Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/rUMG6_YUV9Kmnpwq0G1k_OVrago.roa
File: rUMG6_YUV9Kmnpwq0G1k_OVrago.roa (raw, json)
Hash identifier: AjxBsOVclOWcJ5FeutBbN2YA3ybu29Q3Qe9JK4k72kk=
Subject key identifier: AD:43:06:EB:F6:14:57:D2:A6:9E:9C:2A:D0:6D:64:FC:E5:6B:6A:0A
Certificate issuer: /CN=6991c56f11a7171c6153239769f557beba10182d
Certificate serial: 01982A1D1596C38B9AB682264DB6F4B90439
Authority key identifier: 69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/rUMG6_YUV9Kmnpwq0G1k_OVrago.roa
Signing time: Sun 20 Jul 2025 23:13:25 +0000
ROA not before: Sun 20 Jul 2025 23:13:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213702
IP address blocks: 95.164.12.0/24 maxlen: 24
95.164.53.0/24 maxlen: 24
95.164.55.0/24 maxlen: 24
95.164.123.0/24 maxlen: 24
95.164.250.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 07:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:2a:1d:15:96:c3:8b:9a:b6:82:26:4d:b6:f4:b9:04:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6991c56f11a7171c6153239769f557beba10182d
Validity
Not Before: Jul 20 23:13:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ad4306ebf61457d2a69e9c2ad06d64fce56b6a0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f7:96:ec:44:67:4c:c2:06:da:36:39:6c:9d:
82:e7:5e:b9:af:10:19:e9:e2:3e:9b:0b:10:79:8f:
9b:00:d2:cc:9d:cc:7d:a7:13:c0:5d:8a:b8:22:11:
24:80:eb:5c:fb:16:5a:bb:53:6f:8e:db:16:dd:7a:
73:a4:8a:68:93:c9:be:e0:dd:5a:f9:52:24:0d:83:
75:7b:84:27:86:58:9a:2d:f2:ed:0a:4e:31:33:de:
45:3e:49:06:a3:b7:83:c4:7e:92:9a:24:29:57:1a:
fa:84:02:1d:fd:92:8f:4d:aa:cf:ce:47:37:62:d3:
3e:6f:de:f3:37:01:52:53:93:ba:dd:cb:cc:1f:97:
67:39:92:06:2b:df:ad:9f:f2:2d:e0:7f:47:f2:23:
04:c9:d9:46:69:df:a9:3a:6e:a5:c4:2d:10:f3:3f:
a4:de:06:99:2e:9c:0d:2d:0f:cf:5b:81:c3:28:04:
9a:00:d9:be:fb:64:06:da:76:fb:e5:fd:70:19:15:
9a:0c:16:ec:9f:26:37:51:dc:a0:60:49:ce:0b:2a:
d9:71:a7:27:cb:ed:38:25:f1:01:2a:f4:a4:17:0a:
25:39:ae:68:ce:90:5b:0d:57:97:c6:c6:5e:5f:35:
33:b1:f9:dc:d6:4a:1f:1b:78:97:a5:75:4d:51:af:
4d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:43:06:EB:F6:14:57:D2:A6:9E:9C:2A:D0:6D:64:FC:E5:6B:6A:0A
X509v3 Authority Key Identifier:
keyid:69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/rUMG6_YUV9Kmnpwq0G1k_OVrago.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.164.12.0/24
95.164.53.0/24
95.164.55.0/24
95.164.123.0/24
95.164.250.0/23
Signature Algorithm: sha256WithRSAEncryption
0c:9c:48:54:f7:41:6b:bd:16:3d:8f:5e:c0:81:ef:97:d4:28:
5e:b2:45:40:67:40:87:f2:ce:6d:d0:25:f8:32:39:c8:d4:3e:
4d:a1:70:54:aa:99:5f:48:4b:a6:fd:af:ac:7c:b6:1c:75:67:
4c:4c:9e:cc:68:0e:e7:2e:6c:5b:39:21:90:e1:c5:47:12:bc:
2f:32:c4:07:ba:ba:b5:88:3f:43:bf:35:7a:98:67:7a:3e:3d:
a3:28:86:b5:4b:eb:84:00:0d:b9:67:28:ab:f3:7f:df:50:cf:
51:07:05:59:71:21:d5:4d:5c:d1:39:be:b7:50:35:36:9d:fd:
1b:11:20:ef:e2:fb:bd:43:36:8e:65:c5:8a:1b:78:e6:0a:67:
b6:fa:7c:ef:27:c4:70:78:60:67:83:6e:52:c8:32:a9:ff:db:
3c:c3:b9:8e:37:91:bc:8f:5f:92:54:33:f3:e7:fd:bd:f1:53:
7d:d3:9a:48:40:57:68:11:e0:b2:a6:0c:70:95:3f:50:d5:fa:
7b:b8:4d:43:cb:7b:bc:e4:c5:ec:db:3c:10:e6:25:52:19:82:
3e:58:d3:21:37:9e:b6:9a:83:af:48:a1:ea:7d:1e:bd:d6:6e:
2c:51:6e:65:ad:ff:da:c7:d7:2f:95:ea:f6:06:2f:76:9a:46:
94:a3:bd:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 13:31:58 2025 by rpki-client