Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/952093-6b71-4379-a5ef-0d2c2fe49fda/1/dUxtdXIDzjyUlYOtBFzm-wQHLuM.roa
File: dUxtdXIDzjyUlYOtBFzm-wQHLuM.roa (raw, json)
Hash identifier: lU+saX5Y8NpUNdHr5ny3vDxig5SKi8AIgZItEb0hTg4=
Subject key identifier: 75:4C:6D:75:72:03:CE:3C:94:95:83:AD:04:5C:E6:FB:04:07:2E:E3
Certificate issuer: /CN=52b4a68f6aff7e0680b6f154430cee74a503b668
Certificate serial: 0197F936F970C54E137F483A4D8A0AD9B4F5
Authority key identifier: 52:B4:A6:8F:6A:FF:7E:06:80:B6:F1:54:43:0C:EE:74:A5:03:B6:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UrSmj2r_fgaAtvFUQwzudKUDtmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/952093-6b71-4379-a5ef-0d2c2fe49fda/1/dUxtdXIDzjyUlYOtBFzm-wQHLuM.roa
Signing time: Fri 11 Jul 2025 11:20:18 +0000
ROA not before: Fri 11 Jul 2025 11:20:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60631
IP address blocks: 91.212.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/952093-6b71-4379-a5ef-0d2c2fe49fda/1/UrSmj2r_fgaAtvFUQwzudKUDtmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/952093-6b71-4379-a5ef-0d2c2fe49fda/1/UrSmj2r_fgaAtvFUQwzudKUDtmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/UrSmj2r_fgaAtvFUQwzudKUDtmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 11:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:f9:36:f9:70:c5:4e:13:7f:48:3a:4d:8a:0a:d9:b4:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52b4a68f6aff7e0680b6f154430cee74a503b668
Validity
Not Before: Jul 11 11:20:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=754c6d757203ce3c949583ad045ce6fb04072ee3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:fd:2d:f6:f4:0c:f3:61:42:ca:70:2d:9a:9e:
f2:07:f7:24:fb:d0:32:4a:46:51:48:91:1a:b6:55:
52:c1:6f:ad:27:81:df:32:54:c5:fc:d3:a4:04:c5:
b1:63:7a:f5:fd:a3:6e:ef:75:46:6a:03:79:b1:cf:
ce:02:b9:2e:14:6d:b6:bd:b0:7f:e5:a1:0f:f7:c7:
00:27:08:7b:98:ab:6c:2f:35:ae:3e:48:8a:c1:81:
73:76:3e:45:37:bf:ca:48:58:81:0c:05:7b:06:94:
72:dc:ad:c0:1b:d0:63:e6:48:91:8a:98:e5:01:2d:
90:4e:9b:d2:59:77:44:40:27:39:0a:67:d9:b7:8e:
1f:24:88:e5:32:d7:e7:83:77:b6:92:89:a3:97:3f:
f8:a6:2e:f0:1b:39:49:b4:21:ec:ac:9a:e2:87:f0:
20:ee:9c:ee:a1:b7:6a:ad:de:bb:b8:bb:4b:bb:01:
f8:3d:e7:28:b6:01:34:25:35:f7:04:56:0c:63:6c:
57:e1:d9:03:fe:96:5b:e7:e8:50:c4:2e:f5:0a:08:
23:4a:5a:5d:ed:7f:a0:6a:14:f2:fa:3a:80:ee:11:
53:48:cc:da:61:c0:f1:9e:7b:e0:66:95:f7:90:59:
77:21:e3:b4:2a:68:c2:ca:2c:71:5b:6d:e2:cb:1e:
52:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:4C:6D:75:72:03:CE:3C:94:95:83:AD:04:5C:E6:FB:04:07:2E:E3
X509v3 Authority Key Identifier:
