Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/UIz3uWXq8WvDlEg8PmFeL4rRSwE.roa
File: UIz3uWXq8WvDlEg8PmFeL4rRSwE.roa (raw, json)
Hash identifier: gLYU6TimhdtwdZhpJfW5DluA+/Hw1EN6Q7uPN3RrAos=
Subject key identifier: 50:8C:F7:B9:65:EA:F1:6B:C3:94:48:3C:3E:61:5E:2F:8A:D1:4B:01
Certificate issuer: /CN=df895a3ee2211b6ee2df7202f09a426680d66269
Certificate serial: 0197EEB993578C56F94BED673CB8A45835F3
Authority key identifier: DF:89:5A:3E:E2:21:1B:6E:E2:DF:72:02:F0:9A:42:66:80:D6:62:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/UIz3uWXq8WvDlEg8PmFeL4rRSwE.roa
Signing time: Wed 09 Jul 2025 10:27:08 +0000
ROA not before: Wed 09 Jul 2025 10:27:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42031
IP address blocks: 77.105.128.0/24 maxlen: 24
185.225.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ee:b9:93:57:8c:56:f9:4b:ed:67:3c:b8:a4:58:35:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df895a3ee2211b6ee2df7202f09a426680d66269
Validity
Not Before: Jul 9 10:27:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=508cf7b965eaf16bc394483c3e615e2f8ad14b01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a5:ef:9f:f5:09:fd:ce:58:fc:32:60:a6:58:
79:6d:09:ae:30:59:82:8d:a9:62:58:01:c5:84:8a:
6c:6d:8a:86:a2:26:e4:39:09:a8:6b:b2:91:9d:23:
ad:67:d8:ba:a9:5d:d9:9a:e2:cc:20:21:16:9e:2f:
21:1e:27:d4:07:32:8f:f9:88:4e:be:28:5b:97:64:
3f:77:82:9d:dc:65:63:ba:67:eb:c7:0b:f9:cb:0e:
56:84:0c:63:8e:6f:0d:28:a5:8b:c8:00:e0:39:36:
c8:46:99:1d:3d:d8:7d:c5:61:f9:42:21:15:80:94:
37:6b:88:12:74:29:9b:52:95:26:62:d0:7f:22:ab:
cf:56:2a:03:57:fb:d7:03:5b:7f:d2:31:fd:43:02:
31:90:e4:2e:12:28:20:be:a5:66:a6:91:1b:ff:de:
59:37:d6:50:6b:5b:75:fe:04:d7:0c:37:a2:ba:d5:
fe:07:e5:c1:50:55:2e:04:51:7e:67:1d:b2:df:16:
47:01:9e:8a:66:82:f6:64:35:f4:22:f7:d4:19:74:
63:82:9f:c0:fa:38:76:96:07:03:84:25:4d:f2:9c:
9d:5e:0c:cb:8f:fd:e2:23:5d:39:77:3c:f1:e5:4f:
b8:ba:c2:19:f1:d3:4d:1f:5e:9c:5a:bd:50:8d:87:
72:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:8C:F7:B9:65:EA:F1:6B:C3:94:48:3C:3E:61:5E:2F:8A:D1:4B:01
X509v3 Authority Key Identifier:
keyid:DF:89:5A:3E:E2:21:1B:6E:E2:DF:72:02:F0:9A:42:66:80:D6:62:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/UIz3uWXq8WvDlEg8PmFeL4rRSwE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.128.0/24
185.225.203.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:05:bb:28:22:b9:33:77:0f:6b:41:69:5a:4f:1a:fa:6b:ef:
a8:20:1a:e7:76:72:c5:66:eb:33:2b:32:35:c1:97:ba:93:02:
ec:13:53:59:ea:82:6e:c6:fd:d3:63:ad:ad:13:67:2c:47:bf:
74:5c:09:b2:2a:1d:e9:13:18:ee:b2:3e:07:21:15:b5:61:e1:
39:d2:f2:06:5c:43:c1:05:21:9b:e2:5a:0d:83:8c:4a:14:44:
33:8e:49:cb:4d:07:ff:cb:88:d4:a4:f2:fd:16:61:0d:7e:5e:
77:37:f0:73:b4:8c:1a:bc:2e:ca:35:3d:a5:a6:fe:0d:83:a3:
dc:34:ec:43:68:8a:77:62:45:b4:84:31:1c:7f:96:b4:4e:d0:
74:75:39:02:50:6c:11:e1:43:3b:6b:6c:f8:41:d1:7d:ef:41:
4d:5a:12:8c:f9:7a:79:84:00:5e:18:c0:e6:76:92:f8:95:38:
1c:87:cf:72:0e:1d:19:84:d3:e1:87:77:3f:50:db:5b:0e:63:
87:71:9c:1c:4a:7d:85:50:5a:53:71:cb:f3:75:e1:21:39:15:
1f:ca:ed:94:e9:2a:b9:c0:95:f2:96:34:68:09:7f:89:2d:35:
d9:bd:11:70:76:d6:b3:64:54:d8:2d:5d:3c:7e:18:b2:4e:94:
93:0e:3f:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 12:53:23 2025 by rpki-client