Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/UoCD-Jw-d36aunkLRuz6ly1x2v0.roa
File: UoCD-Jw-d36aunkLRuz6ly1x2v0.roa (raw, json)
Hash identifier: IL5ej7uIEFxvULFt7FLIix+P1FPdxsPj2Yas43tG1o8=
Subject key identifier: 52:80:83:F8:9C:3E:77:7E:9A:BA:79:0B:46:EC:FA:97:2D:71:DA:FD
Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Certificate serial: 0198E1FBAE09A586C3A2DCA9514AECA97F40
Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/UoCD-Jw-d36aunkLRuz6ly1x2v0.roa
Signing time: Mon 25 Aug 2025 16:07:04 +0000
ROA not before: Mon 25 Aug 2025 16:07:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206715
IP address blocks: 2a0d:d940:90::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Aug 2025 14:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:e1:fb:ae:09:a5:86:c3:a2:dc:a9:51:4a:ec:a9:7f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Validity
Not Before: Aug 25 16:07:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=528083f89c3e777e9aba790b46ecfa972d71dafd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c5:b5:06:ee:62:57:14:1e:60:6d:fb:65:6a:
69:df:80:73:01:f6:14:64:4e:97:9e:a8:a2:db:c0:
23:52:df:5b:ac:2d:65:b0:3f:72:a7:e2:a6:50:32:
40:63:f6:28:f4:bd:e3:03:7a:55:52:e0:04:49:81:
be:f1:17:07:dc:59:6c:24:85:ba:7c:af:a1:34:32:
59:65:f5:4b:b1:74:f4:23:83:3f:70:fe:a3:69:48:
38:8c:8f:9a:b6:70:45:d7:bd:86:d4:66:58:3e:43:
85:62:c7:a3:75:54:a3:c2:7f:e3:6c:4e:d6:21:4f:
8d:0e:a8:33:d6:9a:7d:d1:e7:68:99:43:3e:70:4a:
8e:95:a4:c4:a9:ac:58:6c:8c:e8:c9:a4:d5:5b:6c:
8e:ae:d5:1e:6e:49:c1:d5:0a:38:a2:f7:2f:e0:2d:
b2:c8:94:a7:49:a6:92:07:ac:d9:b8:bc:14:87:e4:
39:1e:3a:f9:c3:79:a1:bc:24:21:68:13:da:64:c7:
10:61:ba:de:a0:dd:44:14:38:df:ff:6d:ec:c5:18:
e7:80:a1:25:34:e0:09:e4:7e:6b:f0:00:37:8c:44:
83:d3:68:df:5e:3b:e1:60:ba:3b:b1:be:05:2c:1b:
a2:32:58:2c:c2:81:e3:31:c5:aa:29:54:ea:59:4a:
06:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:80:83:F8:9C:3E:77:7E:9A:BA:79:0B:46:EC:FA:97:2D:71:DA:FD
X509v3 Authority Key Identifier:
keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/UoCD-Jw-d36aunkLRuz6ly1x2v0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:d940:90::/44
Signature Algorithm: sha256WithRSAEncryption
88:c4:5b:40:77:55:db:30:02:f6:e9:36:8b:9c:e3:1f:4d:a7:
39:54:8f:51:56:38:7b:80:f4:3d:f3:34:7e:18:a1:b9:29:48:
bb:ce:0f:de:d1:cd:ed:85:db:4c:9f:54:db:37:ec:b5:97:07:
6a:97:3a:f8:01:1c:4f:cc:43:c6:f8:c2:85:ad:1c:4e:e9:4b:
8d:f3:71:37:c6:81:d5:69:5b:91:a2:23:87:95:18:fc:31:10:
6b:65:66:bb:9a:54:29:ef:ea:68:d4:14:df:c8:76:d0:32:5b:
3e:10:71:75:43:8c:7e:32:4d:95:5e:51:8a:a6:c7:f5:a6:69:
7a:f7:0c:2f:5d:56:1c:83:24:cb:70:8c:66:a4:a2:82:16:0e:
c6:f3:85:0b:c0:04:6e:6c:bb:0e:14:1d:5e:f1:98:2b:37:78:
4c:a7:e8:bd:ac:62:e1:7e:a1:67:dd:0c:9a:e7:1f:8c:d8:ed:
d6:47:79:dd:c6:d4:00:a0:73:5d:b2:fa:71:0c:be:b9:f4:08:
f4:3c:31:29:c7:13:69:14:93:72:02:cf:e8:07:e9:bf:8a:73:
a7:0a:43:cc:49:77:eb:37:e2:3e:82:36:15:55:de:7e:4a:54:
b6:97:f3:cb:56:9c:54:22:75:73:1d:fc:5e:d4:20:66:63:7e:
ba:cd:ba:b4
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZjh+64JpYbDotypUUrsqX9AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiNGUzYjNiODQyNDIyNTg4NjMxNDJlZDNhMTk3OTJkOTdj
YmJjNzQwHhcNMjUwODI1MTYwNzA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MjgwODNmODljM2U3NzdlOWFiYTc5MGI0NmVjZmE5NzJkNzFkYWZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8W1Bu5iVxQeYG37ZWpp34BzAfYU
ZE6Xnqii28AjUt9brC1lsD9yp+KmUDJAY/Yo9L3jA3pVUuAESYG+8RcH3FlsJIW6
fK+hNDJZZfVLsXT0I4M/cP6jaUg4jI+atnBF172G1GZYPkOFYsejdVSjwn/jbE7W
IU+NDqgz1pp90edomUM+cEqOlaTEqaxYbIzoyaTVW2yOrtUebknB1Qo4ovcv4C2y
yJSnSaaSB6zZuLwUh+Q5Hjr5w3mhvCQhaBPaZMcQYbreoN1EFDjf/23sxRjngKEl
NOAJ5H5r8AA3jESD02jfXjvhYLo7sb4FLBuiMlgswoHjMcWqKVTqWUoGbwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFFKAg/icPnd+mrp5C0bs+pctcdr9MB8GA1UdIwQY
MBaAFAtOOzuEJCJYhjFC7ToZeS2Xy7x0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQt
MTRkMjM4NTI3ODM1LzEvVW9DRC1Kdy1kMzZhdW5rTFJ1ejZseTF4MnYwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQtMTRkMjM4NTI3ODM1
LzEvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg3ZQACQ
MA0GCSqGSIb3DQEBCwUAA4IBAQCIxFtAd1XbMAL26TaLnOMfTac5VI9RVjh7gPQ9
8zR+GKG5KUi7zg/e0c3thdtMn1TbN+y1lwdqlzr4ARxPzEPG+MKFrRxO6UuN83E3
xoHVaVuRoiOHlRj8MRBrZWa7mlQp7+po1BTfyHbQMls+EHF1Q4x+Mk2VXlGKpsf1
pml69wwvXVYcgyTLcIxmpKKCFg7G84ULwARubLsOFB1e8ZgrN3hMp+i9rGLhfqFn
3Qya5x+M2O3WR3ndxtQAoHNdsvpxDL659Aj0PDEpxxNpFJNyAs/oB+m/inOnCkPM
SXfrN+I+gjYVVd5+SlS2l/PLVpxUInVzHfxe1CBmY366zbq0
-----END CERTIFICATE-----
Generated at Tue Aug 26 23:25:41 2025 by rpki-client