Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/304d73-65ba-4bbe-9fde-dc26e9ee8410/1/UTDX9X0E-WocbOKc9uxoBBtUNW8.roa
File: UTDX9X0E-WocbOKc9uxoBBtUNW8.roa (raw, json)
Hash identifier: POK+eugWAjhkZBM6kVW5R4lWCtIN/mz6eft4yJE4FsE=
Subject key identifier: 51:30:D7:F5:7D:04:F9:6A:1C:6C:E2:9C:F6:EC:68:04:1B:54:35:6F
Certificate issuer: /CN=a63c7f29b883f4b3c2436d963dc8532a1a634cca
Certificate serial: 0199DD8D23543F2370771A31557BB6E6B100
Authority key identifier: A6:3C:7F:29:B8:83:F4:B3:C2:43:6D:96:3D:C8:53:2A:1A:63:4C:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjx_KbiD9LPCQ22WPchTKhpjTMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/304d73-65ba-4bbe-9fde-dc26e9ee8410/1/UTDX9X0E-WocbOKc9uxoBBtUNW8.roa
Signing time: Mon 13 Oct 2025 12:30:38 +0000
ROA not before: Mon 13 Oct 2025 12:30:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29119
IP address blocks: 185.192.208.0/24 maxlen: 24
185.192.209.0/24 maxlen: 24
185.192.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/304d73-65ba-4bbe-9fde-dc26e9ee8410/1/pjx_KbiD9LPCQ22WPchTKhpjTMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/304d73-65ba-4bbe-9fde-dc26e9ee8410/1/pjx_KbiD9LPCQ22WPchTKhpjTMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pjx_KbiD9LPCQ22WPchTKhpjTMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:dd:8d:23:54:3f:23:70:77:1a:31:55:7b:b6:e6:b1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a63c7f29b883f4b3c2436d963dc8532a1a634cca
Validity
Not Before: Oct 13 12:30:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5130d7f57d04f96a1c6ce29cf6ec68041b54356f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:79:30:d5:c5:9d:16:cb:8c:a0:6e:db:d4:de:
af:0f:ed:36:c6:d1:16:9e:14:81:1a:83:86:cd:b8:
c6:99:94:ba:e1:8d:3f:c2:fa:d2:31:ff:3f:ec:5d:
d4:c0:0e:af:09:bf:db:95:79:19:2a:0f:3f:12:1d:
f7:0b:c6:1b:95:d9:50:59:1d:a0:dc:62:47:38:55:
ed:13:f6:e9:1b:4e:42:38:4e:fa:f3:c5:0f:9d:df:
02:90:e8:ed:85:42:f4:95:3f:8e:a5:8f:f1:b8:40:
57:a2:af:f4:ae:c9:2e:eb:82:6a:ce:a1:f5:91:44:
a9:bc:2f:46:ec:52:c8:2e:fd:b3:81:6b:1e:cd:ca:
85:63:5a:36:50:15:b2:a4:ae:41:eb:16:46:32:3b:
b4:98:42:f2:6d:fc:ed:9d:0c:64:8f:38:58:9f:5b:
a3:10:09:b0:b1:b9:3d:f5:fb:36:da:a9:0a:4f:ec:
7f:ba:e5:67:13:09:29:3e:bd:1b:54:86:ac:7b:ee:
11:fb:f7:49:48:8f:51:42:23:e1:b4:58:49:7b:0a:
8b:61:c0:cf:74:2a:bd:d6:58:fc:42:ca:b4:d7:5d:
ef:77:f6:32:56:07:68:79:81:d4:5e:e1:5b:b8:4d:
d5:7e:2d:9b:2e:87:89:68:66:fe:03:85:8f:82:ad:
85:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:30:D7:F5:7D:04:F9:6A:1C:6C:E2:9C:F6:EC:68:04:1B:54:35:6F
X509v3 Authority Key Identifier:
keyid:A6:3C:7F:29:B8:83:F4:B3:C2:43:6D:96:3D:C8:53:2A:1A:63:4C:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjx_KbiD9LPCQ22WPchTKhpjTMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/304d73-65ba-4bbe-9fde-dc26e9ee8410/1/UTDX9X0E-WocbOKc9uxoBBtUNW8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/304d73-65ba-4bbe-9fde-dc26e9ee8410/1/pjx_KbiD9LPCQ22WPchTKhpjTMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.192.208.0-185.192.210.255
Signature Algorithm: sha256WithRSAEncryption
24:3d:7f:04:7f:9e:cc:40:a9:ec:58:6d:75:b6:ce:c4:0b:0c:
a3:d9:6d:f2:b0:24:35:de:37:67:99:73:44:4b:06:be:c5:60:
2a:ec:56:f0:5f:54:ac:a6:d1:04:65:cf:04:69:ed:a4:30:56:
44:fd:f6:16:ea:67:f5:3e:19:9a:ef:14:61:fc:1f:ee:44:c3:
b2:38:74:9f:e5:b7:4e:25:06:af:b6:27:d8:59:a6:3a:f1:7d:
99:03:bd:68:b9:5f:24:91:98:07:49:0c:89:37:7b:57:d1:97:
59:0a:b8:32:43:55:7d:42:ba:3f:fe:6d:55:e2:a2:41:67:19:
ee:0c:ea:f1:55:e8:fb:d4:ce:7e:e0:41:9b:73:b2:b1:9d:41:
22:33:c1:6d:05:01:ce:e9:3b:96:6e:99:25:b9:d2:17:a0:f2:
2f:68:86:0d:a0:db:23:07:54:b0:ed:02:53:37:ad:a4:18:98:
fb:72:20:27:98:0f:8b:53:56:e4:db:b6:29:34:72:57:19:32:
41:cd:41:27:a7:2b:37:93:98:65:fd:40:15:ca:1f:36:7c:3f:
d5:93:59:5a:4c:81:da:ea:4e:3b:ed:ad:c7:fd:a0:19:b5:8b:
eb:58:c1:45:4c:d8:19:58:b1:d4:16:c0:f5:76:98:fe:9b:df:
85:b6:27:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:30:59 2025 by rpki-client