keyid:52:B4:A6:8F:6A:FF:7E:06:80:B6:F1:54:43:0C:EE:74:A5:03:B6:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UrSmj2r_fgaAtvFUQwzudKUDtmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/952093-6b71-4379-a5ef-0d2c2fe49fda/1/dUxtdXIDzjyUlYOtBFzm-wQHLuM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/952093-6b71-4379-a5ef-0d2c2fe49fda/1/UrSmj2r_fgaAtvFUQwzudKUDtmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.174.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:84:51:19:85:fb:9e:35:03:13:cf:5a:78:4f:2e:3c:b7:f8:
f5:b7:d8:c5:46:51:d7:c1:6b:cf:32:09:ab:ca:19:e8:c9:9a:
a8:17:05:52:d5:6c:6c:28:a2:92:02:24:6f:00:0d:90:41:c1:
14:5f:16:3d:0e:c0:d5:8c:43:1f:ac:9e:ec:3e:f3:e8:ce:34:
d2:4a:e5:9f:5e:5a:c2:92:e7:9b:37:f1:32:4b:7f:7a:54:c5:
2a:88:e5:ba:96:40:90:43:47:6c:5b:33:e0:0b:08:d5:f0:6e:
c5:ec:f5:9e:17:fc:da:26:9b:79:23:ec:dc:ed:85:89:7f:16:
f3:75:0a:fa:e1:15:aa:6a:91:47:f0:b7:fb:82:6b:8a:d0:56:
2c:94:c6:1b:2e:90:d9:c3:64:ed:13:75:4f:b0:98:00:66:d5:
a0:72:52:80:19:63:d4:bf:4b:0d:13:41:a1:a4:39:a8:b3:b3:
f8:56:56:28:85:1b:1e:0b:d8:1b:44:ad:62:e1:9d:3b:0a:c7:
19:22:48:1b:71:d8:f0:53:a4:f4:89:95:2f:b7:92:af:e1:ad:
3a:7d:37:da:66:61:7b:b6:53:77:64:65:bc:2d:5c:3c:32:de:
fe:28:c7:6b:59:39:cf:e3:ed:79:0e:17:83:90:d2:c8:d8:4a:
cb:87:ce:46
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZf5NvlwxU4Tf0g6TYoK2bT1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyYjRhNjhmNmFmZjdlMDY4MGI2ZjE1NDQzMGNlZTc0YTUw
M2I2NjgwHhcNMjUwNzExMTEyMDE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NTRjNmQ3NTcyMDNjZTNjOTQ5NTgzYWQwNDVjZTZmYjA0MDcyZWUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0P0t9vQM82FCynAtmp7yB/ck+9Ay
SkZRSJEatlVSwW+tJ4HfMlTF/NOkBMWxY3r1/aNu73VGagN5sc/OArkuFG22vbB/
5aEP98cAJwh7mKtsLzWuPkiKwYFzdj5FN7/KSFiBDAV7BpRy3K3AG9Bj5kiRipjl
AS2QTpvSWXdEQCc5CmfZt44fJIjlMtfng3e2komjlz/4pi7wGzlJtCHsrJrih/Ag
7pzuobdqrd67uLtLuwH4PecotgE0JTX3BFYMY2xX4dkD/pZb5+hQxC71CggjSlpd
7X+gahTy+jqA7hFTSMzaYcDxnnvgZpX3kFl3IeO0KmjCyixxW23iyx5SOwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHVMbXVyA848lJWDrQRc5vsEBy7jMB8GA1UdIwQY
MBaAFFK0po9q/34GgLbxVEMM7nSlA7ZoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXJTbWoycl9mZ2FBdHZGVVF3enVkS1VEdG1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS85NTIwOTMtNmI3MS00Mzc5LWE1ZWYt
MGQyYzJmZTQ5ZmRhLzEvZFV4dGRYSUR6anlVbFlPdEJGem0td1FITHVNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS85NTIwOTMtNmI3MS00Mzc5LWE1ZWYtMGQyYzJmZTQ5ZmRh
LzEvVXJTbWoycl9mZ2FBdHZGVVF3enVkS1VEdG1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9SuMA0G
CSqGSIb3DQEBCwUAA4IBAQBfhFEZhfueNQMTz1p4Ty48t/j1t9jFRlHXwWvPMgmr
yhnoyZqoFwVS1WxsKKKSAiRvAA2QQcEUXxY9DsDVjEMfrJ7sPvPozjTSSuWfXlrC
kuebN/EyS396VMUqiOW6lkCQQ0dsWzPgCwjV8G7F7PWeF/zaJpt5I+zc7YWJfxbz
dQr64RWqapFH8Lf7gmuK0FYslMYbLpDZw2TtE3VPsJgAZtWgclKAGWPUv0sNE0Gh
pDmos7P4VlYohRseC9gbRK1i4Z07CscZIkgbcdjwU6T0iZUvt5Kv4a06fTfaZmF7
tlN3ZGW8LVw8Mt7+KMdrWTnP4+15DheDkNLI2ErLh85G
-----END CERTIFICATE-----
Generated at Sun Jul 20 20:39:30 2025 by rpki-client