Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/UBmTMmmTukpF5tN_8lkv5anfsHg.roa
File: UBmTMmmTukpF5tN_8lkv5anfsHg.roa (raw, json)
Hash identifier: ntC3Hreaigu0u4QGJZJ19XXRF5sIPIgUqhtb699zdZA=
Subject key identifier: 50:19:93:32:69:93:BA:4A:45:E6:D3:7F:F2:59:2F:E5:A9:DF:B0:78
Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839
Certificate serial: 01992870C8B931127CB4FF59991E27965090
Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/UBmTMmmTukpF5tN_8lkv5anfsHg.roa
Signing time: Mon 08 Sep 2025 08:28:24 +0000
ROA not before: Mon 08 Sep 2025 08:28:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209641
IP address blocks: 46.243.7.0/24 maxlen: 24
92.62.119.0/24 maxlen: 24
94.232.248.0/24 maxlen: 24
95.81.76.0/24 maxlen: 24
95.81.114.0/24 maxlen: 24
95.81.115.0/24 maxlen: 24
95.81.123.0/24 maxlen: 24
95.81.124.0/24 maxlen: 24
95.81.125.0/24 maxlen: 24
109.69.60.0/24 maxlen: 24
185.87.48.0/22 maxlen: 22
185.87.48.0/24 maxlen: 24
185.87.49.0/24 maxlen: 24
185.87.50.0/24 maxlen: 24
185.87.51.0/24 maxlen: 24
185.117.152.0/22 maxlen: 22
2a06:ddc0::/29 maxlen: 29
2a0c:6980::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 16:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:28:70:c8:b9:31:12:7c:b4:ff:59:99:1e:27:96:50:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839
Validity
Not Before: Sep 8 08:28:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=501993326993ba4a45e6d37ff2592fe5a9dfb078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:1e:a6:01:d4:09:48:be:2d:2f:19:ec:37:83:
76:00:3e:87:a1:ca:ec:b2:2b:30:fe:bf:26:0f:93:
d4:fa:a5:07:dc:e2:1b:ab:2f:f4:9d:01:90:30:a4:
4e:8f:46:25:c1:f0:f6:76:c2:8c:19:63:68:ca:5a:
de:9f:72:5a:f2:c4:2a:e8:ac:0d:b1:06:e4:c1:6d:
47:5b:67:e9:c0:e7:2f:80:63:74:5f:d0:dc:0c:36:
23:1a:4b:3e:03:2b:de:ec:ea:0a:b5:de:7b:f8:36:
f0:e3:d2:ce:92:28:89:ad:c6:fd:0d:f0:24:e2:30:
13:c2:38:f5:85:83:7d:69:30:3b:66:3e:ec:a0:a8:
58:fe:84:3c:4f:22:62:20:42:b7:f6:12:19:bd:e1:
71:75:ec:80:bd:4a:7a:4c:d9:3f:c4:21:31:3e:9f:
5e:ef:75:24:28:6f:46:d2:ec:66:39:26:ad:81:9a:
be:e4:e5:64:f9:81:9b:c5:82:00:50:5c:92:31:fc:
ea:a0:94:8c:ff:f6:a0:eb:bd:84:9d:d0:55:e4:55:
fa:df:0c:ca:ab:1d:8b:b1:22:28:38:4e:cf:04:f3:
ae:5b:f2:ac:29:a1:7a:7c:c2:94:e3:c2:2e:0d:a0:
22:71:39:81:dd:d5:b5:3c:ea:83:b0:54:fd:94:a9:
ae:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:19:93:32:69:93:BA:4A:45:E6:D3:7F:F2:59:2F:E5:A9:DF:B0:78
X509v3 Authority Key Identifier:
keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/UBmTMmmTukpF5tN_8lkv5anfsHg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.7.0/24
92.62.119.0/24
94.232.248.0/24
95.81.76.0/24
95.81.114.0/23
95.81.123.0-95.81.125.255
109.69.60.0/24
185.87.48.0/22
185.117.152.0/22
IPv6:
2a06:ddc0::/29
2a0c:6980::/29
Signature Algorithm: sha256WithRSAEncryption
bc:11:ee:6a:f4:80:00:97:a9:ce:9c:3b:ad:9a:9f:93:67:45:
04:d7:9b:11:02:23:b2:8e:53:65:da:4d:50:06:de:5d:35:da:
40:3c:bc:fb:d0:d2:14:a0:5c:ea:3d:57:3a:44:6b:6c:77:76:
72:07:f8:c3:e6:31:ab:f8:9f:a1:1c:36:5f:cb:b6:7b:ac:b0:
01:1d:42:c8:d1:5b:bb:bd:23:21:2c:6f:7f:d1:b4:71:1f:a2:
f7:ee:25:d3:f6:18:8f:34:bc:b5:e5:a6:95:9f:df:11:1d:b3:
3f:d7:69:80:3c:30:b2:5a:e5:f8:f8:5f:ff:59:64:e5:88:8b:
e0:2c:ec:7c:21:cc:70:6f:4e:be:f9:b2:77:bc:8f:24:55:dd:
20:ab:b8:e6:13:d5:60:d7:63:64:d7:af:95:77:d2:97:32:2a:
da:d5:ac:48:c9:13:c7:d0:74:30:70:a8:81:6e:56:db:f6:4e:
f5:71:f4:bc:78:84:f1:ed:e6:b1:f6:4d:f7:ce:a7:94:0e:5f:
ff:7b:9e:43:d3:37:65:2b:16:b8:6e:ce:d7:f7:7b:77:3d:c8:
ac:fc:9c:f9:0d:58:1e:c1:07:fd:3e:80:c4:5b:9d:20:b4:a0:
2e:32:62:4c:75:a5:a0:a4:5b:66:fa:cb:60:e2:db:1a:32:de:
1a:dd:5f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:55:30 2025 by rpki-client