Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/4c849f-8650-4a1e-be59-1e63bbd70d96/1/UTQYRCNOm3VBuYeHl9ZTyAq17o0.roa
File: UTQYRCNOm3VBuYeHl9ZTyAq17o0.roa (raw, json)
Hash identifier: ui16kZERZdp4gocWkTM0v5MtuCmUvQ5EbzfrDpvuRz8=
Subject key identifier: 51:34:18:44:23:4E:9B:75:41:B9:87:87:97:D6:53:C8:0A:B5:EE:8D
Certificate issuer: /CN=c01399b467c906662de00ec766cc7e000eaec27b
Certificate serial: 01983CAB9C1D9F9BE3BD7B0BA1347A771670
Authority key identifier: C0:13:99:B4:67:C9:06:66:2D:E0:0E:C7:66:CC:7E:00:0E:AE:C2:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wBOZtGfJBmYt4A7HZsx-AA6uwns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/4c849f-8650-4a1e-be59-1e63bbd70d96/1/UTQYRCNOm3VBuYeHl9ZTyAq17o0.roa
Signing time: Thu 24 Jul 2025 13:42:16 +0000
ROA not before: Thu 24 Jul 2025 13:42:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30781
IP address blocks: 91.216.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/4c849f-8650-4a1e-be59-1e63bbd70d96/1/wBOZtGfJBmYt4A7HZsx-AA6uwns.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/4c849f-8650-4a1e-be59-1e63bbd70d96/1/wBOZtGfJBmYt4A7HZsx-AA6uwns.mft
rsync://rpki.ripe.net/repository/DEFAULT/wBOZtGfJBmYt4A7HZsx-AA6uwns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3c:ab:9c:1d:9f:9b:e3:bd:7b:0b:a1:34:7a:77:16:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c01399b467c906662de00ec766cc7e000eaec27b
Validity
Not Before: Jul 24 13:42:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=51341844234e9b7541b9878797d653c80ab5ee8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8d:9e:76:95:6e:2d:4e:88:86:c5:03:df:0b:
7e:31:4e:6c:a9:67:67:0d:50:32:42:61:79:c2:a3:
ef:39:01:dc:50:16:17:53:21:9a:c0:8a:b8:66:d1:
e4:7b:c2:29:e1:8b:d2:e8:54:8a:80:fa:f9:94:f1:
23:dc:de:6b:c4:c7:c3:a5:68:c5:9a:55:a0:18:70:
4c:cf:60:f2:2a:73:79:6b:12:61:73:6d:e4:83:45:
07:c8:70:6d:2c:99:23:4f:ed:ec:bf:fe:2e:b9:31:
72:0e:c8:b5:67:dd:88:76:6c:e7:fb:91:e3:52:7e:
95:11:50:19:2a:70:b2:30:0a:45:fb:c1:fc:fc:a9:
71:9f:e5:e8:69:73:72:4c:54:e8:17:0b:73:59:d3:
ca:ec:5d:9b:12:23:54:06:b2:cc:ab:ee:1f:85:06:
f0:0b:9d:4b:a3:5b:aa:17:d1:6e:6f:0e:8c:13:82:
e4:60:93:8b:be:22:b1:f5:19:16:3c:79:22:02:4f:
85:f4:07:6d:5e:55:90:bf:82:0d:d3:46:d0:10:08:
1f:a8:f6:b3:4a:fb:96:12:7f:5f:81:54:29:d8:6e:
1b:05:d5:1f:a7:10:8b:d9:1e:e7:59:c6:c6:be:47:
26:7d:7b:db:b3:33:0d:8d:72:db:d4:dc:28:33:d2:
20:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:34:18:44:23:4E:9B:75:41:B9:87:87:97:D6:53:C8:0A:B5:EE:8D
X509v3 Authority Key Identifier:
keyid:C0:13:99:B4:67:C9:06:66:2D:E0:0E:C7:66:CC:7E:00:0E:AE:C2:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBOZtGfJBmYt4A7HZsx-AA6uwns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/4c849f-8650-4a1e-be59-1e63bbd70d96/1/UTQYRCNOm3VBuYeHl9ZTyAq17o0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/4c849f-8650-4a1e-be59-1e63bbd70d96/1/wBOZtGfJBmYt4A7HZsx-AA6uwns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.22.0/24
Signature Algorithm: sha256WithRSAEncryption
87:71:7f:d5:77:9f:96:bc:6e:29:10:cb:9e:1b:d4:ba:b2:8a:
50:80:ba:e9:9a:e7:37:19:77:a0:a4:8f:fc:81:4a:1e:89:8d:
71:20:73:1c:98:e9:1a:c7:e1:ed:9e:bf:bd:f2:82:f0:9f:a1:
6a:80:ce:4c:65:38:ce:d3:b5:66:8c:06:92:71:d1:e9:c3:6b:
7b:1a:a5:d1:83:29:d9:29:01:01:c6:13:79:a0:5f:e9:6d:58:
0f:46:ac:e2:7b:af:be:cd:11:ff:df:e6:1c:32:3d:e7:70:0b:
17:25:ef:ed:aa:69:b2:ad:d3:8d:91:5c:55:ba:38:55:9b:ae:
d4:cc:f5:a7:fb:df:31:db:21:92:4c:df:95:f8:1a:a3:87:56:
25:30:6d:9a:d4:61:a1:aa:42:f2:e2:d2:7d:f5:50:c4:11:4d:
6b:eb:00:8b:d4:6a:a2:c5:d5:32:ad:40:28:8e:7e:d6:59:e7:
4b:05:a0:d6:65:88:af:52:fb:60:02:54:ab:fb:64:27:cc:b5:
d5:62:04:3f:83:2e:57:ab:20:52:08:fe:99:d3:a6:4d:8b:65:
d6:27:0d:1e:04:e7:6a:bf:fb:c8:e5:b0:63:b3:e0:c2:f4:7b:
be:dd:d5:43:af:db:e6:ff:72:4a:cb:c3:70:1e:0d:23:f9:07:
d1:bc:97:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 03:29:17 2025 by rpki-client