Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/uXGJLAkLx9YFzntYRYNs8t7Agh8.roa
File: uXGJLAkLx9YFzntYRYNs8t7Agh8.roa (raw, json)
Hash identifier: UoPuFA4VH9eXYN9tJa/5gFxX302v7sxeA3qQO26shzE=
Subject key identifier: B9:71:89:2C:09:0B:C7:D6:05:CE:7B:58:45:83:6C:F2:DE:C0:82:1F
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 0197F086171C546681554D2FE30C0068DC4C
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/uXGJLAkLx9YFzntYRYNs8t7Agh8.roa
Signing time: Wed 09 Jul 2025 18:50:08 +0000
ROA not before: Wed 09 Jul 2025 18:50:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30900
IP address blocks: 77.47.213.0/24 maxlen: 24
195.178.151.0/24 maxlen: 24
195.178.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 02:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:f0:86:17:1c:54:66:81:55:4d:2f:e3:0c:00:68:dc:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Jul 9 18:50:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b971892c090bc7d605ce7b5845836cf2dec0821f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:60:1a:91:f8:fc:aa:53:36:8e:62:c9:09:d5:
05:b7:56:ba:7b:d6:6a:14:5d:3c:ee:01:c3:b2:ca:
14:1f:b4:a7:03:ba:7b:88:a2:da:b0:ff:97:cf:09:
7e:eb:65:a3:a3:6a:2b:be:66:06:f6:0e:ca:16:8c:
1c:e1:1d:e4:88:2d:6f:d1:80:ae:19:94:20:54:3f:
b0:cc:c6:c0:ee:79:c8:de:e8:37:47:93:8a:20:c6:
8f:f1:15:cb:e8:5f:c5:d8:3d:65:39:9b:47:91:5b:
c9:a7:e0:2d:4c:88:3d:06:61:35:cd:e5:1e:24:86:
36:9c:11:aa:ac:6e:8c:87:57:db:9e:ed:f7:58:83:
34:89:0a:b8:89:d4:a4:cb:64:34:28:73:06:b1:cd:
38:d2:79:df:fd:ff:30:29:26:c6:76:89:5a:10:47:
7d:7c:1b:79:e9:0d:00:62:3e:6b:bc:42:22:68:5a:
0a:85:c4:a2:7c:b3:d7:97:35:9b:63:6c:7a:3e:20:
fc:5b:18:9c:65:25:66:ab:49:5f:a3:7f:7f:cb:bf:
92:1c:c6:0f:53:9c:6f:46:4c:18:d6:87:fa:9a:30:
59:03:15:5d:bf:2a:a7:d5:64:fa:37:52:35:13:a4:
ce:27:dd:d5:b1:61:08:0f:ff:e3:6f:0d:c7:6a:30:
57:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:71:89:2C:09:0B:C7:D6:05:CE:7B:58:45:83:6C:F2:DE:C0:82:1F
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/uXGJLAkLx9YFzntYRYNs8t7Agh8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.213.0/24
195.178.151.0/24
195.178.156.0/24
Signature Algorithm: sha256WithRSAEncryption
56:8d:2e:59:53:42:ed:07:06:87:06:6e:8d:a6:28:ed:b1:0c:
05:7c:ff:c2:c2:31:b7:34:14:7e:98:7a:a8:8f:fa:34:9e:63:
84:ed:30:07:bf:05:81:c2:ed:fa:ff:4f:59:1b:ef:80:6d:e9:
19:77:f3:78:50:9f:4d:ce:f1:1b:9c:3f:b5:0f:0d:7d:40:48:
e5:f4:1b:c4:6e:cf:6a:1a:c2:37:6a:2b:c1:15:2b:f3:18:ad:
16:ea:22:47:00:99:f4:12:f5:3b:2b:f4:d9:cc:46:13:31:4d:
13:30:4b:34:3a:69:8b:45:1b:b9:36:f4:54:8c:83:6b:72:7f:
b9:15:7a:b8:7f:d8:05:b3:06:71:40:d8:b6:99:52:fc:f5:c3:
b6:bc:27:c6:36:dc:5f:33:08:f5:b5:f0:9e:fb:be:b5:5a:d7:
58:c0:b2:85:c9:72:fb:f7:85:b0:96:12:f6:e3:ec:6f:7d:e5:
4e:36:12:15:1c:33:cf:8d:9f:38:82:d8:1e:06:52:69:a0:83:
a7:57:5b:7c:20:38:6a:38:75:8e:e9:c1:cd:38:b4:31:db:a9:
85:a3:b6:16:11:cc:71:84:50:7b:ae:35:27:8f:89:d6:2e:5c:
89:c6:fe:9d:2b:1d:cb:5e:ba:d1:de:ff:14:c0:7f:09:9d:c4:
91:6d:e3:71
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZfwhhccVGaBVU0v4wwAaNxMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5NDI2MzI1YWNiOGNlNjA5YTY4NmZhNjU1YjA1ODk2ODgw
OWIzNDYwHhcNMjUwNzA5MTg1MDA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOTcxODkyYzA5MGJjN2Q2MDVjZTdiNTg0NTgzNmNmMmRlYzA4MjFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzGAakfj8qlM2jmLJCdUFt1a6e9Zq
FF087gHDssoUH7SnA7p7iKLasP+Xzwl+62Wjo2orvmYG9g7KFowc4R3kiC1v0YCu
GZQgVD+wzMbA7nnI3ug3R5OKIMaP8RXL6F/F2D1lOZtHkVvJp+AtTIg9BmE1zeUe
JIY2nBGqrG6Mh1fbnu33WIM0iQq4idSky2Q0KHMGsc040nnf/f8wKSbGdolaEEd9
fBt56Q0AYj5rvEIiaFoKhcSifLPXlzWbY2x6PiD8WxicZSVmq0lfo39/y7+SHMYP
U5xvRkwY1of6mjBZAxVdvyqn1WT6N1I1E6TOJ93VsWEID//jbw3HajBX+wIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFLlxiSwJC8fWBc57WEWDbPLewIIfMB8GA1UdIwQY
MBaAFBlCYyWsuM5gmmhvplWwWJaICbNGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQt
MDNmNGM3MTEzYzM0LzEvdVhHSkxBa0x4OVlGem50WVJZTnM4dDdBZ2g4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQtMDNmNGM3MTEzYzM0
LzEvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQATS/VAwQA
w7KXAwQAw7KcMA0GCSqGSIb3DQEBCwUAA4IBAQBWjS5ZU0LtBwaHBm6NpijtsQwF
fP/CwjG3NBR+mHqoj/o0nmOE7TAHvwWBwu36/09ZG++AbekZd/N4UJ9NzvEbnD+1
Dw19QEjl9BvEbs9qGsI3aivBFSvzGK0W6iJHAJn0EvU7K/TZzEYTMU0TMEs0OmmL
RRu5NvRUjINrcn+5FXq4f9gFswZxQNi2mVL89cO2vCfGNtxfMwj1tfCe+761WtdY
wLKFyXL794WwlhL24+xvfeVONhIVHDPPjZ84gtgeBlJpoIOnV1t8IDhqOHWO6cHN
OLQx26mFo7YWEcxxhFB7rjUnj4nWLlyJxv6dKx3LXrrR3v8UwH8JncSRbeNx
-----END CERTIFICATE-----
Generated at Sun Jul 27 10:45:29 2025 by rpki-client