Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/UrcpWeFs-Uhhdcz8z2Hrehpj7_Q.roa
File: UrcpWeFs-Uhhdcz8z2Hrehpj7_Q.roa (raw, json)
Hash identifier: E6OyRpBtbTzIQr5B90CshAzHaMselaNhEb1LlkC9MHk=
Subject key identifier: 52:B7:29:59:E1:6C:F9:48:61:75:CC:FC:CF:61:EB:7A:1A:63:EF:F4
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 0199E8FB7A5F72032C56D10648D9F7A7DE5B
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/UrcpWeFs-Uhhdcz8z2Hrehpj7_Q.roa
Signing time: Wed 15 Oct 2025 17:46:58 +0000
ROA not before: Wed 15 Oct 2025 17:46:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 138888
IP address blocks: 95.177.63.0/24 maxlen: 24
95.177.67.0/24 maxlen: 24
95.177.74.0/24 maxlen: 24
213.177.226.0/23 maxlen: 23
213.177.230.0/23 maxlen: 23
213.177.234.0/23 maxlen: 23
213.177.238.0/23 maxlen: 23
213.177.242.0/23 maxlen: 23
213.177.246.0/23 maxlen: 23
213.177.250.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e8:fb:7a:5f:72:03:2c:56:d1:06:48:d9:f7:a7:de:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Oct 15 17:46:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=52b72959e16cf9486175ccfccf61eb7a1a63eff4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:10:c3:20:79:50:4f:d4:ea:0f:c0:69:e3:f3:
16:9b:5d:f1:61:8a:28:5d:4a:e0:b2:f8:da:61:94:
21:3f:cf:f7:08:15:24:99:80:f3:d3:76:7b:96:c7:
08:0d:23:a7:ee:09:c1:95:10:0a:f6:af:c6:bc:40:
41:15:38:66:a9:91:c0:17:db:1f:3c:bd:cb:6b:ec:
2e:fe:2b:44:c8:d5:a9:17:43:3a:e0:f9:1a:90:7a:
de:08:7d:d6:79:c9:97:eb:35:11:6f:95:08:76:21:
8b:4e:97:40:ca:94:8c:b9:90:25:24:7d:39:35:e1:
5f:00:6b:0a:86:92:13:36:b7:d1:d7:cb:46:08:42:
51:c4:02:b1:75:5c:d1:87:fa:5a:d4:3d:c6:36:1c:
75:5a:55:b0:02:f0:91:f1:54:41:ec:b8:ce:56:23:
89:5a:ac:92:20:0e:ba:72:ba:15:0a:93:08:ab:52:
ab:eb:09:29:fb:ed:bf:60:fd:36:0d:59:7f:c6:dd:
6b:6c:68:bd:02:bf:d0:49:9b:02:d4:c3:f6:d7:1a:
cc:19:58:51:77:d6:78:af:0c:28:07:16:58:f2:6e:
46:d0:82:cf:a3:da:92:34:91:90:67:30:d0:e3:9b:
72:b8:12:1b:4b:63:28:c5:6a:2a:84:45:1a:3d:62:
fe:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:B7:29:59:E1:6C:F9:48:61:75:CC:FC:CF:61:EB:7A:1A:63:EF:F4
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/UrcpWeFs-Uhhdcz8z2Hrehpj7_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.177.63.0/24
95.177.67.0/24
95.177.74.0/24
213.177.226.0/23
213.177.230.0/23
213.177.234.0/23
213.177.238.0/23
213.177.242.0/23
