Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/Ubb9BSUymwSV4V7pCCtD-AeNfDg.roa
File: Ubb9BSUymwSV4V7pCCtD-AeNfDg.roa (raw, json)
Hash identifier: VLj6KeOPsOnaGNTSbliJq5gjR7omChPt0ofE4tlWJ6c=
Subject key identifier: 51:B6:FD:05:25:32:9B:04:95:E1:5E:E9:08:2B:43:F8:07:8D:7C:38
Certificate issuer: /CN=9e459aa4602bffa2d2650ba66818458c89fc4582
Certificate serial: 019970A729B735634B040663C3F912F705C7
Authority key identifier: 9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/Ubb9BSUymwSV4V7pCCtD-AeNfDg.roa
Signing time: Mon 22 Sep 2025 09:00:27 +0000
ROA not before: Mon 22 Sep 2025 09:00:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216314
IP address blocks: 84.247.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 08:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:70:a7:29:b7:35:63:4b:04:06:63:c3:f9:12:f7:05:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e459aa4602bffa2d2650ba66818458c89fc4582
Validity
Not Before: Sep 22 09:00:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=51b6fd0525329b0495e15ee9082b43f8078d7c38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:09:7b:08:e0:31:95:98:ed:ff:f4:c3:17:6b:
7d:23:7a:9c:e5:ae:d8:5c:12:83:d0:ed:a9:0e:7b:
52:6a:ad:5a:f5:a4:07:10:5a:3c:f5:34:f8:dc:f9:
36:48:29:fe:23:20:d1:95:d0:d2:14:69:b5:78:ce:
74:ba:74:1e:9d:1d:cb:d2:8c:06:4c:1e:ce:69:18:
90:7e:53:7d:91:6d:91:be:1f:53:a5:7b:53:b3:14:
e1:45:03:b5:ce:b2:1a:18:57:51:ea:9e:1b:60:c3:
06:da:7d:84:ec:90:bf:e2:a9:71:ed:92:1b:20:81:
84:2e:4f:79:19:d2:72:c6:61:cc:22:be:44:e3:6f:
35:1b:1a:cf:2b:a7:48:67:c9:03:c1:7a:15:49:1f:
63:23:fb:d0:fa:db:0d:cd:65:72:3b:30:9a:f3:ff:
a7:e1:6f:61:d4:0b:2e:e5:a8:e7:b9:1b:86:69:84:
41:7b:29:ca:f5:d1:52:19:cb:4a:a8:56:f5:81:94:
a0:07:68:b8:db:54:cc:bf:21:7a:62:f7:89:ef:9d:
ac:82:a4:ca:2f:ef:fa:02:3e:81:2d:84:27:18:b5:
bc:66:be:bb:90:16:f5:69:c5:7b:cf:16:b2:0b:a3:
e2:57:29:f5:31:ed:32:26:3a:80:ba:b7:30:95:6b:
30:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:B6:FD:05:25:32:9B:04:95:E1:5E:E9:08:2B:43:F8:07:8D:7C:38
X509v3 Authority Key Identifier:
keyid:9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/Ubb9BSUymwSV4V7pCCtD-AeNfDg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.247.73.0/24
Signature Algorithm: sha256WithRSAEncryption
34:4a:dc:92:61:7d:60:49:0c:0f:a7:74:63:e7:e4:3b:79:64:
71:2b:1e:c3:a0:7b:ca:f9:d7:5d:7f:5a:ad:5c:6f:a4:36:c7:
1a:c8:d9:b7:74:66:f4:c7:37:da:f7:a1:af:4b:51:7c:10:4e:
b2:df:54:96:a9:b4:52:f8:f5:3d:d8:01:f6:b3:5e:0d:6f:f5:
cb:41:bc:d3:16:38:1c:b9:b0:39:d1:30:ca:c3:2c:a4:6b:c0:
f2:e9:69:58:36:12:9a:66:ef:63:dc:ef:de:01:5f:26:48:42:
3c:d2:55:a9:c4:04:b2:ca:3d:b2:6a:f7:6a:76:99:d0:86:3d:
2d:88:b6:23:da:a9:9b:ce:a2:b2:26:2c:a1:c6:31:71:cb:9c:
8a:d0:c1:40:27:36:24:c7:e1:e7:89:d5:15:7f:74:23:f7:e0:
9c:dc:cc:ea:f3:8e:9d:49:8c:c1:0f:e3:13:83:52:e4:eb:e9:
9c:89:d1:d6:f6:bf:1f:ed:34:45:66:76:09:e7:62:b3:06:16:
0b:90:8f:11:63:9f:2d:87:e7:27:28:ce:93:83:27:6b:01:e0:
50:9b:3e:e1:83:60:82:de:6a:55:b1:84:ec:bb:a2:89:26:43:
1a:45:25:16:b9:26:ea:14:57:e2:13:03:48:c6:5c:b9:df:13:
ce:65:46:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:19:24 2025 by rpki-client