Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/UNbSCVknEzloxl6RzSrT2hvahlA.roa
File: UNbSCVknEzloxl6RzSrT2hvahlA.roa (raw, json)
Hash identifier: 2isaRD3NquVeN9o7LwIF82XNJFZ+UFl0v5L31W0RR3E=
Subject key identifier: 50:D6:D2:09:59:27:13:39:68:C6:5E:91:CD:2A:D3:DA:1B:DA:86:50
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 01996226A52A0E118DFD684DE29DE31008F6
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/UNbSCVknEzloxl6RzSrT2hvahlA.roa
Signing time: Fri 19 Sep 2025 13:25:23 +0000
ROA not before: Fri 19 Sep 2025 13:25:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211955
IP address blocks: 81.29.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 11:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:62:26:a5:2a:0e:11:8d:fd:68:4d:e2:9d:e3:10:08:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Sep 19 13:25:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=50d6d2095927133968c65e91cd2ad3da1bda8650
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:53:1a:2c:4f:9e:85:be:8d:8a:d4:79:73:d5:
43:c6:52:b1:a7:f9:07:80:76:be:14:45:d6:ab:67:
76:8e:0c:d7:12:5e:ad:7f:79:4e:b8:e8:ca:0b:7e:
19:eb:df:ee:02:bd:c1:66:24:73:b0:84:dc:9f:9e:
97:c1:b5:60:84:e9:b8:b4:9a:ed:51:9c:46:9b:a8:
70:a6:4f:07:c3:30:b4:e5:e9:57:b3:8b:85:b3:86:
36:ad:97:6e:7c:00:83:1b:ba:b2:06:6b:73:e9:2b:
b3:dd:7e:d4:4a:58:75:47:bf:6c:8c:cd:85:e9:b0:
7c:9e:01:a0:e7:18:3a:61:b3:3f:45:73:55:83:ba:
07:70:92:9d:d2:ff:d1:cd:92:87:0e:37:5b:b0:7e:
ca:91:47:89:4a:45:c2:b5:9a:b2:77:fd:f0:48:83:
49:3e:34:81:ef:a8:98:e8:eb:58:5b:62:7d:e5:8c:
cc:86:d8:f4:ca:2f:09:b8:55:df:b5:14:be:9c:2e:
ee:1f:a4:18:5b:d2:74:5f:77:4b:88:84:b7:a2:7c:
96:35:91:eb:aa:77:dc:49:87:71:67:f5:67:3e:69:
34:3c:db:b2:78:7d:10:fb:b9:f5:94:ca:23:d5:e6:
68:95:8c:c0:81:f6:05:eb:0f:2e:47:1a:b2:de:8f:
9b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:D6:D2:09:59:27:13:39:68:C6:5E:91:CD:2A:D3:DA:1B:DA:86:50
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/UNbSCVknEzloxl6RzSrT2hvahlA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.29.156.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:5d:c1:8d:1d:41:98:f4:9c:57:0c:6e:f8:22:ca:64:f3:4a:
80:6e:b6:b5:fc:84:4d:24:f5:b4:fd:60:34:b5:b3:35:9d:a5:
90:9c:e3:14:9a:52:c8:79:a0:0d:1f:8d:d1:54:99:24:79:fb:
77:8d:f8:ef:c1:0e:e7:ba:a8:b2:2b:a0:9b:41:c6:fd:54:dc:
b1:3b:86:5d:ab:5e:8a:e4:d5:bf:e0:d1:7a:a8:d9:ae:25:e4:
9a:65:c9:9e:e3:12:37:5a:1b:18:de:a6:bf:04:99:8c:7a:1c:
92:f6:ae:8d:35:e0:a5:78:d5:1e:64:30:f5:61:24:8c:af:c0:
00:04:42:ea:25:58:6c:e6:b5:fb:90:3f:75:f5:24:81:60:89:
f2:6e:62:35:c0:51:ab:49:2e:47:fd:bb:a4:4d:33:54:44:b0:
bb:6e:0c:15:05:d0:65:10:80:0c:7c:01:83:59:c6:3a:d0:5f:
c0:25:ac:33:20:e0:c5:ec:a8:8b:7e:19:76:a1:14:02:38:27:
18:0d:a5:bf:fc:73:49:82:10:d3:5a:e4:aa:dd:d1:9f:56:4c:
40:f0:5f:f6:96:fa:c0:29:3d:75:8f:1f:fc:8d:4d:59:34:bd:
dd:6c:38:e9:04:09:f2:2e:a6:51:89:64:61:4b:57:57:4b:65:
71:7f:03:79
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZliJqUqDhGN/WhN4p3jEAj2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ZTUxNjk0YzRkNDZiNGZjYzAyZmFlNzFlNWRiOTQyYTcx
MDhlNDcwHhcNMjUwOTE5MTMyNTIzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MGQ2ZDIwOTU5MjcxMzM5NjhjNjVlOTFjZDJhZDNkYTFiZGE4NjUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1MaLE+ehb6NitR5c9VDxlKxp/kH
gHa+FEXWq2d2jgzXEl6tf3lOuOjKC34Z69/uAr3BZiRzsITcn56XwbVghOm4tJrt
UZxGm6hwpk8HwzC05elXs4uFs4Y2rZdufACDG7qyBmtz6Suz3X7USlh1R79sjM2F
6bB8ngGg5xg6YbM/RXNVg7oHcJKd0v/RzZKHDjdbsH7KkUeJSkXCtZqyd/3wSINJ
PjSB76iY6OtYW2J95YzMhtj0yi8JuFXftRS+nC7uH6QYW9J0X3dLiIS3onyWNZHr
qnfcSYdxZ/VnPmk0PNuyeH0Q+7n1lMoj1eZolYzAgfYF6w8uRxqy3o+bywIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFDW0glZJxM5aMZekc0q09ob2oZQMB8GA1UdIwQY
MBaAFEnlFpTE1GtPzAL65x5duUKnEI5HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2VVV2xNVFVhMF9NQXZybkhsMjVRcWNRamtjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni85ZGI1MjUtMTA1OS00YzA3LWE1YWQt
MTkxODliM2M5YzdkLzEvVU5iU0NWa25FemxveGw2UnpTclQyaHZhaGxBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni85ZGI1MjUtMTA1OS00YzA3LWE1YWQtMTkxODliM2M5Yzdk
LzEvU2VVV2xNVFVhMF9NQXZybkhsMjVRcWNRamtjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUR2cMA0G
CSqGSIb3DQEBCwUAA4IBAQChXcGNHUGY9JxXDG74Ispk80qAbra1/IRNJPW0/WA0
tbM1naWQnOMUmlLIeaANH43RVJkkeft3jfjvwQ7nuqiyK6CbQcb9VNyxO4Zdq16K
5NW/4NF6qNmuJeSaZcme4xI3WhsY3qa/BJmMehyS9q6NNeCleNUeZDD1YSSMr8AA
BELqJVhs5rX7kD919SSBYInybmI1wFGrSS5H/bukTTNURLC7bgwVBdBlEIAMfAGD
WcY60F/AJawzIODF7KiLfhl2oRQCOCcYDaW//HNJghDTWuSq3dGfVkxA8F/2lvrA
KT11jx/8jU1ZNL3dbDjpBAnyLqZRiWRhS1dXS2VxfwN5
-----END CERTIFICATE-----
Generated at Mon Oct 20 21:03:24 2025 by rpki-client