Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/893887-f863-4a8b-bd96-e6958ed5a7a0/1/UzdAI9r8ururR3efFNaAcO55XaM.roa
File: UzdAI9r8ururR3efFNaAcO55XaM.roa (raw, json)
Hash identifier: pCH+pFsUkI5n2Li26SVl8WqYpHuk5K9R9H/mh0OmiJQ=
Subject key identifier: 53:37:40:23:DA:FC:BA:BB:AB:47:77:9F:14:D6:80:70:EE:79:5D:A3
Certificate issuer: /CN=51f83b800bf5d66cc76d0e624847fb668e177c71
Certificate serial: 019734136CBD1AD7AEAD946EA077BBB48CD4
Authority key identifier: 51:F8:3B:80:0B:F5:D6:6C:C7:6D:0E:62:48:47:FB:66:8E:17:7C:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ufg7gAv11mzHbQ5iSEf7Zo4XfHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/893887-f863-4a8b-bd96-e6958ed5a7a0/1/UzdAI9r8ururR3efFNaAcO55XaM.roa
Signing time: Tue 03 Jun 2025 04:36:17 +0000
ROA not before: Tue 03 Jun 2025 04:36:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209569
IP address blocks: 2001:678:dcc::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/893887-f863-4a8b-bd96-e6958ed5a7a0/1/Ufg7gAv11mzHbQ5iSEf7Zo4XfHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/893887-f863-4a8b-bd96-e6958ed5a7a0/1/Ufg7gAv11mzHbQ5iSEf7Zo4XfHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ufg7gAv11mzHbQ5iSEf7Zo4XfHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:34:13:6c:bd:1a:d7:ae:ad:94:6e:a0:77:bb:b4:8c:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51f83b800bf5d66cc76d0e624847fb668e177c71
Validity
Not Before: Jun 3 04:36:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=53374023dafcbabbab47779f14d68070ee795da3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:01:c1:60:36:54:e5:27:28:39:b7:2c:e1:63:
50:b4:be:79:28:d7:ea:ac:3c:ef:3e:ff:51:fe:05:
77:f4:a9:60:df:55:e1:70:fd:4a:4c:fa:8e:21:95:
5d:f5:ba:0d:25:0a:56:80:bd:65:a8:06:67:c5:22:
e9:47:ff:3d:5c:e9:21:95:e5:e3:9e:69:1f:cb:26:
69:2e:61:a6:28:e7:00:b9:de:46:7d:0b:80:54:49:
70:d1:d4:40:11:a1:2d:e9:cd:6d:bc:f3:8f:50:de:
a6:e5:9c:e1:18:98:cc:f8:e8:92:1e:4e:62:0a:2d:
d9:92:1f:1a:ea:37:28:e3:62:d2:4b:c6:68:bc:c5:
57:17:da:e0:e1:80:11:93:e7:a6:79:68:5c:e3:b3:
55:fb:06:f8:6e:e3:09:fd:8c:25:87:c8:11:59:45:
cb:c6:9f:ff:96:f0:a2:e2:77:fe:2b:75:f4:4a:c5:
14:11:fe:e2:81:63:39:4d:a6:79:54:cb:c2:3d:a9:
a5:13:f0:fc:24:be:30:0a:b5:6d:b0:99:c2:d2:29:
18:5f:ac:98:79:7f:65:3f:9f:9b:f6:68:ed:f4:e4:
2f:24:68:c6:43:b2:b9:50:35:f2:7f:f6:f6:21:2d:
72:f6:5b:4c:0d:c0:9e:ae:0c:99:24:d9:e6:ac:67:
00:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:37:40:23:DA:FC:BA:BB:AB:47:77:9F:14:D6:80:70:EE:79:5D:A3
X509v3 Authority Key Identifier:
keyid:51:F8:3B:80:0B:F5:D6:6C:C7:6D:0E:62:48:47:FB:66:8E:17:7C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ufg7gAv11mzHbQ5iSEf7Zo4XfHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/893887-f863-4a8b-bd96-e6958ed5a7a0/1/UzdAI9r8ururR3efFNaAcO55XaM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/893887-f863-4a8b-bd96-e6958ed5a7a0/1/Ufg7gAv11mzHbQ5iSEf7Zo4XfHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:dcc::/48