213.177.246.0/23
213.177.250.0/23
Signature Algorithm: sha256WithRSAEncryption
7f:ea:e7:a3:da:00:26:f6:34:2c:b8:d4:12:18:fe:0e:21:41:
c0:39:5a:d6:66:19:69:3f:61:6c:58:0c:72:99:3b:bc:e7:b5:
f0:86:30:a0:3d:22:65:8b:b3:64:23:da:7c:ba:a9:56:90:9b:
91:33:54:22:8f:36:85:68:8a:46:36:02:d8:c3:a6:6c:35:3c:
d0:a2:51:3d:18:53:28:63:f6:ab:97:b5:02:d0:c8:74:7e:a9:
49:09:11:ac:24:48:bc:7e:4e:fa:91:f6:a4:4b:90:49:eb:6d:
e0:4f:0b:f9:92:3e:88:be:8d:6d:2f:69:f5:b0:10:fe:d7:ee:
a1:19:9c:5b:41:e2:96:2b:a0:ee:a3:19:13:ce:2b:b5:2e:a4:
40:83:23:e5:a0:4a:30:6c:05:1d:77:f6:99:93:ed:70:a8:45:
38:35:c4:74:25:cf:c7:d8:46:a5:a0:60:b8:6f:e7:7f:e3:96:
b4:b6:b2:05:5a:79:87:fd:56:06:ec:89:ee:90:96:bb:4c:ab:
9e:40:15:c6:49:34:f1:5b:18:fc:ec:78:c0:9d:71:ae:da:76:
40:b3:89:db:b3:96:52:f3:f8:a0:85:a3:30:d4:d5:de:5d:d4:
8f:3f:00:3c:9c:5e:14:d5:ea:91:ad:79:d8:88:4c:87:e0:8a:
77:da:d9:fb
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgISAZno+3pfcgMsVtEGSNn3p95bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3
NjUwMjkwHhcNMjUxMDE1MTc0NjU4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MmI3Mjk1OWUxNmNmOTQ4NjE3NWNjZmNjZjYxZWI3YTFhNjNlZmY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBDDIHlQT9TqD8Bp4/MWm13xYYoo
XUrgsvjaYZQhP8/3CBUkmYDz03Z7lscIDSOn7gnBlRAK9q/GvEBBFThmqZHAF9sf
PL3La+wu/itEyNWpF0M64PkakHreCH3WecmX6zURb5UIdiGLTpdAypSMuZAlJH05
NeFfAGsKhpITNrfR18tGCEJRxAKxdVzRh/pa1D3GNhx1WlWwAvCR8VRB7LjOViOJ
WqySIA66croVCpMIq1Kr6wkp++2/YP02DVl/xt1rbGi9Ar/QSZsC1MP21xrMGVhR
d9Z4rwwoBxZY8m5G0ILPo9qSNJGQZzDQ45tyuBIbS2MoxWoqhEUaPWL+JwIDAQAB
o4ICPzCCAjswHQYDVR0OBBYEFFK3KVnhbPlIYXXM/M9h63oaY+/0MB8GA1UdIwQY
MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt
MDM1ZDk3N2Y0MjE2LzEvVXJjcFdlRnMtVWhoZGN6OHoySHJlaHBqN19RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2
LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8AwQAX7E/AwQA
X7FDAwQAX7FKAwQB1bHiAwQB1bHmAwQB1bHqAwQB1bHuAwQB1bHyAwQB1bH2AwQB
1bH6MA0GCSqGSIb3DQEBCwUAA4IBAQB/6uej2gAm9jQsuNQSGP4OIUHAOVrWZhlp
P2FsWAxymTu857XwhjCgPSJli7NkI9p8uqlWkJuRM1QijzaFaIpGNgLYw6ZsNTzQ
olE9GFMoY/arl7UC0Mh0fqlJCRGsJEi8fk76kfakS5BJ623gTwv5kj6Ivo1tL2n1
sBD+1+6hGZxbQeKWK6DuoxkTziu1LqRAgyPloEowbAUdd/aZk+1wqEU4NcR0Jc/H
2EaloGC4b+d/45a0trIFWnmH/VYG7InukJa7TKueQBXGSTTxWxj87HjAnXGu2nZA
s4nbs5ZS8/ighaMw1NXeXdSPPwA8nF4U1eqRrXnYiEyH4Ip32tn7
-----END CERTIFICATE-----
Generated at Mon Oct 20 03:40:13 2025 by rpki-client