Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ugH-bxX6ClEMi9SxV1nlcLohAE8.roa
File: ugH-bxX6ClEMi9SxV1nlcLohAE8.roa (raw, json)
Hash identifier: fLgeqjljSYpUOMRg1kNIs4ljtQR1QPxlAhPxA2sJDFU=
Subject key identifier: BA:01:FE:6F:15:FA:0A:51:0C:8B:D4:B1:57:59:E5:70:BA:21:00:4F
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01979988B8AEC7568F4ABB6BD42671F191E5
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ugH-bxX6ClEMi9SxV1nlcLohAE8.roa
Signing time: Sun 22 Jun 2025 21:26:03 +0000
ROA not before: Sun 22 Jun 2025 21:26:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211484
IP address blocks: 81.168.126.0/24 maxlen: 24
213.210.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:99:88:b8:ae:c7:56:8f:4a:bb:6b:d4:26:71:f1:91:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jun 22 21:26:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ba01fe6f15fa0a510c8bd4b15759e570ba21004f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:55:fb:3b:de:0b:0d:1d:e0:fa:49:bc:a2:18:
70:67:e9:45:99:7c:e2:60:60:ed:f2:6b:43:1b:63:
59:a9:d7:07:3e:f2:bf:0c:1c:00:45:8f:c9:0d:38:
0a:7f:2b:69:61:b0:cb:b8:4d:2e:bd:bc:44:26:4e:
f9:70:a9:4f:e5:01:74:bf:6d:79:f3:8d:6f:35:e0:
02:5f:c9:db:c0:7d:b3:e5:81:6e:80:62:ea:d3:36:
6b:b3:96:d8:f5:f2:0d:fe:cf:a0:79:26:bf:9f:71:
87:bd:58:5f:c3:f7:5f:44:6c:f2:08:3d:d3:da:d6:
2b:99:d3:3a:2f:a1:bf:01:49:b0:82:17:56:c9:c4:
f8:27:20:df:7a:1d:9b:37:0f:d1:ac:40:7a:df:83:
3c:fc:ac:ea:cf:7b:59:12:68:ae:23:da:91:9b:1a:
41:4e:f5:4f:e1:34:ee:5a:de:5b:a8:6d:4b:26:c0:
43:b1:d3:81:e9:21:57:73:94:59:1e:96:53:7b:5f:
04:6b:17:0e:9c:a0:a1:48:a4:b1:1f:00:d4:8c:78:
ba:e1:c1:45:f7:5c:7f:a0:ea:ce:60:f6:df:58:5c:
04:44:2f:a9:6e:23:61:cb:74:84:73:9b:da:19:b0:
98:d2:51:ca:cc:0a:1b:8c:61:08:bc:4c:4a:e9:b1:
46:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:01:FE:6F:15:FA:0A:51:0C:8B:D4:B1:57:59:E5:70:BA:21:00:4F
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ugH-bxX6ClEMi9SxV1nlcLohAE8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.126.0/24
213.210.40.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:01:32:54:3b:e5:6b:9d:d5:3f:ec:d5:70:e2:64:d7:f5:d3:
a7:27:db:a8:b6:f4:c0:02:7d:0a:3d:86:7c:81:22:81:59:4d:
f7:84:ca:3a:24:79:64:47:d0:a1:78:45:e8:ce:ac:ea:e8:bf:
be:c4:ab:1c:d0:6d:d9:cb:9c:16:b4:e8:1e:59:dd:c0:76:0b:
c5:e5:be:08:4b:76:bc:5b:eb:5f:25:e3:eb:3c:a7:85:a7:b7:
7d:68:f4:e7:30:60:68:a2:8b:43:8d:ca:ac:3e:79:bb:ec:4d:
04:64:56:bb:aa:f7:28:57:f9:68:bf:05:12:39:d5:b1:49:fa:
e3:b5:45:41:e7:df:52:21:2b:a7:1f:1a:ef:59:b0:37:0b:82:
da:9d:4e:cf:dd:24:85:84:13:c7:4b:01:12:89:69:40:fc:7e:
60:75:7c:ff:64:09:56:93:a8:d9:14:b7:1e:ac:8f:d0:a5:b5:
fa:fd:56:b2:de:54:28:4b:c1:35:74:69:d1:d7:56:a3:3a:a1:
9f:e8:04:a9:42:b7:d5:6c:42:20:24:26:c6:db:68:8a:b1:d3:
f2:eb:aa:8b:fe:ea:c4:8e:b3:71:31:61:bd:d5:5e:95:26:88:
51:36:d8:6d:d2:7b:8c:b7:cf:a6:09:e4:79:42:4d:43:fc:60:
8c:78:4c:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 00:56:40 2025 by rpki-client