Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/U0jLu9ql5SdWIQT76CBH027LVAA.roa
File: U0jLu9ql5SdWIQT76CBH027LVAA.roa (raw, json)
Hash identifier: PMh+5OCLPKe8/WakcVuCjjuQ331xyUdKEkuwBGpmve4=
Subject key identifier: 53:48:CB:BB:DA:A5:E5:27:56:21:04:FB:E8:20:47:D3:6E:CB:54:00
Certificate issuer: /CN=e58024b729d99f05133ec6d14390c73eb36db99e
Certificate serial: 0198C3B613CFBB940DF5BDBACF83583BDE22
Authority key identifier: E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/U0jLu9ql5SdWIQT76CBH027LVAA.roa
Signing time: Tue 19 Aug 2025 19:02:26 +0000
ROA not before: Tue 19 Aug 2025 19:02:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214041
IP address blocks: 213.146.165.0/24 maxlen: 24
213.146.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c3:b6:13:cf:bb:94:0d:f5:bd:ba:cf:83:58:3b:de:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e58024b729d99f05133ec6d14390c73eb36db99e
Validity
Not Before: Aug 19 19:02:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5348cbbbdaa5e527562104fbe82047d36ecb5400
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c9:90:5e:fc:5d:51:88:81:2b:4e:8b:ec:8a:
f5:0a:79:06:a5:4e:46:3a:26:77:8a:e5:d9:93:b1:
60:42:73:6f:2b:de:fb:86:c3:c9:fa:c8:74:8c:f2:
81:8d:38:cb:70:f9:12:e8:1d:da:78:b9:5c:9c:5c:
7e:e5:e5:ad:04:ef:c6:47:f5:ae:38:5e:85:b4:9c:
27:0a:49:0e:ca:bd:98:75:f5:64:6a:42:d2:03:c1:
82:0a:03:b1:bf:cc:4a:26:33:93:a5:65:2f:84:8c:
f6:04:72:e2:2b:05:8d:60:22:80:3a:90:2f:8b:8a:
68:91:12:5c:64:76:74:f8:b7:e2:10:65:78:6c:24:
db:34:14:f8:8e:17:ed:20:2f:36:5a:8d:d1:ce:e8:
87:98:fb:42:4d:8a:f5:85:0b:be:a8:43:d2:0d:67:
ad:39:85:19:28:0b:8e:70:b1:0c:61:60:0d:10:40:
fd:c3:67:2c:ad:3a:2a:38:67:12:37:e8:98:78:d8:
a4:f6:e4:9f:6a:78:4a:ed:0f:5c:6b:cd:7c:d9:ff:
8b:e3:27:5d:8f:92:d9:33:4f:1a:75:09:3f:ab:13:
99:fe:50:ca:39:c9:ff:54:f0:3c:a2:c6:22:1e:ab:
32:0b:e2:ad:b2:d3:4d:32:f8:e6:23:c1:80:fa:b1:
8e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:48:CB:BB:DA:A5:E5:27:56:21:04:FB:E8:20:47:D3:6E:CB:54:00
X509v3 Authority Key Identifier:
keyid:E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/U0jLu9ql5SdWIQT76CBH027LVAA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.146.165.0/24
213.146.184.0/24
Signature Algorithm: sha256WithRSAEncryption
43:d4:5a:39:b6:3c:47:84:92:bd:4c:f4:a4:4d:19:85:d0:b3:
f3:de:72:c4:90:d3:d6:15:96:e2:c9:28:cd:08:c6:28:21:60:
