Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/UUvNJu6FFXSLqc4fRNFmfzX6do4.roa
File: UUvNJu6FFXSLqc4fRNFmfzX6do4.roa (raw, json)
Hash identifier: ogf1Pk59UDa6YNqV7rBOlEspQEs/ksi9KO4GlYT9vmA=
Subject key identifier: 51:4B:CD:26:EE:85:15:74:8B:A9:CE:1F:44:D1:66:7F:35:FA:76:8E
Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839
Certificate serial: 0197E96DAE7A353BB270C439BABCF4B52EA1
Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/UUvNJu6FFXSLqc4fRNFmfzX6do4.roa
Signing time: Tue 08 Jul 2025 09:46:08 +0000
ROA not before: Tue 08 Jul 2025 09:46:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215930
IP address blocks: 185.37.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:e9:6d:ae:7a:35:3b:b2:70:c4:39:ba:bc:f4:b5:2e:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839
Validity
Not Before: Jul 8 09:46:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=514bcd26ee8515748ba9ce1f44d1667f35fa768e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:19:76:8b:6f:0a:7d:02:7d:cb:a0:d0:ca:ae:
e6:a5:77:0b:4d:98:4c:9d:db:f3:6a:11:1d:99:9c:
0c:27:5a:6d:08:5f:16:ff:4b:34:2d:b4:28:97:f1:
b2:fd:b4:65:39:03:88:10:bf:bf:b4:16:38:72:a0:
3b:ca:db:63:b9:31:1e:10:7f:88:41:40:39:63:23:
bb:ef:59:14:77:00:cb:d9:38:aa:59:ca:4e:0f:fc:
7c:72:ca:b0:2f:a9:4f:f6:49:3b:3e:72:2b:45:28:
6e:73:b8:ca:ae:bc:a1:06:18:51:fa:1b:33:1e:f8:
08:2e:3f:51:7c:3d:e4:9a:27:cb:5e:b9:ae:30:14:
4c:ad:d5:97:58:e6:52:01:fe:74:97:0a:b0:1b:f5:
d0:d6:e4:0c:ac:0a:92:80:57:88:7c:71:ff:c9:60:
dc:f6:bb:a0:01:70:c5:d0:35:93:d9:1e:9b:60:d9:
3c:21:f0:ac:0e:0a:7f:f6:e5:2f:c3:f8:e3:1b:62:
0b:7f:33:86:88:ef:37:0d:30:f4:e3:53:54:b6:71:
14:99:3b:94:91:43:d1:3d:f6:ee:aa:98:f0:0d:c9:
ba:17:87:01:7a:af:d5:18:bf:03:1e:a8:6e:b4:7e:
d3:37:14:6f:56:8e:ba:d4:17:c7:95:5c:ab:f8:e9:
e0:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:4B:CD:26:EE:85:15:74:8B:A9:CE:1F:44:D1:66:7F:35:FA:76:8E
X509v3 Authority Key Identifier:
keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/UUvNJu6FFXSLqc4fRNFmfzX6do4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.37.195.0/24
Signature Algorithm: sha256WithRSAEncryption
04:28:92:8b:40:26:c6:9c:c8:85:59:90:bd:77:c3:b9:0f:87:
d7:c9:db:89:85:f8:89:dc:35:ec:7a:93:a8:e1:26:b2:95:0e:
22:ae:6b:52:92:d4:ee:e4:6c:c6:65:0e:1f:50:fe:8a:98:18:
f8:a9:2e:cf:65:ca:2b:40:bb:54:54:4b:22:9a:bb:64:24:31:
c6:6a:bb:0b:4d:b7:ce:01:d0:d2:68:3a:26:2b:4b:b3:7c:ef:
a2:03:2f:96:41:34:1f:72:80:e3:59:cc:85:52:cd:ec:ab:08:
a9:22:95:b9:a2:2a:aa:6c:2d:69:8b:31:01:13:13:71:25:b8:
6f:23:09:e7:5f:1b:de:78:33:94:73:c5:62:29:14:d1:b3:c7:
a2:79:a9:49:dd:95:d3:cb:42:90:45:fd:c5:08:ca:7c:b2:c9:
18:1a:f8:24:be:2c:08:a5:0d:6b:81:3d:2e:89:c2:53:20:9f:
62:ed:67:12:7c:9c:28:78:87:1d:14:fa:1e:aa:58:ec:36:24:
a6:6e:bd:a8:1c:f6:e2:bb:ea:65:a7:57:3b:8f:bd:73:b1:fc:
01:28:7d:3a:38:54:41:33:b5:b1:80:45:d9:03:98:db:1b:18:
9f:fc:1d:61:b4:03:23:33:9f:22:66:cd:a1:6c:9d:ba:64:23:
80:d2:07:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 02:46:34 2025 by rpki-client