Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/UDenThCPEZr8O_T6iUbczV_eTrw.roa
File: UDenThCPEZr8O_T6iUbczV_eTrw.roa (raw, json)
Hash identifier: j/Z4HhJOXjrHzRJPkkMyBIYA1AJIwMlftxAzAhtAuaw=
Subject key identifier: 50:37:A7:4E:10:8F:11:9A:FC:3B:F4:FA:89:46:DC:CD:5F:DE:4E:BC
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019838CDC156234B40A092129927FD580DD8
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/UDenThCPEZr8O_T6iUbczV_eTrw.roa
Signing time: Wed 23 Jul 2025 19:41:05 +0000
ROA not before: Wed 23 Jul 2025 19:41:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9009
IP address blocks: 92.71.2.0/23 maxlen: 24
92.71.4.0/23 maxlen: 24
92.71.26.0/23 maxlen: 24
92.71.28.0/22 maxlen: 24
92.71.48.0/21 maxlen: 24
92.71.56.0/22 maxlen: 24
92.71.62.0/23 maxlen: 24
135.196.4.0/24 maxlen: 24
135.196.24.0/23 maxlen: 24
135.196.28.0/23 maxlen: 24
135.196.88.0/23 maxlen: 24
135.196.102.0/23 maxlen: 24
135.196.132.0/23 maxlen: 24
135.196.156.0/23 maxlen: 24
135.196.164.0/23 maxlen: 24
135.196.172.0/23 maxlen: 24
135.196.176.0/23 maxlen: 24
194.231.151.0/24 maxlen: 24
194.231.156.0/24 maxlen: 24
213.201.154.0/23 maxlen: 24
213.201.166.0/23 maxlen: 24
213.201.174.0/23 maxlen: 24
213.201.182.0/23 maxlen: 24
213.201.186.0/23 maxlen: 24
213.201.190.0/23 maxlen: 24
213.201.194.0/23 maxlen: 24
213.201.196.0/23 maxlen: 24
213.201.208.0/23 maxlen: 24
213.201.214.0/23 maxlen: 24
213.201.218.0/23 maxlen: 24
213.201.222.0/23 maxlen: 24
213.201.226.0/23 maxlen: 24
213.201.228.0/23 maxlen: 24
213.201.234.0/23 maxlen: 24
213.201.238.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 00:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:38:cd:c1:56:23:4b:40:a0:92:12:99:27:fd:58:0d:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jul 23 19:41:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5037a74e108f119afc3bf4fa8946dccd5fde4ebc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5d:e0:ec:38:e8:82:16:44:ff:68:99:ba:6c:
a4:85:6d:57:f3:50:b1:88:f0:de:7e:2b:ff:22:70:
8c:4d:d6:7d:5d:b2:87:d9:98:10:e3:4f:e4:0d:88:
9d:56:0e:75:05:9d:01:fa:c9:dd:51:e0:1f:96:1b:
5a:29:67:16:ce:75:1d:3f:1a:c1:ff:8f:84:2c:fa:
3c:42:a9:c8:db:4d:d1:30:87:af:24:de:d1:3f:c9:
40:52:03:e5:3b:cc:34:f2:10:a4:a5:47:61:bf:0f:
7d:e3:2c:53:35:11:08:58:41:ba:85:e4:f6:d8:7f:
3b:e2:25:99:77:4d:29:c0:b0:60:59:2c:34:cf:cf:
58:3b:43:9f:16:e8:b6:dd:94:d1:0d:d0:0e:a2:37:
26:5f:e8:10:ba:bb:4e:66:9b:ef:18:29:51:aa:bb:
3e:9d:e7:7a:f8:6d:dd:be:42:22:9d:a9:c6:e4:46:
c8:b0:69:3b:8c:c4:47:10:e5:d1:b4:fe:e7:8f:c1:
06:88:ea:6b:be:70:78:60:e6:a2:6d:4d:9c:74:22:
41:8b:e7:c4:8e:fb:93:4c:70:1c:12:78:2d:db:2d:
70:75:98:d2:47:0b:fa:6f:b6:67:ee:0a:ff:d2:75:
c8:5e:cd:a3:3f:25:c9:17:5b:85:b6:a3:a1:b0:31:
94:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:37:A7:4E:10:8F:11:9A:FC:3B:F4:FA:89:46:DC:CD:5F:DE:4E:BC
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/UDenThCPEZr8O_T6iUbczV_eTrw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.71.2.0-92.71.5.255
92.71.26.0-92.71.31.255
92.71.48.0-92.71.59.255
92.71.62.0/23
135.196.4.0/24
135.196.24.0/23
135.196.28.0/23
135.196.88.0/23
135.196.102.0/23
135.196.132.0/23
135.196.156.0/23
135.196.164.0/23
135.196.172.0/23
135.196.176.0/23
194.231.151.0/24
194.231.156.0/24
213.201.154.0/23
213.201.166.0/23
213.201.174.0/23
213.201.182.0/23
213.201.186.0/23
213.201.190.0/23
213.201.194.0-213.201.197.255
213.201.208.0/23
213.201.214.0/23
213.201.218.0/23
213.201.222.0/23
213.201.226.0-213.201.229.255
213.201.234.0/23
213.201.238.0/23
Signature Algorithm: sha256WithRSAEncryption
6a:13:a3:6a:2d:53:dc:bf:45:ee:82:af:6d:74:c5:ad:48:19:
78:ac:9c:81:01:8f:4c:3d:3c:5d:96:80:28:c7:a7:da:d0:00:
35:b8:1e:00:dd:f8:40:91:4b:e2:74:69:9f:2f:aa:1d:1a:48:
3f:47:ab:db:12:28:96:12:dc:ff:55:83:69:75:df:18:bc:22:
a6:59:d2:98:a6:0a:28:7f:18:71:b7:a3:24:e8:50:68:92:fe:
64:d7:01:31:aa:ec:a9:5f:81:aa:48:67:6c:8e:f8:9a:fb:ad:
cc:ae:04:47:e6:81:0d:85:dd:26:df:4a:c6:13:a7:3d:c9:ec:
52:9e:3e:40:43:e0:c5:08:37:81:e5:b5:0a:58:6a:e3:ad:70:
10:9b:e9:41:fe:8c:1b:94:86:34:14:f6:80:30:2a:d3:c1:20:
7a:a0:0c:28:22:58:de:49:62:c1:92:ca:29:b9:1a:9d:66:58:
1b:a1:f1:66:99:c9:e2:c7:5c:f2:40:05:b9:c8:47:9d:d6:61:
c0:2e:42:81:29:56:94:9b:3b:d3:b5:c7:ad:9c:bc:14:19:a9:
9e:64:12:97:46:0d:ea:9b:de:b5:6d:f6:76:b7:5c:4f:f6:9f:
2f:4e:a3:5e:99:16:17:81:74:9c:af:bb:70:15:f2:c1:45:48:
fb:bc:64:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 07:36:40 2025 by rpki-client