:10:64:8e:fe:83:1c:34:fd:f7:31:4c:
5c:2d:5d:dc:b0:af:b0:d8:e2:ee:64:3a:88:ec:4c:
a3:80:23:eb:82:5a:25:46:ab:ee:37:5e:66:df:29:
1d:09:ef:59:d8:26:45:62:0e:f2:90:ae:32:c1:4e:
f2:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:10:E1:6D:B1:A2:2E:A8:46:D1:C8:EA:BD:04:C3:0C:FC:A8:75:3F
X509v3 Authority Key Identifier:
keyid:A3:F1:B2:2B:20:54:50:2B:FD:38:89:13:82:91:10:3D:83:B6:A5:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/UxDhbbGiLqhG0cjqvQTDDPyodT8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.235.14.0/24
178.210.180.0/24
217.70.11.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:91:33:1d:32:80:df:a2:f3:92:85:81:ea:b2:f9:0f:77:6d:
5c:2b:f6:49:5b:0b:4f:15:09:5a:32:b8:a3:0a:cf:23:fc:38:
9a:59:03:7e:9e:5f:fb:03:e9:d0:48:b6:90:18:55:3c:c3:08:
39:da:13:ee:7d:f4:ba:cd:b7:2c:52:2d:c4:01:b3:aa:95:85:
be:ba:20:35:3c:d1:22:3c:75:eb:e8:46:08:b8:4a:6e:e9:cb:
70:54:59:1b:94:09:76:fe:09:32:fe:ab:87:d8:42:af:3c:8c:
79:df:3b:32:83:eb:1a:ea:b2:83:94:1c:03:1b:6a:83:c7:d0:
39:4a:39:48:17:df:5c:10:b6:c7:40:e0:8d:63:9f:e4:44:d8:
24:91:d0:e7:26:ec:1c:5c:88:55:1c:65:bb:d1:d1:9a:75:10:
1c:01:6b:42:9c:d8:81:61:c0:28:c9:ec:c6:53:ce:4f:2f:de:
2c:17:b6:81:04:2a:e2:77:90:f4:de:d6:1c:29:47:3a:a4:7e:
8a:0b:c5:cf:ab:bf:8f:38:7e:60:ba:4b:36:4c:4f:05:2e:9e:
a3:95:c5:9e:fb:57:84:02:e4:f3:5b:73:44:2c:b8:8a:09:22:
e9:ef:de:7d:eb:a1:80:17:25:69:72:4c:71:3f:64:57:44:4e:
15:c7:a2:da
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZiEreKGZpzetRww4E+FG6FUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzZjFiMjJiMjA1NDUwMmJmZDM4ODkxMzgyOTExMDNkODNi
NmE1MGUwHhcNMjUwODA3MTMxNzI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MzEwZTE2ZGIxYTIyZWE4NDZkMWM4ZWFiZDA0YzMwY2ZjYTg3NTNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhqCzSzUhhV6Akj7L50Y8unhiMYm
Ci1bw22KqskFFWID9279QkA48LSZ09IvgDkB5uIrZnlBMA1oClv4y4jy3ZFTZvHy
mdIdpVedtZBHwaGUh5NI9DS3Pw6CrL+KrG8zRZ3sTy7/UIjslGqSrHccIFIJKVO2
KURRlDOnQdmX23QNz+yz+O2AGowsuS16i9vaNc6eF4ccpD+TTBC6PKr2xz+rAZMN
fNBlnEhhguF668k2kI0X9Rzr5k0FpyHbdG2Ya5C9uTIcEGSO/oMcNP33MUxcLV3c
sK+w2OLuZDqI7EyjgCPrglolRqvuN15m3ykdCe9Z2CZFYg7ykK4ywU7yqQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFFMQ4W2xoi6oRtHI6r0Ewwz8qHU/MB8GA1UdIwQY
MBaAFKPxsisgVFAr/TiJE4KRED2DtqUOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb19HeUt5QlVVQ3Y5T0lrVGdwRVFQWU8ycFE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9hOGFhZmYtMTJhMS00NjQxLThiOWQt
MjRkMjcyY2UxMWUzLzEvVXhEaGJiR2lMcWhHMGNqcXZRVEREUHlvZFQ4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS9hOGFhZmYtMTJhMS00NjQxLThiOWQtMjRkMjcyY2UxMWUz
LzEvb19HeUt5QlVVQ3Y5T0lrVGdwRVFQWU8ycFE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALusOAwQA
stK0AwQA2UYLMA0GCSqGSIb3DQEBCwUAA4IBAQBrkTMdMoDfovOShYHqsvkPd21c
K/ZJWwtPFQlaMrijCs8j/DiaWQN+nl/7A+nQSLaQGFU8wwg52hPuffS6zbcsUi3E
AbOqlYW+uiA1PNEiPHXr6EYIuEpu6ctwVFkblAl2/gky/quH2EKvPIx53zsyg+sa
6rKDlBwDG2qDx9A5SjlIF99cELbHQOCNY5/kRNgkkdDnJuwcXIhVHGW70dGadRAc
AWtCnNiBYcAoyezGU85PL94sF7aBBCrid5D03tYcKUc6pH6KC8XPq7+POH5guks2
TE8FLp6jlcWe+1eEAuTzW3NELLiKCSLp795966GAFyVpckxxP2RXRE4Vx6La
-----END CERTIFICATE-----
Generated at Sat Aug 23 22:33:08 2025 by rpki-client