Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/b278df-ed37-4de7-a675-107a8d85bd30/1/UOP1lIUHKVkAuGuqRok1nHBp9I0.roa
File: UOP1lIUHKVkAuGuqRok1nHBp9I0.roa (raw, json)
Hash identifier: saB8XTBnDicn7XtKwdtZ5Dgmto1M/0RTX2q+iuZXS38=
Subject key identifier: 50:E3:F5:94:85:07:29:59:00:B8:6B:AA:46:89:35:9C:70:69:F4:8D
Certificate issuer: /CN=ed5a6ba2d2248bc4782ac0fdb3c64b946640b09c
Certificate serial: 0197D11AC7AD5098F3A8BEDA4C85A99BA0FA
Authority key identifier: ED:5A:6B:A2:D2:24:8B:C4:78:2A:C0:FD:B3:C6:4B:94:66:40:B0:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7VprotIki8R4KsD9s8ZLlGZAsJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/b278df-ed37-4de7-a675-107a8d85bd30/1/UOP1lIUHKVkAuGuqRok1nHBp9I0.roa
Signing time: Thu 03 Jul 2025 16:24:42 +0000
ROA not before: Thu 03 Jul 2025 16:24:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 84.38.247.0/24 maxlen: 24
85.193.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/b278df-ed37-4de7-a675-107a8d85bd30/1/7VprotIki8R4KsD9s8ZLlGZAsJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/b278df-ed37-4de7-a675-107a8d85bd30/1/7VprotIki8R4KsD9s8ZLlGZAsJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7VprotIki8R4KsD9s8ZLlGZAsJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d1:1a:c7:ad:50:98:f3:a8:be:da:4c:85:a9:9b:a0:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed5a6ba2d2248bc4782ac0fdb3c64b946640b09c
Validity
Not Before: Jul 3 16:24:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=50e3f5948507295900b86baa4689359c7069f48d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b6:a0:7d:ad:c6:69:51:da:03:6a:20:9c:53:
21:7e:ba:45:24:82:4c:5f:0f:77:f6:e5:66:68:0d:
bd:94:2d:79:dd:16:04:48:96:d2:cf:b5:59:dc:d3:
b7:4e:e5:bd:18:88:26:ec:ed:bc:65:62:d2:e8:ea:
e5:54:20:83:9b:32:17:4b:88:68:02:b6:78:46:b4:
a8:6d:04:15:56:e2:b5:15:88:1c:28:a8:2e:36:48:
60:a3:3d:14:2e:97:2e:86:a1:10:2b:f0:e6:9a:f3:
59:33:4a:72:e7:2c:43:d2:3a:85:18:f9:30:53:e9:
09:9f:43:d2:8f:d1:3c:e6:93:24:bb:6d:a7:00:7d:
ce:4c:57:46:4d:07:c8:9d:ec:8d:e0:be:f8:9e:ac:
e3:0e:6b:f6:a0:0f:88:98:4a:fe:15:ff:48:8f:85:
c1:74:bb:98:4f:02:99:30:0a:b7:e5:9c:c1:03:ef:
6d:ff:75:c3:7e:a8:b8:6a:fe:d3:5f:db:2f:ed:95:
4a:05:ff:75:6d:06:c9:32:28:be:8d:f2:91:48:8b:
2c:77:57:3d:35:6b:1e:f0:0c:cd:29:5a:89:f5:3a:
57:39:22:e9:46:ab:83:a5:9b:12:e2:31:bc:32:0b:
85:be:a9:37:ae:72:16:2e:16:0b:c5:71:1f:ce:ee:
b7:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:E3:F5:94:85:07:29:59:00:B8:6B:AA:46:89:35:9C:70:69:F4:8D
X509v3 Authority Key Identifier:
keyid:ED:5A:6B:A2:D2:24:8B:C4:78:2A:C0:FD:B3:C6:4B:94:66:40:B0:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7VprotIki8R4KsD9s8ZLlGZAsJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/b278df-ed37-4de7-a675-107a8d85bd30/1/UOP1lIUHKVkAuGuqRok1nHBp9I0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/b278df-ed37-4de7-a675-107a8d85bd30/1/7VprotIki8R4KsD9s8ZLlGZAsJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.38.247.0/24
85.193.78.0/24
Signature Algorithm: sha256WithRSAEncryption
14:db:6b:9f:7e:88:5c:aa:73:7e:a9:16:85:b6:e8:ce:a3:f0:
0e:f4:76:77:50:cd:9e:7c:c1:2a:5b:b2:f4:bb:ab:b0:4e:59:
45:85:dc:6e:41:77:62:0f:99:10:5b:da:d4:3d:26:63:13:7f:
ac:1f:2e:29:db:88:d3:ff:8b:ea:1a:6c:ef:bf:fb:b4:7c:6d:
f6:7b:f8:5b:11:cf:78:f6:71:b2:9d:dc:7f:85:5e:46:8d:31:
38:73:2b:d3:d8:c4:14:c6:81:be:5f:cd:ca:71:4b:3e:97:b8:
7c:bf:e0:76:3a:07:82:dc:bb:05:c2:64:d1:63:d8:e2:00:d6:
0c:ac:4c:45:64:95:35:dc:40:93:d7:b1:bc:6c:98:00:35:ef:
5f:0b:73:dd:31:a9:c1:bb:20:68:fd:c9:89:e8:f7:d5:1e:ea:
2b:d8:31:6e:17:9f:11:5c:b5:d5:54:43:f8:ab:a4:6d:a4:86:
f2:a5:31:75:a5:b2:c0:42:62:ea:87:cf:7a:53:17:6b:3a:26:
a3:f1:29:5e:61:90:3a:47:c0:74:ac:99:9e:92:03:e7:55:7c:
25:65:f4:07:02:0c:07:c2:17:b2:8c:6f:67:27:eb:77:8d:ab:
99:f5:c1:34:03:7d:c8:de:c0:ff:f1:45:4b:13:e7:5c:96:3a:
92:99:d6:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:35:55 2025 by rpki-client