Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/UTTLqXMtJUxFPASsyV3j9mlbrsU.roa
File: UTTLqXMtJUxFPASsyV3j9mlbrsU.roa (raw, json)
Hash identifier: 2XJm8gYnzGZQLzDIfSf2GHQMXAHNk+qtN5YEcj0V9ws=
Subject key identifier: 51:34:CB:A9:73:2D:25:4C:45:3C:04:AC:C9:5D:E3:F6:69:5B:AE:C5
Certificate issuer: /CN=44c295ca6ee8cae7006b577af54e376623df7799
Certificate serial: 0197E56F8D6FCA490F2A984BC861CE07FB3A
Authority key identifier: 44:C2:95:CA:6E:E8:CA:E7:00:6B:57:7A:F5:4E:37:66:23:DF:77:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RMKVym7oyucAa1d69U43ZiPfd5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/UTTLqXMtJUxFPASsyV3j9mlbrsU.roa
Signing time: Mon 07 Jul 2025 15:09:42 +0000
ROA not before: Mon 07 Jul 2025 15:09:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197075
IP address blocks: 193.239.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/RMKVym7oyucAa1d69U43ZiPfd5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 14:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:e5:6f:8d:6f:ca:49:0f:2a:98:4b:c8:61:ce:07:fb:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44c295ca6ee8cae7006b577af54e376623df7799
Validity
Not Before: Jul 7 15:09:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5134cba9732d254c453c04acc95de3f6695baec5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e7:c0:e5:e2:44:5e:be:27:50:2c:09:13:79:
9c:18:c7:68:aa:29:dd:7e:d1:2b:c1:d4:8b:03:91:
cb:32:15:07:41:21:82:33:e4:e6:74:be:c6:18:cf:
63:9a:02:3b:fc:c0:8e:ca:08:e9:54:c2:3e:03:45:
dc:ce:3b:db:19:ef:8f:ca:7e:68:6f:bf:df:63:e0:
9e:9b:f4:e3:1d:ff:16:38:60:dc:b2:66:53:3f:8b:
37:dc:03:a3:cd:e0:9d:a4:76:90:8f:cc:f2:44:87:
99:e9:1b:eb:f3:a3:e4:1d:17:f5:a6:42:4b:67:0c:
33:8d:d0:cb:e1:9c:d3:2b:86:da:86:76:8b:49:1d:
d0:69:cf:72:71:d1:7b:0d:38:f5:26:c0:53:b0:bd:
fe:cb:a8:63:c2:bc:21:22:89:e5:38:0d:9d:ae:8d:
ed:92:4f:fb:0d:8c:e9:37:29:63:45:89:da:a2:42:
3b:9d:8a:b7:c5:8c:58:74:bb:15:7c:da:ca:42:b9:
ae:bf:f6:f4:f1:52:20:5f:98:0b:35:b7:12:74:cc:
94:6c:e3:55:e3:ef:83:48:7f:07:68:f0:df:9f:6b:
bc:30:2c:68:d3:76:3a:5b:fa:b6:99:1c:ba:39:cc:
29:20:df:bd:75:8e:13:61:2a:91:02:5d:5a:29:d7:
85:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:34:CB:A9:73:2D:25:4C:45:3C:04:AC:C9:5D:E3:F6:69:5B:AE:C5
X509v3 Authority Key Identifier:
keyid:44:C2:95:CA:6E:E8:CA:E7:00:6B:57:7A:F5:4E:37:66:23:DF:77:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RMKVym7oyucAa1d69U43ZiPfd5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/UTTLqXMtJUxFPASsyV3j9mlbrsU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.239.203.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:93:a5:2a:cb:14:a0:91:fb:82:22:d4:3b:29:11:b5:29:a4:
