Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ULZyC5pG6-ZQGI8U4VH5OEEML2g.roa
File: ULZyC5pG6-ZQGI8U4VH5OEEML2g.roa (raw, json)
Hash identifier: PVn1Knqb+RE3KGczzouRzk0RZnpF+36xLOSeZ5xbpG4=
Subject key identifier: 50:B6:72:0B:9A:46:EB:E6:50:18:8F:14:E1:51:F9:38:41:0C:2F:68
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 0197AC0C16EEA4C87A0E531981685AB9CFB4
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ULZyC5pG6-ZQGI8U4VH5OEEML2g.roa
Signing time: Thu 26 Jun 2025 11:42:42 +0000
ROA not before: Thu 26 Jun 2025 11:42:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29518
IP address blocks: 193.235.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 11:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ac:0c:16:ee:a4:c8:7a:0e:53:19:81:68:5a:b9:cf:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jun 26 11:42:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=50b6720b9a46ebe650188f14e151f938410c2f68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ab:c0:ef:73:aa:21:64:9b:0d:24:a0:11:49:
f8:22:b7:de:a1:dd:e7:2e:24:5a:45:5a:d8:9d:cc:
d1:70:96:1b:04:73:21:aa:67:e8:d6:5b:84:d1:9b:
be:4a:69:53:96:e2:24:f8:06:6a:a6:eb:c5:29:89:
ef:41:b1:0f:3b:98:5e:b0:b6:d5:36:cb:c9:bc:9e:
84:b0:99:b3:7a:77:38:67:dc:1a:e2:3c:98:b8:1c:
f8:49:c8:d9:69:21:ea:2d:6d:45:74:c4:a2:51:ae:
79:d3:7c:68:87:08:92:2c:f3:a6:62:d6:44:a8:b1:
ae:a0:dd:4a:83:e5:13:bc:d7:71:81:5d:60:85:28:
04:98:63:6b:13:c8:a2:ed:40:ea:ca:e7:01:91:9d:
22:f4:0e:2c:5c:52:74:7f:41:07:a0:a2:68:7a:99:
a7:01:a5:9b:8a:ce:2a:e6:0b:f8:e5:b6:09:9e:b9:
f6:70:7f:8e:f7:87:b8:c3:23:da:f4:34:07:b4:0d:
34:77:31:c2:2a:d5:a1:49:dc:61:4e:b8:cc:f0:5d:
f2:12:3b:60:d6:c5:35:6e:72:b8:45:30:f8:25:65:
b6:a4:45:25:3d:1f:84:60:a2:1f:39:ba:8d:36:77:
b7:a5:7e:1b:f5:b5:26:95:10:5f:aa:6f:00:02:08:
5e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:B6:72:0B:9A:46:EB:E6:50:18:8F:14:E1:51:F9:38:41:0C:2F:68
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ULZyC5pG6-ZQGI8U4VH5OEEML2g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.235.85.0/24
Signature Algorithm: sha256WithRSAEncryption
24:22:09:ab:b3:be:c8:ac:ec:ad:76:9c:02:09:69:79:3b:76:
90:f9:af:15:a2:ce:12:74:55:a9:50:2a:be:b1:1f:ef:5a:d9:
aa:46:9c:61:8b:c2:7c:70:f4:3c:02:aa:fb:55:10:06:2b:d7:
60:4a:a4:45:09:d7:0e:15:fd:09:c4:aa:99:ae:58:e8:9d:c5:
f3:75:47:8b:6f:94:4e:48:fa:a2:93:e7:3e:12:04:88:a4:00:
4c:92:61:e7:96:6c:1e:f2:92:fe:bb:57:7d:01:ff:94:bf:92:
0c:b7:52:0a:67:d5:1e:93:d7:4b:79:04:e7:b7:c1:40:f2:c4:
f8:b1:24:86:ba:4f:6e:50:f2:2e:59:fe:dc:8e:4a:d2:65:76:
85:ff:0a:dd:b3:d7:96:5a:ac:12:39:11:3b:e2:6d:dd:74:02:
f2:3f:c2:f2:97:5a:55:07:88:47:83:f0:b4:41:91:b0:2c:ac:
f9:fa:fb:e2:8f:26:20:42:90:f6:2e:ef:59:04:a2:7a:25:f0:
4d:50:c8:34:c5:a2:44:8e:e8:21:33:29:38:f8:d0:cc:3e:d9:
b6:db:18:c9:57:d0:89:6a:43:38:01:c8:ee:c4:84:7d:2d:6e:
e9:e1:d4:0b:b7:4a:f7:56:6a:46:e7:6d:10:ff:ff:17:d0:49:
87:a8:ba:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 20:09:51 2025 by rpki-client