Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/UGd_yNaPx-ue9WBlF_n7psffrhw.roa
File: UGd_yNaPx-ue9WBlF_n7psffrhw.roa (raw, json)
Hash identifier: WDBh77zd0LcR/bEjgHsTs5pH12Wiugu2W6hLySkCEZw=
Subject key identifier: 50:67:7F:C8:D6:8F:C7:EB:9E:F5:60:65:17:F9:FB:A6:C7:DF:AE:1C
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 0197D59F17E0BFDF01CF9D84C971CF2B36A7
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/UGd_yNaPx-ue9WBlF_n7psffrhw.roa
Signing time: Fri 04 Jul 2025 13:27:42 +0000
ROA not before: Fri 04 Jul 2025 13:27:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207306
IP address blocks: 2a0c:b641:640::/44 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 16:21:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d5:9f:17:e0:bf:df:01:cf:9d:84:c9:71:cf:2b:36:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jul 4 13:27:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=50677fc8d68fc7eb9ef5606517f9fba6c7dfae1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:e1:f4:d9:0a:2a:00:85:a3:59:04:72:09:28:
c7:6a:e3:36:76:0e:0b:38:37:f0:3a:ed:53:06:1c:
7c:16:18:60:cc:65:45:a0:24:d9:a0:6d:7d:40:20:
ae:9a:2d:62:80:83:74:5d:e2:33:cd:b8:f8:16:5b:
e7:4c:7b:2b:54:3b:78:99:60:46:87:8c:f4:f1:ad:
b1:00:a5:d0:e7:77:71:77:6f:5a:a6:89:67:aa:f6:
7b:0f:99:51:32:73:d8:34:ba:d6:9c:2f:0e:15:d6:
c4:d4:4c:1b:65:b1:d7:c7:e1:ee:91:f9:f8:09:e6:
a9:b2:55:01:b2:aa:43:d7:3d:4e:79:73:45:13:09:
e9:39:6b:0e:f3:56:2f:bf:d1:4e:99:ec:84:86:6d:
39:a1:82:7f:9d:74:96:be:b2:d3:ea:a4:cd:74:d7:
9d:f2:42:93:23:31:40:f8:86:88:db:ae:df:45:63:
25:a9:8c:f8:30:4c:73:fb:eb:34:eb:83:8c:bc:f8:
32:01:37:81:30:d4:4d:b2:a0:c2:c1:3b:43:dc:48:
86:7f:e8:e0:86:04:a1:00:31:07:e1:0e:be:12:4d:
80:37:1f:a3:f0:26:7a:9d:ac:10:25:1b:a2:41:3e:
2f:b6:ab:0a:7a:e7:05:92:6b:98:62:de:95:67:1c:
d2:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:67:7F:C8:D6:8F:C7:EB:9E:F5:60:65:17:F9:FB:A6:C7:DF:AE:1C
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/UGd_yNaPx-ue9WBlF_n7psffrhw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:640::/44
Signature Algorithm: sha256WithRSAEncryption
1b:27:7c:6f:c0:59:dd:aa:f1:1c:15:e5:65:8a:5d:40:30:79:
3d:19:b0:42:eb:53:7d:c6:40:31:a1:26:93:cf:a5:6c:1b:fe:
05:65:af:68:d6:cd:38:17:28:94:eb:91:37:42:fa:96:8d:81:
f1:a4:c7:84:5b:6c:d6:19:f4:e5:7e:61:1f:64:30:84:53:3c:
cd:f9:3c:7a:7f:03:6e:cd:65:f9:34:61:be:ae:45:d0:bf:9e:
cd:00:da:f9:23:9d:5b:f3:c1:af:bd:eb:89:98:3e:72:23:93:
e4:8b:a3:e3:12:f9:cc:35:e2:a1:d2:d4:a5:2c:60:a0:e4:db:
29:4e:f8:8e:72:c6:a9:e0:1e:ba:d6:de:b7:a5:7f:a3:85:8f:
3f:1c:38:0b:37:d4:7c:15:18:f5:37:fc:5d:60:9a:41:cf:dc:
4b:e5:23:70:7b:03:df:8a:1b:d3:a5:3d:e8:f3:d8:0b:fc:df:
c9:87:73:7e:fc:9a:85:eb:84:64:ec:4a:a5:d4:b5:fc:58:10:
04:dc:0f:f2:79:5b:32:9c:72:38:fa:81:82:40:32:1b:ab:32:
a8:7a:bc:a9:a9:0a:12:33:52:9b:2b:fd:b3:0b:ac:a3:b6:ac:
2f:7e:ea:94:47:70:23:1c:c6:77:0d:ca:af:7f:e3:5a:50:6e:
3c:68:76:ac
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZfVnxfgv98Bz52EyXHPKzanMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi
MzUwNTgwHhcNMjUwNzA0MTMyNzQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MDY3N2ZjOGQ2OGZjN2ViOWVmNTYwNjUxN2Y5ZmJhNmM3ZGZhZTFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7+H02QoqAIWjWQRyCSjHauM2dg4L
ODfwOu1TBhx8FhhgzGVFoCTZoG19QCCumi1igIN0XeIzzbj4FlvnTHsrVDt4mWBG
h4z08a2xAKXQ53dxd29apolnqvZ7D5lRMnPYNLrWnC8OFdbE1EwbZbHXx+Hukfn4
CeapslUBsqpD1z1OeXNFEwnpOWsO81Yvv9FOmeyEhm05oYJ/nXSWvrLT6qTNdNed
8kKTIzFA+IaI267fRWMlqYz4MExz++s064OMvPgyATeBMNRNsqDCwTtD3EiGf+jg
hgShADEH4Q6+Ek2ANx+j8CZ6nawQJRuiQT4vtqsKeucFkmuYYt6VZxzSkQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFFBnf8jWj8frnvVgZRf5+6bH364cMB8GA1UdIwQY
MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et
NWVjOGM4ZWQ2MGZkLzEvVUdkX3lOYVB4LXVlOVdCbEZfbjdwc2Zmcmh3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk
LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQZA
MA0GCSqGSIb3DQEBCwUAA4IBAQAbJ3xvwFndqvEcFeVlil1AMHk9GbBC61N9xkAx
oSaTz6VsG/4FZa9o1s04FyiU65E3QvqWjYHxpMeEW2zWGfTlfmEfZDCEUzzN+Tx6
fwNuzWX5NGG+rkXQv57NANr5I51b88GvveuJmD5yI5Pki6PjEvnMNeKh0tSlLGCg
5NspTviOcsap4B661t63pX+jhY8/HDgLN9R8FRj1N/xdYJpBz9xL5SNwewPfihvT
pT3o89gL/N/Jh3N+/JqF64Rk7Eql1LX8WBAE3A/yeVsynHI4+oGCQDIbqzKoeryp
qQoSM1KbK/2zC6yjtqwvfuqUR3AjHMZ3Dcqvf+NaUG48aHas
-----END CERTIFICATE-----
Generated at Mon Jul 21 00:21:40 2025 by rpki-client