Signature Algorithm: sha256WithRSAEncryption
07:63:60:89:9a:9e:ec:7a:4b:6e:b5:ff:00:c9:9a:3d:90:45:
c4:21:89:16:77:db:1c:6d:0a:cb:57:27:03:89:71:37:2f:3b:
22:20:44:69:5f:93:53:6a:16:cb:93:80:ae:10:20:82:6a:ba:
91:3b:42:86:7c:bf:61:ed:9f:e3:21:88:a6:36:56:10:7c:96:
ab:4f:33:57:99:96:6c:e1:56:4f:97:ed:93:7a:46:9c:45:02:
7e:26:ba:d9:58:37:e4:eb:bc:df:73:49:50:b8:9b:13:1e:fa:
28:f0:46:bc:61:f6:2e:bf:12:e9:03:28:5f:65:8f:05:78:6f:
8f:61:92:a9:35:e4:91:e6:dd:6c:39:bd:8c:28:75:85:e0:4f:
73:33:40:4f:7f:3f:49:b6:5c:1a:9b:19:11:9a:a3:39:9b:d1:
c0:52:50:f3:83:99:6d:e5:07:c6:07:c6:fb:f1:1f:78:57:bf:
26:6c:7b:2b:3a:be:ac:c1:c4:79:d2:fb:be:dc:1d:be:70:02:
de:0f:87:a5:da:8f:f6:4f:36:28:6c:aa:c7:7b:28:7a:0f:b2:
b9:d8:38:a1:00:13:69:ca:0c:ab:8a:7c:08:5a:49:43:a3:d2:
32:7c:78:95:27:30:6c:02:17:25:26:c8:23:fd:ed:59:82:23:
c5:3b:c6:cc
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZc0E2y9GteurZRuoHe7tIzUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxZjgzYjgwMGJmNWQ2NmNjNzZkMGU2MjQ4NDdmYjY2OGUx
NzdjNzEwHhcNMjUwNjAzMDQzNjE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MzM3NDAyM2RhZmNiYWJiYWI0Nzc3OWYxNGQ2ODA3MGVlNzk1ZGEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4wHBYDZU5ScoObcs4WNQtL55KNfq
rDzvPv9R/gV39Klg31XhcP1KTPqOIZVd9boNJQpWgL1lqAZnxSLpR/89XOkhleXj
nmkfyyZpLmGmKOcAud5GfQuAVElw0dRAEaEt6c1tvPOPUN6m5ZzhGJjM+OiSHk5i
Ci3Zkh8a6jco42LSS8ZovMVXF9rg4YARk+emeWhc47NV+wb4buMJ/Ywlh8gRWUXL
xp//lvCi4nf+K3X0SsUUEf7igWM5TaZ5VMvCPamlE/D8JL4wCrVtsJnC0ikYX6yY
eX9lP5+b9mjt9OQvJGjGQ7K5UDXyf/b2IS1y9ltMDcCergyZJNnmrGcA0wIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFFM3QCPa/Lq7q0d3nxTWgHDueV2jMB8GA1UdIwQY
MBaAFFH4O4AL9dZsx20OYkhH+2aOF3xxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWZnN2dBdjExbXpIYlE1aVNFZjdabzRYZkhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi84OTM4ODctZjg2My00YThiLWJkOTYt
ZTY5NThlZDVhN2EwLzEvVXpkQUk5cjh1cnVyUjNlZkZOYUFjTzU1WGFNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi84OTM4ODctZjg2My00YThiLWJkOTYtZTY5NThlZDVhN2Ew
LzEvVWZnN2dBdjExbXpIYlE1aVNFZjdabzRYZkhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeA3M
MA0GCSqGSIb3DQEBCwUAA4IBAQAHY2CJmp7sektutf8AyZo9kEXEIYkWd9scbQrL
VycDiXE3LzsiIERpX5NTahbLk4CuECCCarqRO0KGfL9h7Z/jIYimNlYQfJarTzNX
mZZs4VZPl+2TekacRQJ+JrrZWDfk67zfc0lQuJsTHvoo8Ea8YfYuvxLpAyhfZY8F
eG+PYZKpNeSR5t1sOb2MKHWF4E9zM0BPfz9JtlwamxkRmqM5m9HAUlDzg5lt5QfG
B8b78R94V78mbHsrOr6swcR50vu+3B2+cALeD4el2o/2TzYobKrHeyh6D7K52Dih
ABNpygyrinwIWklDo9IyfHiVJzBsAhclJsgj/e1ZgiPFO8bM
-----END CERTIFICATE-----
Generated at Sun Jun 8 06:28:02 2025 by rpki-client