Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/uTvpwRtnh2RZ0zdEa4-XufQf99I.roa
File: uTvpwRtnh2RZ0zdEa4-XufQf99I.roa (raw, json)
Hash identifier: 3DE2jlKHXiRO8HKkM7rg0LAG01decfDpOM8umxeAcJU=
Subject key identifier: B9:3B:E9:C1:1B:67:87:64:59:D3:37:44:6B:8F:97:B9:F4:1F:F7:D2
Certificate issuer: /CN=0e75fb4f52a829d136e29a9a025c636d19ae328e
Certificate serial: 01985C4E7B9C28CA74C1ADC6C76D8CC270C0
Authority key identifier: 0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/uTvpwRtnh2RZ0zdEa4-XufQf99I.roa
Signing time: Wed 30 Jul 2025 17:08:23 +0000
ROA not before: Wed 30 Jul 2025 17:08:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 33852
IP address blocks: 83.139.0.0/24 maxlen: 24
83.139.1.0/24 maxlen: 24
83.139.2.0/24 maxlen: 24
83.139.4.0/24 maxlen: 24
83.139.5.0/24 maxlen: 24
83.139.6.0/23 maxlen: 23
83.139.8.0/21 maxlen: 21
83.139.8.0/24 maxlen: 24
83.139.9.0/24 maxlen: 24
83.139.10.0/24 maxlen: 24
83.139.11.0/24 maxlen: 24
83.139.12.0/24 maxlen: 24
83.139.13.0/24 maxlen: 24
83.139.14.0/24 maxlen: 24
83.139.15.0/24 maxlen: 24
83.139.16.0/24 maxlen: 24
83.139.17.0/24 maxlen: 24
83.139.18.0/24 maxlen: 24
83.139.20.0/24 maxlen: 24
83.139.36.0/22 maxlen: 22
83.139.39.0/24 maxlen: 24
2a01:4000::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 02 Aug 2025 12:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5c:4e:7b:9c:28:ca:74:c1:ad:c6:c7:6d:8c:c2:70:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e75fb4f52a829d136e29a9a025c636d19ae328e
Validity
Not Before: Jul 30 17:08:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b93be9c11b67876459d337446b8f97b9f41ff7d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b2:94:8f:fa:43:27:60:ac:2c:58:7f:d0:8a:
05:75:5c:6c:f6:89:84:87:8a:f6:14:da:2c:53:2e:
11:dd:9e:0c:e1:39:93:15:61:fc:bb:a4:45:99:f0:
6c:31:d6:f7:2b:8e:49:db:96:09:c8:88:82:7a:64:
86:12:7d:c6:e4:aa:58:a3:87:e9:0b:10:8d:24:45:
a9:74:bd:a5:52:a3:26:88:f9:31:83:01:ca:cf:ac:
44:f4:c8:40:e5:4e:7d:7f:c8:39:85:84:37:45:2f:
35:18:a0:f6:b2:0e:d7:42:7d:44:23:1c:49:88:4a:
a9:d1:94:c4:43:d3:00:fb:c3:db:fc:d7:05:9b:2c:
6c:44:a7:eb:92:bd:54:4d:20:cb:7d:21:26:23:ca:
79:d0:2f:03:bd:66:dc:4e:ca:ba:0e:8b:ec:7b:3e:
c2:e2:14:ec:77:27:35:69:d5:04:9c:0b:af:23:38:
c2:5d:6b:f5:9b:98:74:ef:b0:94:c8:2a:bb:44:69:
69:22:87:cf:d1:a7:3b:06:1d:cf:fd:36:ee:6c:19:
0d:d3:84:03:ab:cd:30:6c:e6:7c:78:c0:1e:dc:2c:
e4:97:ab:df:b3:49:13:c2:82:3e:68:f9:10:63:05:
3a:dd:29:02:24:b2:92:39:94:7a:2f:fd:78:cc:0a:
7d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:3B:E9:C1:1B:67:87:64:59:D3:37:44:6B:8F:97:B9:F4:1F:F7:D2
X509v3 Authority Key Identifier:
keyid:0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/uTvpwRtnh2RZ0zdEa4-XufQf99I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.139.0.0-83.139.2.255
83.139.4.0-83.139.18.255
83.139.20.0/24
83.139.36.0/22
IPv6:
2a01:4000::/32
Signature Algorithm: sha256WithRSAEncryption
61:27:7d:0b:5b:37:13:10:ae:38:f0:d8:86:a6:c0:79:32:c7:
dd:b0:47:4b:e5:83:41:17:cc:c4:09:a8:b8:51:a7:85:9d:15:
3b:dd:c7:78:07:08:13:0b:c4:ff:d0:37:fa:eb:da:db:ef:3f:
d8:56:19:a9:73:ae:be:02:5e:db:75:20:5a:ec:29:dd:3f:12:
ba:2c:43:75:59:6b:27:c4:95:21:0b:c0:c7:55:8a:ae:58:62:
35:3a:3c:8c:28:b3:53:44:7f:cb:15:49:d2:dc:ec:a8:68:40:
7b:20:ec:c0:25:43:f9:0f:1d:ee:77:80:84:55:6c:fb:aa:d4:
d7:c1:0a:e5:50:36:cf:62:0c:b4:1f:e4:e8:54:18:5b:fb:a0:
e2:33:64:99:8f:1d:66:7d:e3:ef:86:80:7b:50:fa:9c:19:2e:
00:b9:b0:6d:58:28:bd:74:fa:34:19:cb:e7:c4:27:af:b0:cb:
36:e5:55:ae:6f:84:f8:e7:5b:00:f4:74:0f:66:20:c0:b2:35:
73:c7:28:33:4b:be:7d:17:37:ee:24:cd:e0:4e:2b:15:11:1a:
93:45:de:22:ab:02:0a:cf:3f:b8:e8:14:38:fd:e4:59:fb:3b:
c3:39:a9:15:cf:a8:7a:95:8e:90:77:96:95:1a:24:aa:71:66:
5e:bd:1a:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 1 18:12:24 2025 by rpki-client