e6:23:6f:11:9d:20:e5:e7:d7:60:df:00:43:ad:59:40:19:8c:
44:ba:cd:53:7c:6f:c0:51:47:3c:3b:03:b6:dd:63:e0:4f:13:
19:bf:cc:8a:07:b6:26:9f:30:6c:28:22:64:b7:c1:7f:c5:6b:
e3:6d:2e:7d:ed:89:48:53:02:bd:67:7f:94:6a:59:d7:73:07:
a0:4e:be:3d:a4:25:63:a8:77:f7:23:2b:51:de:60:cb:86:5c:
42:d0:4f:f2:ed:58:b9:17:0e:f8:e9:82:0a:ea:9b:b0:8c:30:
8f:34:38:6c:3b:28:0b:13:7e:2e:c9:6c:76:af:24:98:cd:85:
99:c3:11:58:ca:e6:7c:58:c6:46:1a:10:97:43:c2:25:f1:d1:
9b:80:22:cb:da:9f:96:40:9a:28:0d:26:b1:b4:a0:36:65:83:
66:4f:e5:4a:21:d6:5d:55:31:ff:52:03:79:9d:82:1d:47:ed:
48:6a:21:bf:e0:e3:af:f1:a2:03:49:fe:bd:cf:be:f6:ca:e2:
67:ef:cc:14:7c:9a:2f:99:e6:eb:75:cd:19:5a:ec:6a:27:80:
77:95:af:81
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZjDthPPu5QN9b26z4NYO94iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1ODAyNGI3MjlkOTlmMDUxMzNlYzZkMTQzOTBjNzNlYjM2
ZGI5OWUwHhcNMjUwODE5MTkwMjI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MzQ4Y2JiYmRhYTVlNTI3NTYyMTA0ZmJlODIwNDdkMzZlY2I1NDAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcmQXvxdUYiBK06L7Ir1CnkGpU5G
OiZ3iuXZk7FgQnNvK977hsPJ+sh0jPKBjTjLcPkS6B3aeLlcnFx+5eWtBO/GR/Wu
OF6FtJwnCkkOyr2YdfVkakLSA8GCCgOxv8xKJjOTpWUvhIz2BHLiKwWNYCKAOpAv
i4pokRJcZHZ0+LfiEGV4bCTbNBT4jhftIC82Wo3RzuiHmPtCTYr1hQu+qEPSDWet
OYUZKAuOcLEMYWANEED9w2csrToqOGcSN+iYeNik9uSfanhK7Q9ca8182f+L4ydd
j5LZM08adQk/qxOZ/lDKOcn/VPA8osYiHqsyC+KtstNNMvjmI8GA+rGO2wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFNIy7vapeUnViEE++ggR9Nuy1QAMB8GA1UdIwQY
MBaAFOWAJLcp2Z8FEz7G0UOQxz6zbbmeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVlBa3R5blpud1VUUHNiUlE1REhQck50dVo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9kNTYyOGEtZDliMS00ZGE5LWE3NDQt
OTU2ZjZiNWM2MTcwLzEvVTBqTHU5cWw1U2RXSVFUNzZDQkgwMjdMVkFBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9kNTYyOGEtZDliMS00ZGE5LWE3NDQtOTU2ZjZiNWM2MTcw
LzEvNVlBa3R5blpud1VUUHNiUlE1REhQck50dVo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA1ZKlAwQA
1ZK4MA0GCSqGSIb3DQEBCwUAA4IBAQBD1Fo5tjxHhJK9TPSkTRmF0LPz3nLEkNPW
FZbiySjNCMYoIWDmI28RnSDl59dg3wBDrVlAGYxEus1TfG/AUUc8OwO23WPgTxMZ
v8yKB7YmnzBsKCJkt8F/xWvjbS597YlIUwK9Z3+UalnXcwegTr49pCVjqHf3IytR
3mDLhlxC0E/y7Vi5Fw746YIK6puwjDCPNDhsOygLE34uyWx2rySYzYWZwxFYyuZ8
WMZGGhCXQ8Il8dGbgCLL2p+WQJooDSaxtKA2ZYNmT+VKIdZdVTH/UgN5nYIdR+1I
aiG/4OOv8aIDSf69z772yuJn78wUfJovmebrdc0ZWuxqJ4B3la+B
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:24:47 2025 by rpki-client