Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/uEevp2GUNz1b7rUD1ir2ld6ATDU.roa
File: uEevp2GUNz1b7rUD1ir2ld6ATDU.roa (raw, json)
Hash identifier: QtO8bxI6kXGPk5HpdZyF30S3dseJ+gcUwY5+nGoFUJg=
Subject key identifier: B8:47:AF:A7:61:94:37:3D:5B:EE:B5:03:D6:2A:F6:95:DE:80:4C:35
Certificate issuer: /CN=926587a7c42c261fa254b0b82e7bc0719cc64812
Certificate serial: 01982D3A812DB08C268F42C086D03A5128D9
Authority key identifier: 92:65:87:A7:C4:2C:26:1F:A2:54:B0:B8:2E:7B:C0:71:9C:C6:48:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmWHp8QsJh-iVLC4LnvAcZzGSBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/uEevp2GUNz1b7rUD1ir2ld6ATDU.roa
Signing time: Mon 21 Jul 2025 13:44:25 +0000
ROA not before: Mon 21 Jul 2025 13:44:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215224
IP address blocks: 91.239.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/kmWHp8QsJh-iVLC4LnvAcZzGSBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/kmWHp8QsJh-iVLC4LnvAcZzGSBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/kmWHp8QsJh-iVLC4LnvAcZzGSBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:2d:3a:81:2d:b0:8c:26:8f:42:c0:86:d0:3a:51:28:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=926587a7c42c261fa254b0b82e7bc0719cc64812
Validity
Not Before: Jul 21 13:44:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b847afa76194373d5beeb503d62af695de804c35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:50:85:4a:72:91:8a:7e:2e:94:5c:0c:23:66:
35:1e:d3:d7:8f:c0:e9:21:14:3c:1b:c4:36:8a:70:
f9:17:cb:17:a9:aa:d9:65:25:8f:67:71:b8:d8:09:
a5:79:36:0c:fb:42:bf:2c:b9:bc:9b:9d:ac:82:19:
8c:d2:8c:f4:41:42:b9:6a:82:86:c4:ee:2d:54:57:
f6:55:f4:ce:f9:26:00:08:f1:74:65:8d:3d:60:88:
d8:db:af:4a:a9:0e:18:19:61:d1:0e:27:89:24:d1:
7e:7f:7b:4b:b7:6a:76:e0:47:67:c9:1d:6e:2d:62:
06:0d:27:1e:5b:87:c1:a9:06:bf:17:97:2a:80:f6:
3d:fb:46:35:b6:13:1d:40:ec:8c:12:f7:0f:a3:61:
66:b1:c5:5b:96:c1:f6:43:3c:0d:84:b5:da:79:3a:
d0:fc:f4:a3:2c:15:a4:9e:03:3b:d2:8b:51:90:9b:
60:15:4b:72:9c:09:61:ef:a3:f5:17:bf:5f:24:f0:
b0:ea:57:3e:19:be:13:6d:b0:eb:e3:37:78:4a:c5:
ac:9d:99:be:08:b7:5c:b1:a4:e8:c4:b0:dc:4e:1a:
fe:cd:56:2a:2d:c9:1a:db:31:28:4c:4f:55:ce:f4:
ae:16:21:0d:4e:ee:6e:2c:5c:e7:e7:71:4f:b3:59:
70:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:47:AF:A7:61:94:37:3D:5B:EE:B5:03:D6:2A:F6:95:DE:80:4C:35
X509v3 Authority Key Identifier:
keyid:92:65:87:A7:C4:2C:26:1F:A2:54:B0:B8:2E:7B:C0:71:9C:C6:48:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmWHp8QsJh-iVLC4LnvAcZzGSBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/uEevp2GUNz1b7rUD1ir2ld6ATDU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/kmWHp8QsJh-iVLC4LnvAcZzGSBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.216.0/24
Signature Algorithm: sha256WithRSAEncryption
01:e1:41:a8:d8:fb:18:b5:3e:2f:59:79:96:12:91:a8:80:ff:
9c:7c:be:55:59:d4:00:85:3f:cd:1c:6f:58:34:c3:49:ec:4a:
76:8d:a0:61:5c:5f:ce:b0:d0:fb:1e:74:93:0d:70:7f:81:34:
fb:59:9d:69:54:62:69:8a:f1:c5:25:cc:96:96:3c:8a:eb:fe:
2e:e4:6e:00:7a:03:f4:4f:ab:6b:22:ff:d2:03:e5:78:0a:80:
31:cf:78:a2:74:58:2f:86:89:89:9d:0c:1a:2b:ac:6b:a0:85:
06:b1:64:88:67:d8:d4:e0:6e:fe:7b:a5:42:4b:02:65:02:a6:
fd:11:56:48:95:fc:4c:65:b7:29:8e:f5:01:9c:f6:24:dc:34:
43:f8:7f:a7:27:7d:c0:40:66:b9:77:e2:c8:00:a9:bf:ee:75:
93:41:a8:88:e2:24:e0:28:ab:87:d2:55:7d:58:d2:55:75:72:
31:1a:af:7c:b1:b3:6a:cd:fa:1f:e3:10:cc:7d:d3:e4:88:b9:
27:ce:2d:17:4d:44:7f:7d:64:b7:da:f4:bd:1b:9d:1e:b1:09:
7b:7b:5a:f3:cc:e5:61:c6:13:8b:47:c5:a1:17:c0:24:3b:ba:
65:34:45:9e:43:c4:81:0d:59:a2:f4:69:bf:5f:62:ee:c6:b6:
71:9a:4d:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 21:02:25 2025 by rpki-client