Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/uYd3Rl4ywmtPnNm_f04k-3MhFCs.roa
File: uYd3Rl4ywmtPnNm_f04k-3MhFCs.roa (raw, json)
Hash identifier: Yq+74aAgucW+GGbCLgjdacyHPboyZ7y3hRDi+tRFRd4=
Subject key identifier: B9:87:77:46:5E:32:C2:6B:4F:9C:D9:BF:7F:4E:24:FB:73:21:14:2B
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 0198F06FE557813DF3E848867A699DA37C04
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/uYd3Rl4ywmtPnNm_f04k-3MhFCs.roa
Signing time: Thu 28 Aug 2025 11:28:41 +0000
ROA not before: Thu 28 Aug 2025 11:28:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205023
IP address blocks: 213.185.92.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft
rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 11:14:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:f0:6f:e5:57:81:3d:f3:e8:48:86:7a:69:9d:a3:7c:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Aug 28 11:28:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b98777465e32c26b4f9cd9bf7f4e24fb7321142b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:1c:e2:aa:d8:a1:08:fb:5e:f9:83:11:4e:fe:
37:43:51:0f:c0:27:44:9b:af:8c:42:c2:f8:2a:aa:
bc:a3:1a:4a:c1:66:bd:89:63:f1:3f:3a:8e:68:ff:
37:9e:51:fe:04:4e:d3:ef:b0:7a:bc:66:6f:39:02:
11:1d:a0:53:2c:4e:5a:8a:0e:c3:30:12:82:8a:d7:
37:a5:e3:c2:04:41:4f:2d:fa:55:f0:c9:bd:11:ea:
74:a7:41:65:ac:05:43:ca:f9:9c:ce:80:70:ea:35:
37:3a:3f:d7:fc:65:09:0a:e8:92:59:65:46:af:e9:
32:52:b8:a6:91:1c:da:72:d5:8b:c0:77:bc:e3:2d:
e8:f0:39:0b:13:0e:ab:c5:d1:97:71:ac:59:37:1e:
0f:58:1b:9a:f0:98:a3:56:74:50:bd:af:3a:8c:50:
4a:8c:15:e0:f8:41:48:b9:5c:d0:70:01:92:12:38:
cd:6f:1a:06:ea:a9:49:d7:e4:2c:6d:cc:82:70:bc:
c3:e3:da:8a:e6:03:e8:10:0c:c0:e3:e1:d1:cf:4d:
8a:07:67:b0:ed:49:19:17:cb:1c:bb:dc:e0:21:ed:
d0:7a:f8:f0:fa:6f:d6:61:5d:e3:a1:b4:ed:f5:64:
a7:25:02:64:b6:3e:bc:5e:35:b4:b1:c1:ed:15:d1:
77:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:87:77:46:5E:32:C2:6B:4F:9C:D9:BF:7F:4E:24:FB:73:21:14:2B
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/uYd3Rl4ywmtPnNm_f04k-3MhFCs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.185.92.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:15:0a:55:5c:83:ba:71:63:9b:6a:ff:c7:4d:42:5a:8c:42:
d4:ad:7b:16:b4:59:32:b0:bb:4d:17:d4:9f:5e:ad:1c:ba:a0:
9f:f6:4a:c3:ef:cc:02:8a:09:d5:39:58:33:d3:70:e4:e2:87:
47:99:61:49:e5:b7:3a:24:34:c8:cc:f3:3b:d6:3b:b1:f3:c4:
ae:a5:d4:9b:a0:6c:e6:6c:f8:c0:e4:6e:30:d2:31:67:1f:9e:
58:c6:a8:4d:f2:4b:d4:d4:33:ec:25:57:cb:d7:07:33:18:e8:
e9:a5:70:08:58:57:89:56:fe:f6:0e:6d:c1:7d:d6:5c:1b:d8:
d2:ec:bf:ca:1e:da:02:27:ef:41:99:48:8e:3f:38:5a:48:b6:
67:e8:c5:f2:84:9e:5f:68:d4:5d:21:39:c5:e4:07:15:c8:07:
bc:8a:08:81:76:2d:f8:62:42:de:b4:9d:d5:f5:89:86:c0:b4:
24:bd:bd:e3:7d:6b:15:44:06:87:81:79:72:c1:d8:55:7a:03:
bf:01:02:dc:09:07:e8:8a:e6:cf:b0:f2:ad:3c:90:b7:02:4c:
da:5f:dd:e3:61:21:60:43:99:bb:47:15:2a:ce:ef:b8:8c:71:
42:f0:d3:d1:ad:39:27:e2:fa:c4:7d:76:5c:f2:76:42:6b:28:
e9:2d:06:9d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZjwb+VXgT3z6EiGemmdo3wEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1NTdjY2Q0M2FmZTgxNmU0OTUzMjI4YmYxNGE3NWRjMjkw
MTRiOGQwHhcNMjUwODI4MTEyODQxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOTg3Nzc0NjVlMzJjMjZiNGY5Y2Q5YmY3ZjRlMjRmYjczMjExNDJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6BziqtihCPte+YMRTv43Q1EPwCdE
m6+MQsL4Kqq8oxpKwWa9iWPxPzqOaP83nlH+BE7T77B6vGZvOQIRHaBTLE5aig7D
MBKCitc3pePCBEFPLfpV8Mm9Eep0p0FlrAVDyvmczoBw6jU3Oj/X/GUJCuiSWWVG
r+kyUrimkRzactWLwHe84y3o8DkLEw6rxdGXcaxZNx4PWBua8JijVnRQva86jFBK
jBXg+EFIuVzQcAGSEjjNbxoG6qlJ1+QsbcyCcLzD49qK5gPoEAzA4+HRz02KB2ew
7UkZF8scu9zgIe3Qevjw+m/WYV3jobTt9WSnJQJktj68XjW0scHtFdF3iwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLmHd0ZeMsJrT5zZv39OJPtzIRQrMB8GA1UdIwQY
MBaAFLVXzNQ6/oFuSVMii/FKddwpAUuNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUt
NmJjNzU1NzhiNGMzLzEvdVlkM1JsNHl3bXRQbk5tX2YwNGstM01oRkNzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUtNmJjNzU1NzhiNGMz
LzEvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC1blcMA0G
CSqGSIb3DQEBCwUAA4IBAQBsFQpVXIO6cWObav/HTUJajELUrXsWtFkysLtNF9Sf
Xq0cuqCf9krD78wCignVOVgz03Dk4odHmWFJ5bc6JDTIzPM71jux88SupdSboGzm
bPjA5G4w0jFnH55YxqhN8kvU1DPsJVfL1wczGOjppXAIWFeJVv72Dm3BfdZcG9jS
7L/KHtoCJ+9BmUiOPzhaSLZn6MXyhJ5faNRdITnF5AcVyAe8igiBdi34YkLetJ3V
9YmGwLQkvb3jfWsVRAaHgXlywdhVegO/AQLcCQfoiubPsPKtPJC3AkzaX93jYSFg
Q5m7RxUqzu+4jHFC8NPRrTkn4vrEfXZc8nZCayjpLQad
-----END CERTIFICATE-----
Generated at Sat Sep 6 15:48:10 2025 by rpki-client