Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/uWWiJZN9G8HWUjyGGooehV4-7Xc.roa
File: uWWiJZN9G8HWUjyGGooehV4-7Xc.roa (raw, json)
Hash identifier: q5Hz0ZtxkWEyQZrVgIAnq1hk7/hz+CptQc1gUmdbpnY=
Subject key identifier: B9:65:A2:25:93:7D:1B:C1:D6:52:3C:86:1A:8A:1E:85:5E:3E:ED:77
Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial: 0197F3EAAB121AC4C06176251582C0BA04D6
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/uWWiJZN9G8HWUjyGGooehV4-7Xc.roa
Signing time: Thu 10 Jul 2025 10:38:52 +0000
ROA not before: Thu 10 Jul 2025 10:38:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 53856
IP address blocks: 94.131.64.0/22 maxlen: 24
94.131.72.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 20:26:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:f3:ea:ab:12:1a:c4:c0:61:76:25:15:82:c0:ba:04:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Validity
Not Before: Jul 10 10:38:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b965a225937d1bc1d6523c861a8a1e855e3eed77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6b:ca:74:01:92:1f:3b:db:82:98:3f:5d:fc:
dc:30:24:da:04:11:42:bc:d7:8f:02:28:05:9e:a5:
e7:27:aa:3b:36:d6:b9:8b:37:ac:c6:33:4f:07:b0:
43:8e:85:b9:02:55:0f:8a:f9:39:68:09:d4:15:5d:
05:0c:d5:7f:44:83:c7:13:51:7e:69:a7:ba:6e:5a:
ec:c8:9e:a7:95:d5:47:ed:c1:d6:30:55:e6:44:d8:
45:26:dd:ff:dd:18:00:1b:91:ae:a9:79:38:48:54:
99:8b:bf:48:14:74:78:92:ba:a8:6f:0d:ef:a8:10:
3e:0e:d1:fd:1c:fc:10:75:aa:d0:c6:c5:7c:bb:68:
6e:67:6b:f9:43:e4:f0:c9:5b:7c:8e:27:6d:a3:86:
97:8e:6f:1f:c1:92:dd:95:37:59:ae:bf:e8:24:cb:
7c:7c:76:85:7a:2e:91:ae:61:e4:1f:7d:ba:95:2d:
21:2a:37:41:b8:9a:62:fb:d0:9a:58:6b:18:d1:25:
7d:8c:7c:3d:37:60:8b:3a:36:69:a7:51:74:b6:25:
bc:6e:04:d6:31:ed:62:65:6c:bc:e1:4e:09:72:8b:
8c:59:78:06:07:d7:da:aa:41:ed:a6:e1:1a:23:3b:
9d:ab:f5:00:4d:08:bb:7b:1b:7c:b3:3c:28:eb:38:
9e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:65:A2:25:93:7D:1B:C1:D6:52:3C:86:1A:8A:1E:85:5E:3E:ED:77
X509v3 Authority Key Identifier:
keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/uWWiJZN9G8HWUjyGGooehV4-7Xc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.131.64.0/22
94.131.72.0/21
Signature Algorithm: sha256WithRSAEncryption
31:4d:bc:b1:8e:53:26:40:28:e4:2d:c8:04:f9:bc:c5:b2:1b:
19:62:95:a0:4f:41:ae:6d:c4:f5:e5:92:13:00:8a:c6:b6:06:
ba:87:9b:08:3d:4c:aa:58:68:9a:a3:21:42:5f:6a:00:10:ab:
40:65:77:1b:03:4f:95:13:27:4b:68:7b:4e:f3:8e:11:cb:09:
e9:1a:a7:2e:5f:99:4f:b7:46:18:59:e7:57:fe:56:81:4a:85:
40:1e:56:c3:32:09:21:47:a2:a9:e8:4d:27:41:13:10:5d:fe:
bf:93:52:5a:b7:2e:e7:a9:e9:38:1a:e0:ef:2b:a6:24:c5:3a:
e2:ab:e9:24:a1:20:83:13:c1:eb:b6:06:d0:24:a5:2e:5f:78:
0d:09:0e:6e:5e:e0:89:6b:81:f9:ec:89:23:24:27:74:97:b7:
53:e5:af:ac:ea:c4:ff:f1:8a:5a:d8:87:c0:20:bb:2a:4c:97:
9d:5b:a8:bb:52:2f:4b:18:ae:a0:07:27:e4:a8:b9:13:d3:43:
2d:1e:5e:ed:70:df:c1:b2:f3:44:61:92:50:ff:43:54:39:60:
1b:c9:13:5b:10:99:52:4d:1a:01:7e:29:7c:41:24:17:be:b4:
7d:53:23:ea:93:7c:62:fc:4e:aa:0b:c6:7d:c7:94:72:71:93:
14:47:8e:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 04:14:29 2025 by rpki-client