Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/uKNypHxjMB6nHEN8iqFXpYLz3-k.roa
File: uKNypHxjMB6nHEN8iqFXpYLz3-k.roa (raw, json)
Hash identifier: fqnd1aIpIjXMZqaAstVfq0D+OvG0H0UfouvMq+wAEN8=
Subject key identifier: B8:A3:72:A4:7C:63:30:1E:A7:1C:43:7C:8A:A1:57:A5:82:F3:DF:E9
Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839
Certificate serial: 0198CC97E9C51DA0FE559BD82F8F6BDF1FCC
Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/uKNypHxjMB6nHEN8iqFXpYLz3-k.roa
Signing time: Thu 21 Aug 2025 12:26:04 +0000
ROA not before: Thu 21 Aug 2025 12:26:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207569
IP address blocks: 46.243.1.0/24 maxlen: 24
46.243.4.0/24 maxlen: 24
46.243.6.0/24 maxlen: 24
89.44.84.0/24 maxlen: 24
89.44.85.0/24 maxlen: 24
89.44.86.0/24 maxlen: 24
89.44.87.0/24 maxlen: 24
95.81.112.0/24 maxlen: 24
95.81.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:cc:97:e9:c5:1d:a0:fe:55:9b:d8:2f:8f:6b:df:1f:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839
Validity
Not Before: Aug 21 12:26:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b8a372a47c63301ea71c437c8aa157a582f3dfe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3e:2e:c7:80:4c:40:ec:46:8b:fa:67:8d:61:
fa:1f:39:67:9b:f4:13:a2:99:33:40:46:fe:d9:b4:
ab:02:f1:40:df:c0:17:58:a9:0e:60:78:bc:7a:68:
a6:d2:27:74:65:ac:39:fc:30:b2:7f:4a:71:89:b2:
88:e8:fd:6f:65:2a:dc:7d:cf:18:14:19:99:d0:1e:
e7:c7:a8:ff:bf:46:26:41:04:bc:8d:50:e0:41:d2:
8b:55:c8:98:24:1c:7b:fb:f4:71:62:24:08:16:0e:
f5:6d:ec:f6:fa:b8:ab:92:81:4e:d5:88:8a:fc:94:
da:51:5c:cb:f4:8a:27:82:ab:38:00:2d:7d:31:8a:
4e:e1:32:c9:f3:51:93:e1:56:83:67:cc:92:bb:d9:
8a:2f:e8:14:e2:23:81:08:be:a8:99:bc:a2:e8:58:
98:a8:ae:71:c6:d8:dd:b8:b4:bc:d8:58:59:74:34:
0c:4a:c5:ab:3e:9a:29:e9:24:85:b6:b2:ae:f9:0b:
ac:d2:73:5d:cf:18:a5:33:55:95:da:3c:a9:36:d9:
47:04:7d:a8:67:7a:9b:12:f2:23:0a:ea:a5:dc:16:
5f:cf:a6:47:2b:1c:8d:a7:64:25:d6:9a:48:d4:73:
e0:cf:cd:94:82:84:2a:f4:3d:0a:ad:aa:12:b7:8d:
9f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:A3:72:A4:7C:63:30:1E:A7:1C:43:7C:8A:A1:57:A5:82:F3:DF:E9
X509v3 Authority Key Identifier:
keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/uKNypHxjMB6nHEN8iqFXpYLz3-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.1.0/24
46.243.4.0/24
46.243.6.0/24
89.44.84.0/22
95.81.112.0/23
Signature Algorithm: sha256WithRSAEncryption
06:ee:9e:61:6d:5a:69:81:a8:cc:83:57:8a:4c:66:f2:56:11:
10:29:69:eb:bd:fe:e9:07:65:d3:3e:57:2c:a7:2e:b9:7c:5f:
1c:8b:88:7a:5b:ea:5a:59:2c:42:46:99:bd:59:4a:fd:41:e9:
dd:4f:66:47:99:cf:41:7d:2e:47:0b:dc:b0:78:ce:00:01:10:
06:cc:ae:6b:ba:37:66:c1:a8:0c:35:85:cd:a2:8f:a5:cf:f0:
a8:d3:84:af:39:6d:22:28:c4:d8:cd:e8:b3:b0:83:55:be:ab:
49:6e:c9:d5:eb:aa:00:0e:d0:8f:2e:65:e9:87:1d:ed:e6:63:
99:49:f1:11:ce:df:03:29:5c:d2:66:b3:8a:0e:53:7d:e9:89:
eb:e1:7a:44:f1:07:82:e2:6b:85:5f:89:7d:9e:93:a2:67:a0:
22:6e:bf:4d:ad:83:10:3f:4e:5f:ab:45:12:32:af:01:32:0f:
27:5c:bf:72:0a:26:79:49:50:3e:cd:fb:d6:f1:5e:94:99:10:
89:14:72:2d:b2:6f:cd:b6:cd:40:35:fe:4b:5a:2a:45:cc:8f:
6b:1c:d5:cb:82:8b:63:8d:b9:19:5a:27:78:02:f8:83:fe:e5:
ad:f1:12:d1:77:06:7e:8e:b4:65:21:ac:2a:a9:5d:e9:79:41:
be:54:9c:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:40:10 2025 by rpki-client