Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/nUBY_h9s7VY-oj9R9PdroOJXVEI.roa
File: nUBY_h9s7VY-oj9R9PdroOJXVEI.roa (raw, json)
Hash identifier: zgdiSa1g62nT3ZLtck95+d5r29MuxG8QKJpGsMOvyfE=
Subject key identifier: 9D:40:58:FE:1F:6C:ED:56:3E:A2:3F:51:F4:F7:6B:A0:E2:57:54:42
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 0197368CF94AC48428BD5035BBC4BBBD122A
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/nUBY_h9s7VY-oj9R9PdroOJXVEI.roa
Signing time: Tue 03 Jun 2025 16:08:17 +0000
ROA not before: Tue 03 Jun 2025 16:08:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2914
IP address blocks: 5.182.28.0/22 maxlen: 22
91.242.73.0/24 maxlen: 24
185.180.145.0/24 maxlen: 24
195.138.103.0/24 maxlen: 24
195.138.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft
rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:36:8c:f9:4a:c4:84:28:bd:50:35:bb:c4:bb:bd:12:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jun 3 16:08:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9d4058fe1f6ced563ea23f51f4f76ba0e2575442
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:26:c4:f3:85:23:c4:2c:ad:90:39:df:bd:4c:
1b:a8:44:59:88:d5:79:a1:5c:e4:5c:32:6a:ca:23:
27:45:aa:ec:b7:71:a5:4c:db:55:df:d8:b6:03:54:
71:84:01:a8:b7:55:42:da:0f:2c:7f:0c:c4:bb:fb:
a2:0a:e0:81:f3:f9:a7:85:45:5a:90:7c:12:79:7e:
ed:b9:45:c4:42:81:04:ba:fb:cb:3f:9e:7e:f2:29:
14:c7:70:c9:06:61:09:aa:35:9c:ef:fd:73:7b:95:
89:61:f4:fb:ee:41:4f:53:a5:7d:ac:c7:ac:86:fc:
fb:fb:8d:ca:3e:7e:e6:f9:fd:36:ce:42:10:b4:f8:
4a:08:ee:c1:72:f7:09:7a:3d:e0:93:23:a6:38:f2:
01:11:31:11:45:0d:e5:21:bc:53:a0:b2:67:c5:dd:
7e:d7:85:6f:ec:95:1e:fb:50:e1:21:10:91:ea:dc:
df:39:45:49:c8:d9:5d:52:56:c6:a1:19:c4:ef:6d:
d9:d4:cd:2e:17:c3:98:31:b5:82:1b:fa:7c:ed:13:
df:b8:8c:d6:1b:76:d1:4d:6f:c9:d5:f0:8a:06:7e:
02:78:29:9b:61:7d:6f:9f:b9:90:84:67:19:dc:fb:
5c:2c:1c:0e:82:e5:5a:99:b0:c1:0e:b9:b9:b6:7a:
e6:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:40:58:FE:1F:6C:ED:56:3E:A2:3F:51:F4:F7:6B:A0:E2:57:54:42
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/nUBY_h9s7VY-oj9R9PdroOJXVEI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.28.0/22
91.242.73.0/24
185.180.145.0/24
195.138.103.0/24
195.138.120.0/24
Signature Algorithm: sha256WithRSAEncryption
56:b0:1a:91:fd:34:75:e9:08:f0:b2:d2:7e:f8:70:ec:2b:3b:
33:bd:e1:9a:20:8f:36:4b:92:81:4c:b6:af:c3:07:ba:7a:a7:
7d:a1:44:0b:05:58:e6:eb:fb:f6:09:2e:15:87:0d:fd:7f:6d:
e9:7e:bf:74:6a:00:c0:03:09:5f:a6:12:af:1c:c9:7e:1d:30:
e7:bf:26:ab:8a:02:7b:e9:89:b1:f2:86:11:1f:ed:fc:2f:4f:
b3:a3:9e:7b:83:a6:6b:2e:8e:0c:df:2d:76:f4:d8:5c:82:97:
a4:05:0a:89:ff:a7:02:9d:99:7a:e7:60:6c:fa:55:21:97:46:
66:1f:12:30:a7:99:f3:08:1d:1e:e9:f0:a0:85:3e:b2:d6:d3:
d5:8a:49:ef:ae:7c:d4:d5:66:35:29:8c:44:0f:12:95:f5:63:
33:01:e5:1c:82:f9:94:99:32:ff:9d:18:b1:98:d3:81:c4:0b:
af:7f:66:94:46:1d:8d:25:c8:bc:c3:32:fa:01:aa:a5:42:be:
ff:77:fc:3b:88:20:bb:fa:56:2a:07:74:e5:46:9e:80:8a:1b:
3f:a2:a8:96:f4:dc:cc:82:3d:ba:97:3c:28:3d:81:ad:27:53:
b4:62:65:15:9b:52:d5:2b:99:ff:fc:db:39:dc:67:17:e3:89:
51:ea:6a:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:37:20 2025 by rpki-client