Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/UMs2pdPUtszMvaTYnA3_eIh5E5U.roa
File: UMs2pdPUtszMvaTYnA3_eIh5E5U.roa (raw, json)
Hash identifier: JM9rAr1uPdXJeYgBUzdXQVWwdSBor7kURMKv0529fs4=
Subject key identifier: 50:CB:36:A5:D3:D4:B6:CC:CC:BD:A4:D8:9C:0D:FF:78:88:79:13:95
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0197D4A6FFC3457C4DF3BB0A4845D77130D3
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/UMs2pdPUtszMvaTYnA3_eIh5E5U.roa
Signing time: Fri 04 Jul 2025 08:56:43 +0000
ROA not before: Fri 04 Jul 2025 08:56:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51659
IP address blocks: 194.87.68.0/22 maxlen: 22
194.87.68.0/23 maxlen: 23
194.87.70.0/24 maxlen: 24
194.87.196.0/23 maxlen: 23
195.58.48.0/23 maxlen: 23
195.133.5.0/24 maxlen: 24
195.133.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d4:a6:ff:c3:45:7c:4d:f3:bb:0a:48:45:d7:71:30:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jul 4 08:56:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=50cb36a5d3d4b6ccccbda4d89c0dff7888791395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:9f:a7:ae:ac:04:ad:a2:e4:d2:97:41:6c:b9:
b4:73:15:0a:13:ae:0d:25:b1:a0:8a:e2:b9:fa:ff:
12:cf:7e:77:35:30:b5:e1:58:fc:d2:f6:8d:25:0d:
04:e5:b1:10:17:eb:b6:c2:28:9e:d9:56:2e:8e:bd:
b1:50:fa:65:d8:c1:01:54:9b:ec:3a:e5:0b:55:1c:
40:0d:8a:ef:64:94:21:af:a2:87:27:d0:fa:d2:4f:
58:41:ce:d2:fc:30:b3:21:1f:4c:e3:37:ca:de:7e:
65:c2:76:c4:d4:26:50:c4:7c:45:1f:f7:9b:bf:bc:
ca:6b:ee:12:d0:5b:10:4d:65:94:4b:c2:80:9b:f8:
2b:fb:1b:1a:18:c1:99:00:55:1e:ee:3d:0c:92:37:
87:59:2e:9a:1e:34:a5:34:e2:1c:74:9d:89:71:56:
73:49:ce:fd:0c:e2:e5:00:a0:e3:32:0d:89:84:8d:
46:aa:ee:f3:36:0c:80:ba:c6:a4:df:4d:e2:a4:7e:
66:01:63:d3:38:09:e5:86:a5:9e:03:3b:fb:a3:c2:
fd:56:bb:4c:0f:04:c9:95:69:7a:9c:85:17:bc:44:
ad:77:73:4e:77:11:26:7f:36:82:5c:7f:c8:5e:c3:
6a:09:32:a7:cb:f4:ba:58:b8:31:6b:d6:05:a8:64:
84:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:CB:36:A5:D3:D4:B6:CC:CC:BD:A4:D8:9C:0D:FF:78:88:79:13:95
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/UMs2pdPUtszMvaTYnA3_eIh5E5U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.68.0/22
194.87.196.0/23
195.58.48.0/23
195.133.5.0/24
195.133.23.0/24
Signature Algorithm: sha256WithRSAEncryption
13:7d:72:49:5a:25:f7:a7:96:3f:3a:f5:71:8b:b7:27:a8:f9:
d6:d8:0a:ce:8d:61:06:82:a1:a5:47:93:4d:16:0c:dd:5d:ea:
2c:3c:ae:2a:6b:82:29:fe:af:a1:b6:a3:d1:b4:ef:71:ca:b8:
9f:ca:6d:22:ed:02:95:2e:2c:52:28:d9:14:09:ef:c7:81:ff:
5c:73:e3:ac:7a:dc:04:32:cb:24:18:95:3f:5a:dc:34:29:bd:
14:bf:7a:60:1f:be:21:f3:92:8b:fa:ab:fc:97:a5:d4:d1:b0:
88:ad:12:91:8a:43:55:62:cc:1e:b8:17:88:85:ea:3b:a1:98:
51:48:fd:2b:86:3b:08:4e:e0:98:1d:dd:48:95:30:d8:99:97:
53:54:f2:a9:4c:95:6f:96:5b:12:3c:51:29:a5:0a:bb:61:bf:
f8:66:00:65:df:28:9d:90:25:9f:f3:e5:af:68:13:8c:2d:00:
7a:f3:84:f3:e6:3d:87:93:5e:89:dc:91:8e:97:38:9a:bd:9f:
34:82:60:52:89:ee:0a:17:9a:dd:79:3b:f1:40:6c:ea:3c:8c:
5b:25:92:44:17:a4:d6:b6:54:52:f9:f4:44:02:72:8e:c0:63:
9a:cb:2e:1c:9c:31:c7:9e:16:36:04:6a:39:7a:90:c4:7d:aa:
64:87:cf:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 21:55:19 2025 by rpki-client