Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/7215e0-9ab8-4a13-a605-31ab32ff7c68/1/uwdEf76PatEiBG1-AwvVJD3ZSLI.roa
File: uwdEf76PatEiBG1-AwvVJD3ZSLI.roa (raw, json)
Hash identifier: L5a+PChE20DmyqcNgzL4srrFg9fTUoR13MIkAL4T2o4=
Subject key identifier: BB:07:44:7F:BE:8F:6A:D1:22:04:6D:7E:03:0B:D5:24:3D:D9:48:B2
Certificate issuer: /CN=e1584910124af776e30e5acf055d6bae1761a536
Certificate serial: 0199BF0F59F83356524E50DE30C5AEC175DB
Authority key identifier: E1:58:49:10:12:4A:F7:76:E3:0E:5A:CF:05:5D:6B:AE:17:61:A5:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VhJEBJK93bjDlrPBV1rrhdhpTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/7215e0-9ab8-4a13-a605-31ab32ff7c68/1/uwdEf76PatEiBG1-AwvVJD3ZSLI.roa
Signing time: Tue 07 Oct 2025 14:24:38 +0000
ROA not before: Tue 07 Oct 2025 14:24:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51844
IP address blocks: 95.128.158.0/24 maxlen: 24
2a13:3c0:4::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/7215e0-9ab8-4a13-a605-31ab32ff7c68/1/4VhJEBJK93bjDlrPBV1rrhdhpTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/7215e0-9ab8-4a13-a605-31ab32ff7c68/1/4VhJEBJK93bjDlrPBV1rrhdhpTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4VhJEBJK93bjDlrPBV1rrhdhpTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:bf:0f:59:f8:33:56:52:4e:50:de:30:c5:ae:c1:75:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1584910124af776e30e5acf055d6bae1761a536
Validity
Not Before: Oct 7 14:24:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bb07447fbe8f6ad122046d7e030bd5243dd948b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:c7:bc:1e:de:b8:5f:84:47:f7:f9:08:5c:76:
ab:87:74:b1:df:67:27:bd:91:5a:08:68:a0:10:5e:
ec:8c:5d:a1:df:1a:ed:d2:25:55:63:6a:a5:82:2d:
ac:db:05:89:d4:ad:59:9b:2f:33:11:77:0f:43:68:
4e:da:11:f3:6c:4f:7e:27:3e:02:f9:64:eb:45:e6:
30:2b:26:41:22:a1:31:0e:84:26:5b:f5:00:56:1d:
dc:f1:e2:3e:e0:b4:83:e1:ff:c2:b8:d7:3a:55:6a:
10:0f:d5:10:9b:f2:8d:2c:d2:d5:bb:ca:94:73:7e:
a1:c1:cc:cf:72:32:f9:58:b6:6f:6e:a0:be:bf:8e:
9f:d4:5d:17:f8:e6:d6:6b:1b:55:2d:5c:f9:0b:c5:
f3:1f:03:42:8d:aa:32:53:2c:87:2c:eb:7a:9e:c8:
b0:87:79:e7:b9:8a:a5:1a:95:82:0a:c6:3e:f8:d5:
52:97:4c:ec:e2:af:e7:56:08:d6:a2:c7:6d:7d:91:
8f:9f:37:a2:25:ad:d2:a3:ce:36:b4:7c:6a:61:fb:
8a:31:41:09:68:c7:76:06:fb:c1:37:cf:5c:b6:ec:
08:86:64:5d:ff:03:74:9d:9c:01:30:d5:a6:a9:a7:
d9:52:8d:97:4c:4b:ba:73:4e:d9:e9:73:11:00:e0:
1f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:07:44:7F:BE:8F:6A:D1:22:04:6D:7E:03:0B:D5:24:3D:D9:48:B2
X509v3 Authority Key Identifier:
keyid:E1:58:49:10:12:4A:F7:76:E3:0E:5A:CF:05:5D:6B:AE:17:61:A5:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VhJEBJK93bjDlrPBV1rrhdhpTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/7215e0-9ab8-4a13-a605-31ab32ff7c68/1/uwdEf76PatEiBG1-AwvVJD3ZSLI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/7215e0-9ab8-4a13-a605-31ab32ff7c68/1/4VhJEBJK93bjDlrPBV1rrhdhpTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.128.158.0/24
IPv6:
2a13:3c0:4::/46
Signature Algorithm: sha256WithRSAEncryption
81:b2:01:bb:69:6d:53:8a:83:5f:7d:73:a6:c2:2b:04:4c:39:
34:0f:f9:a4:93:af:05:15:b8:2b:18:b3:71:51:a6:e0:35:88:
4f:8b:c8:90:ec:13:41:3c:ae:c0:71:ae:b4:7e:73:9c:77:65:
80:2d:f3:e6:53:35:be:72:6a:a3:09:01:d6:8d:94:76:12:92:
fa:96:8d:c5:09:ff:c9:93:1c:99:0b:0a:19:77:a2:46:c6:70:
73:4d:2e:8e:11:a5:05:5c:d9:2b:d3:ca:39:20:c9:44:19:2b:
20:1c:1e:17:71:2a:8c:d2:06:47:93:83:d6:3e:2d:7b:26:db:
77:2e:61:1f:01:71:e8:e4:c9:67:e9:88:78:37:49:24:8e:29:
6e:d0:9b:13:71:c3:13:6e:e4:30:81:67:30:25:2f:e8:c6:d6:
e8:47:7e:50:af:8a:4e:83:9b:75:1e:20:9d:7c:9e:41:e6:71:
74:d9:5e:63:cd:fe:01:b0:73:53:bd:8e:4a:14:7b:3e:3d:1f:
4e:5e:82:e8:10:85:c8:13:fb:08:7d:1d:5f:83:b1:06:58:a6:
f4:a6:97:65:2b:f9:1a:b0:c1:a7:45:0f:40:90:94:a1:2f:3b:
56:5a:6a:96:3e:2d:61:ea:53:c0:17:40:dc:b2:dc:eb:b5:91:
1e:71:a2:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:11:14 2025 by rpki-client