Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/UHqjs_yfZAYSFUc_-JTSDScR1_I.roa
File: UHqjs_yfZAYSFUc_-JTSDScR1_I.roa (raw, json)
Hash identifier: oY8FQj+sZ5bk24RjJDraojqywtVH3odomqHlEYqi3dU=
Subject key identifier: 50:7A:A3:B3:FC:9F:64:06:12:15:47:3F:F8:94:D2:0D:27:11:D7:F2
Certificate issuer: /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Certificate serial: 0197CF4E449F315136CD4F8C9110EAE9D26D
Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/UHqjs_yfZAYSFUc_-JTSDScR1_I.roa
Signing time: Thu 03 Jul 2025 08:01:42 +0000
ROA not before: Thu 03 Jul 2025 08:01:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8737
IP address blocks: 145.78.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cf:4e:44:9f:31:51:36:cd:4f:8c:91:10:ea:e9:d2:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Validity
Not Before: Jul 3 08:01:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=507aa3b3fc9f64061215473ff894d20d2711d7f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b5:41:78:72:47:e2:0e:5e:b8:1f:84:f7:71:
5f:77:12:02:57:f5:27:36:83:f4:6e:33:41:64:1f:
96:b9:b9:27:16:7a:38:32:e0:15:82:f5:fb:92:7b:
33:6d:99:05:f0:1a:81:90:04:0c:a2:a7:0a:cb:92:
75:b5:a9:68:ee:29:08:8f:a1:35:bd:b4:d3:8d:d9:
13:15:84:4e:3c:40:2a:e6:3f:16:a0:b9:81:f1:10:
70:84:3b:7d:bc:9c:ae:55:0f:16:c3:eb:2d:85:f3:
14:3a:00:07:88:d3:0f:d8:5d:62:40:17:e8:28:6e:
8a:9a:12:64:47:83:5e:14:30:f1:8e:32:07:c1:7c:
4b:a4:33:c7:71:d0:e3:47:4d:4b:36:4a:32:cc:a4:
d3:46:9f:ba:8a:55:80:63:e9:b6:84:78:63:93:fe:
d1:5b:42:bb:c5:d2:de:92:fe:1b:56:d8:3f:35:ef:
37:eb:5f:96:36:c1:c9:27:b9:1e:7f:6a:f5:5b:f4:
97:58:08:2f:5e:2b:2c:48:e2:29:7f:f1:e5:fd:57:
22:bb:99:3d:0b:0d:f5:14:6f:fb:09:2f:81:8d:f4:
1b:c9:42:78:8f:dd:5d:e8:e8:96:50:82:2c:e7:30:
3f:c8:00:58:67:86:42:1f:50:2c:65:59:c2:2d:b0:
c8:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:7A:A3:B3:FC:9F:64:06:12:15:47:3F:F8:94:D2:0D:27:11:D7:F2
X509v3 Authority Key Identifier:
keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/UHqjs_yfZAYSFUc_-JTSDScR1_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.78.28.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:ee:9b:28:44:e2:ce:b8:29:14:b0:1f:d0:68:76:ea:1f:97:
2f:8f:2d:24:84:22:76:35:f7:ee:ea:3e:6b:48:97:e1:6e:01:
95:78:60:cd:02:1e:17:4b:cf:f3:1c:1f:fd:ec:2c:ad:59:90:
44:70:d2:3e:49:4a:c0:96:fa:96:2a:ec:36:d2:a3:ff:4a:60:
9f:b1:5f:48:34:4c:0c:f1:88:e5:01:47:34:9a:36:56:f1:9f:
4f:81:f1:f6:db:42:64:30:da:75:de:25:3c:3f:ae:b4:68:d4:
be:5c:be:fc:82:e2:28:34:f5:12:f4:bf:05:7f:ef:b7:8c:12:
4b:a2:9b:de:00:bc:35:5b:38:64:d8:7e:57:e8:85:33:4f:52:
65:02:05:08:78:c9:c3:51:d8:26:05:f4:a9:8c:e4:0e:a3:81:
83:df:2c:11:89:54:99:3c:de:b0:18:de:c0:b5:7e:d5:12:93:
4f:95:ba:6f:8b:8b:fc:a0:23:6f:3a:4a:37:fc:c7:38:45:cc:
44:b5:27:a9:c4:de:cb:c3:60:a9:6c:a9:3b:96:16:3c:04:ee:
7a:1f:ef:a7:fe:0f:ef:cd:4e:4e:70:92:b3:5b:97:fd:ec:f4:
ed:10:4d:09:ab:5b:e5:ee:2d:91:71:6d:b4:96:80:1a:4f:fd:
80:ca:d6:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 13:01:40 2025 by rpki-client