Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/UMhd0Fzo1Qp21p8TvZSRcAld0qM.roa
File: UMhd0Fzo1Qp21p8TvZSRcAld0qM.roa (raw, json)
Hash identifier: 4QenzMDOzB8PYonQD87vSi12BuXxntOp4K0NR2b99Ak=
Subject key identifier: 50:C8:5D:D0:5C:E8:D5:0A:76:D6:9F:13:BD:94:91:70:09:5D:D2:A3
Certificate issuer: /CN=49216f5c165b827a7fd73d8107aebd2f63c63e24
Certificate serial: 0198A31A46B582AFEE31D9682647C372E466
Authority key identifier: 49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/UMhd0Fzo1Qp21p8TvZSRcAld0qM.roa
Signing time: Wed 13 Aug 2025 11:04:24 +0000
ROA not before: Wed 13 Aug 2025 11:04:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43260
IP address blocks: 178.17.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 06:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a3:1a:46:b5:82:af:ee:31:d9:68:26:47:c3:72:e4:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49216f5c165b827a7fd73d8107aebd2f63c63e24
Validity
Not Before: Aug 13 11:04:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=50c85dd05ce8d50a76d69f13bd949170095dd2a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:84:67:91:36:90:20:e7:db:99:a1:43:74:de:
a8:32:39:ce:91:55:d8:85:e2:27:6b:bd:86:9d:06:
d6:03:2c:9d:a2:48:35:e6:d4:8b:43:0b:8a:e6:95:
7e:ed:e3:54:1f:4e:26:78:4d:e9:a0:70:ba:68:9c:
6c:b7:3d:1b:0b:2d:c6:65:c8:95:d3:b6:bc:06:12:
43:57:cc:f9:d5:a2:15:65:bf:d4:fb:6c:61:6a:aa:
ef:52:c3:2f:f0:70:2d:45:1a:88:79:3c:b6:3b:7a:
9c:53:83:26:f0:4c:6f:49:a7:ba:a1:e4:a7:11:7d:
c6:8b:a8:b0:12:c3:ce:d7:b4:99:bf:d5:ce:46:2e:
13:79:5c:4c:46:93:04:a4:90:5b:0b:98:3d:60:68:
c6:62:d1:0c:d0:aa:d3:14:9b:86:67:94:4f:25:c2:
41:a8:b4:0e:7d:c2:82:31:09:c4:85:de:b6:fe:49:
b1:76:1c:7a:87:49:54:96:e5:4d:c2:3f:7a:42:f3:
43:51:92:f0:19:88:c1:21:2e:20:35:58:17:0b:c6:
3c:f7:76:d4:f2:bb:ed:82:f1:0a:48:90:08:a8:fc:
4d:db:19:a2:b3:d6:e4:35:83:a1:ae:1c:10:7c:81:
9f:21:4b:df:93:ca:df:c8:48:6f:26:11:ce:b7:ee:
3a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:C8:5D:D0:5C:E8:D5:0A:76:D6:9F:13:BD:94:91:70:09:5D:D2:A3
X509v3 Authority Key Identifier:
keyid:49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/UMhd0Fzo1Qp21p8TvZSRcAld0qM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.17.59.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:7d:5e:36:96:81:ef:bd:93:c5:94:30:99:dd:ed:62:f4:71:
91:61:37:ca:dd:71:3f:fa:38:dc:5f:7a:89:14:de:2f:e1:e4:
d5:39:d7:19:1b:56:24:9d:9c:b6:30:7e:54:9d:d9:dd:26:6c:
17:8b:f6:24:bc:39:af:e1:20:fc:d3:15:b5:14:1e:08:2d:8b:
e8:6e:65:ef:de:b5:dd:3d:06:f3:df:f2:ea:82:c0:41:27:13:
1e:c8:8f:d2:3e:3b:85:79:98:e8:9d:97:50:9e:dc:0a:64:eb:
ac:c0:4a:f4:4a:44:60:15:80:e0:dd:65:b9:43:69:f5:a7:d1:
3e:03:fd:fd:d9:dd:79:65:ab:c3:b9:2f:fb:92:d7:b9:d7:65:
a8:9d:8f:b4:c5:60:77:60:5c:df:6b:5b:9d:9c:c0:ff:4b:11:
03:05:8a:04:a8:7e:a0:eb:29:f4:01:3e:67:1a:3f:91:58:9f:
07:01:53:c9:d1:dc:a3:f6:00:ec:56:13:90:65:69:60:0f:d5:
f9:d7:36:ab:40:71:8b:4b:aa:ce:6f:e6:f0:96:fe:42:fb:bd:
57:59:7a:7c:2b:25:72:54:c6:9e:f4:a5:95:f0:a4:ea:64:c3:
3d:ca:c5:4f:6e:17:43:3a:c1:0e:0d:1c:56:da:bd:56:42:3f:
0b:a8:15:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:23:12 2025 by rpki-client