Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/UVZ_NscLyZYnklyWu4g7GIfa1oM.roa
File: UVZ_NscLyZYnklyWu4g7GIfa1oM.roa (raw, json)
Hash identifier: jFFoigem/kuKPimaajmhyzdiIKnD2doVuHNr/yPgD9o=
Subject key identifier: 51:56:7F:36:C7:0B:C9:96:27:92:5C:96:BB:88:3B:18:87:DA:D6:83
Certificate issuer: /CN=4456c14cd8724f9a909627b94e006cf69d12307b
Certificate serial: 019909FF169FC016DC2155D1F545C5F7EAAA
Authority key identifier: 44:56:C1:4C:D8:72:4F:9A:90:96:27:B9:4E:00:6C:F6:9D:12:30:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/UVZ_NscLyZYnklyWu4g7GIfa1oM.roa
Signing time: Tue 02 Sep 2025 10:35:36 +0000
ROA not before: Tue 02 Sep 2025 10:35:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50867
IP address blocks: 185.36.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:09:ff:16:9f:c0:16:dc:21:55:d1:f5:45:c5:f7:ea:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4456c14cd8724f9a909627b94e006cf69d12307b
Validity
Not Before: Sep 2 10:35:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=51567f36c70bc99627925c96bb883b1887dad683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f8:0d:5e:86:15:04:0d:3c:6f:3b:e9:eb:d3:
e8:e8:a5:6c:56:78:fd:64:08:27:ae:9a:ba:10:e0:
81:50:26:75:65:55:77:00:b6:f6:76:b3:5c:5d:2e:
11:3a:a2:45:f7:95:8c:0c:ef:7e:66:d3:39:da:2e:
0d:ad:62:48:ab:5d:97:cc:6c:29:e9:82:64:75:4e:
c3:21:78:f6:93:67:49:b1:75:13:61:75:22:c6:35:
c3:71:8d:9b:bb:d8:88:b0:fd:f2:7a:42:f8:c6:f9:
1c:ae:c8:19:04:88:85:33:34:c1:f4:c3:37:1b:ad:
8a:86:59:c8:5b:5c:f6:ec:3b:f7:19:a6:cf:9e:94:
25:1c:40:16:ff:30:14:6b:81:fa:ae:19:b0:33:a9:
48:71:ce:91:ed:c5:7e:34:01:19:b6:65:fe:58:d3:
77:65:fe:a6:68:8c:8f:d9:e6:69:da:37:c0:c5:c7:
b9:db:44:ad:7b:11:a6:a0:e7:ee:af:ea:c3:87:74:
90:4c:12:5e:2e:04:6f:20:67:35:bd:2f:f3:12:00:
06:4e:bb:9a:25:25:0b:f7:81:2b:ce:cc:db:b6:69:
a4:87:74:39:a6:e0:d9:a4:79:09:17:1d:b0:cc:21:
4a:d6:14:c5:ce:f0:45:c5:40:d9:42:b6:18:95:11:
f6:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:56:7F:36:C7:0B:C9:96:27:92:5C:96:BB:88:3B:18:87:DA:D6:83
X509v3 Authority Key Identifier:
keyid:44:56:C1:4C:D8:72:4F:9A:90:96:27:B9:4E:00:6C:F6:9D:12:30:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/UVZ_NscLyZYnklyWu4g7GIfa1oM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.36.125.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:ab:a1:e1:51:fd:6b:5f:d8:5c:07:62:b8:b6:a1:80:7a:0b:
b1:6b:29:d2:af:4b:cf:32:6c:d7:ff:0c:ca:87:40:b1:11:7c:
09:c3:26:39:5d:1b:21:29:46:82:c2:50:52:51:67:2c:35:e1:
d6:f1:de:ee:2a:d2:ed:db:e0:91:db:3d:df:c8:30:a9:a7:2d:
e8:a4:42:57:6e:25:ef:2a:d9:dc:eb:34:a8:b1:ac:8a:0f:f6:
4a:6e:e2:91:11:ee:a2:70:d9:cb:a8:f8:21:e4:b6:72:4b:0f:
c2:11:bb:a3:4c:d8:38:80:7a:44:e1:12:7a:9d:78:d9:31:7e:
d3:7e:33:21:89:cb:59:37:d2:e5:2f:5a:87:0d:0a:eb:95:15:
b0:40:b6:dd:8e:26:4c:d5:63:d0:cb:37:6e:6b:30:07:33:47:
0f:e9:5b:0d:61:bf:fd:c1:6d:0f:fb:e5:db:3a:d5:7c:14:6d:
6e:78:c4:26:16:62:97:cb:a4:35:f8:3d:37:98:b6:aa:a5:e6:
7b:b1:39:4e:d7:ab:96:32:4d:df:ef:99:3d:72:3e:db:b0:d8:
fa:19:bf:40:42:19:fa:6d:94:36:c2:8a:10:71:69:a6:8b:9d:
bd:c7:16:62:22:1c:fe:5f:b3:11:32:26:28:da:44:62:e9:1c:
64:2d:9a:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 05:15:39 2025 by rpki-client