Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/XUbpg-tBDuOM-uZKqtdsmxOB38M.roa
File: XUbpg-tBDuOM-uZKqtdsmxOB38M.roa (raw, json)
Hash identifier: tw+hhnN/+elfL/3HxAjHoQN99yUqRR6yBg96qTz78+M=
Subject key identifier: 5D:46:E9:83:EB:41:0E:E3:8C:FA:E6:4A:AA:D7:6C:9B:13:81:DF:C3
Certificate issuer: /CN=0af61798dd18965c027afa7f93ae030ff5e1d76e
Certificate serial: 019A15AB0DDD552A6B9F3AB87542C99F6464
Authority key identifier: 0A:F6:17:98:DD:18:96:5C:02:7A:FA:7F:93:AE:03:0F:F5:E1:D7:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/XUbpg-tBDuOM-uZKqtdsmxOB38M.roa
Signing time: Fri 24 Oct 2025 10:02:03 +0000
ROA not before: Fri 24 Oct 2025 10:02:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21317
IP address blocks: 94.176.190.0/24 maxlen: 24
109.205.92.0/24 maxlen: 24
109.205.93.0/24 maxlen: 24
109.205.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft
rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:15:ab:0d:dd:55:2a:6b:9f:3a:b8:75:42:c9:9f:64:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0af61798dd18965c027afa7f93ae030ff5e1d76e
Validity
Not Before: Oct 24 10:02:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5d46e983eb410ee38cfae64aaad76c9b1381dfc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:35:4c:d7:b1:d1:7b:e7:56:09:d7:f0:b5:21:
18:53:ac:8e:1a:79:06:6b:72:e2:f6:1b:0b:16:b6:
f9:96:8e:9c:15:dc:f3:6e:f1:66:f1:73:25:a5:ba:
3a:fd:4c:56:d2:90:94:5d:6a:d9:52:b0:93:d1:27:
a5:e8:5b:c8:6a:7a:e6:88:55:f3:f7:74:b1:55:22:
6e:90:0f:07:cb:87:f2:5c:2f:d9:b3:48:99:53:bb:
e1:0d:c2:47:d5:e2:9c:39:24:54:8b:8a:c3:a0:0c:
70:cf:a0:62:0d:a1:38:08:f2:75:44:b0:9d:ad:de:
68:2f:de:b3:a7:6d:2d:5e:d5:fb:dd:fb:48:d9:71:
48:de:f4:ca:b4:a9:e2:25:f3:2d:21:94:af:45:6c:
dd:23:e6:f2:66:31:3d:d6:e3:a4:96:6b:22:d6:58:
c1:6a:38:b5:95:9b:e2:55:f4:ae:ed:35:a5:1d:cc:
5f:95:81:c6:ce:18:7c:c5:84:62:c3:bb:fe:9c:b5:
3d:8a:07:b6:3b:57:9e:a6:ff:b5:6d:1c:14:59:99:
0d:c2:50:f5:e6:42:6c:9c:b9:fc:6e:17:41:a3:ad:
87:81:e0:08:8f:ec:7e:b6:85:1d:06:73:87:29:ad:
a2:42:a3:cf:68:41:03:2e:4b:45:fa:e0:42:2e:23:
1d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:46:E9:83:EB:41:0E:E3:8C:FA:E6:4A:AA:D7:6C:9B:13:81:DF:C3
X509v3 Authority Key Identifier:
keyid:0A:F6:17:98:DD:18:96:5C:02:7A:FA:7F:93:AE:03:0F:F5:E1:D7:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/XUbpg-tBDuOM-uZKqtdsmxOB38M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.176.190.0/24
109.205.92.0-109.205.94.255
Signature Algorithm: sha256WithRSAEncryption
1c:41:4b:f7:b7:62:d3:56:93:61:30:cb:e1:ed:12:2c:a9:29:
c8:50:69:65:d7:ef:c8:a6:53:48:42:4d:16:14:71:33:54:9d:
7e:6c:fa:4e:a4:9a:a2:53:cf:92:a5:9e:4e:2d:14:5d:8f:ba:
fa:0e:ba:95:cf:81:78:66:74:e9:7e:8d:1a:8d:fb:0a:2a:16:
ac:2f:88:fa:7d:63:7d:22:27:48:86:e9:ef:de:fa:6b:59:65:
ff:77:12:89:c4:b7:d0:c7:35:46:cb:4b:0b:59:7e:98:a3:31:
12:14:b6:8e:bb:95:98:16:ca:45:65:fd:d9:b4:04:6f:7a:51:
6e:8d:62:94:e9:45:35:bb:a8:96:6f:bb:85:6f:6f:24:b1:97:
8e:49:ec:90:2c:20:55:a2:16:0a:81:1e:77:0f:bf:fd:b1:a1:
14:99:07:87:c8:d7:99:74:16:ee:66:67:6a:89:07:2f:f1:00:
cb:19:65:c7:e4:d4:fe:39:ae:a0:8d:b0:66:d7:c8:35:de:76:
0b:a9:ac:7a:e3:8e:68:e4:6f:cb:b6:fc:e2:10:b0:12:70:eb:
d8:31:7a:98:d8:55:6e:98:bc:a4:ad:ac:cd:0d:22:07:b6:71:
0f:1f:23:7c:85:55:a9:9e:ec:d8:be:ef:31:14:30:8a:c1:2c:
05:4e:01:d1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Oct 27 04:23:46 2025 by rpki-client