07:6e:09:6b:ad:fc:b2:a5:8c:f0:87:bf:6f:30:3d:15:e0:c4:
91:7b:85:cd:88:82:60:6d:9e:50:8d:19:a7:59:fc:0f:0f:5c:
19:7a:c6:68:af:84:e9:31:74:68:7c:9b:29:43:67:a9:a0:8d:
23:83:67:4b:2d:7f:93:33:d3:8b:9c:53:04:20:47:79:03:98:
b1:67:ca:86:1b:46:03:01:29:24:28:ae:95:cb:ac:d4:1e:4d:
21:d0:8f:bf:92:b7:6a:17:63:da:2a:4e:79:fa:47:2d:63:ba:
f4:8e:b4:0e:2a:22:31:99:20:c5:5c:59:f2:6b:6e:a2:70:9f:
76:9a:eb:a1:9a:33:04:d4:4d:9e:1f:f0:68:76:46:16:43:bf:
7e:01:7f:05:72:ec:db:87:3a:6d:48:bf:59:b1:29:5c:bb:1f:
d7:29:58:e4:7f:77:c6:62:72:80:a8:e5:53:6e:57:a8:69:00:
b9:27:14:e8:67:08:45:d3:2c:8e:ef:11:a1:83:31:31:c7:b5:
b2:10:47:d3:ad:88:87:9c:cc:24:ac:47:ff:a0:b5:b2:8d:e3:
10:82:ad:d4:c2:90:16:ba:00:25:18:bc:bd:d8:ac:c6:cd:f1:
2f:6a:fb:b7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZflb41vykkPKphLyGHOB/s6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0YzI5NWNhNmVlOGNhZTcwMDZiNTc3YWY1NGUzNzY2MjNk
Zjc3OTkwHhcNMjUwNzA3MTUwOTQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MTM0Y2JhOTczMmQyNTRjNDUzYzA0YWNjOTVkZTNmNjY5NWJhZWM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnufA5eJEXr4nUCwJE3mcGMdoqind
ftErwdSLA5HLMhUHQSGCM+TmdL7GGM9jmgI7/MCOygjpVMI+A0XczjvbGe+Pyn5o
b7/fY+Cem/TjHf8WOGDcsmZTP4s33AOjzeCdpHaQj8zyRIeZ6Rvr86PkHRf1pkJL
ZwwzjdDL4ZzTK4bahnaLSR3Qac9ycdF7DTj1JsBTsL3+y6hjwrwhIonlOA2dro3t
kk/7DYzpNyljRYnaokI7nYq3xYxYdLsVfNrKQrmuv/b08VIgX5gLNbcSdMyUbONV
4++DSH8HaPDfn2u8MCxo03Y6W/q2mRy6OcwpIN+9dY4TYSqRAl1aKdeF7QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFE0y6lzLSVMRTwErMld4/ZpW67FMB8GA1UdIwQY
MBaAFETClcpu6MrnAGtXevVON2Yj33eZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUk1LVnltN295dWNBYTFkNjlVNDNaaVBmZDVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8xN2E4OGQtMjM2ZC00ZmFkLTkwMzUt
NzU5OWI0NDFjZDFjLzEvVVRUTHFYTXRKVXhGUEFTc3lWM2o5bWxicnNVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC8xN2E4OGQtMjM2ZC00ZmFkLTkwMzUtNzU5OWI0NDFjZDFj
LzEvUk1LVnltN295dWNBYTFkNjlVNDNaaVBmZDVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwe/LMA0G
CSqGSIb3DQEBCwUAA4IBAQANk6UqyxSgkfuCItQ7KRG1KaQHbglrrfyypYzwh79v
MD0V4MSRe4XNiIJgbZ5QjRmnWfwPD1wZesZor4TpMXRofJspQ2epoI0jg2dLLX+T
M9OLnFMEIEd5A5ixZ8qGG0YDASkkKK6Vy6zUHk0h0I+/krdqF2PaKk55+kctY7r0
jrQOKiIxmSDFXFnya26icJ92muuhmjME1E2eH/BodkYWQ79+AX8FcuzbhzptSL9Z
sSlcux/XKVjkf3fGYnKAqOVTbleoaQC5JxToZwhF0yyO7xGhgzExx7WyEEfTrYiH
nMwkrEf/oLWyjeMQgq3UwpAWugAlGLy92KzGzfEvavu3
-----END CERTIFICATE-----
Generated at Wed Jul 23 19:40:29 2025 by rpki-client