Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/UG72Y5tjPOVdDYZoF2OJHRvox8w.roa
File: UG72Y5tjPOVdDYZoF2OJHRvox8w.roa (raw, json)
Hash identifier: XSbgvIj2Ch+LSBHjiAOVtaCvcu1spJNttU+pKEof9y8=
Subject key identifier: 50:6E:F6:63:9B:63:3C:E5:5D:0D:86:68:17:63:89:1D:1B:E8:C7:CC
Certificate issuer: /CN=1074db96402ff5cf187564560ea8f13eeeb5ffeb
Certificate serial: 0198E16D257D47118343E96D244FF8F7B160
Authority key identifier: 10:74:DB:96:40:2F:F5:CF:18:75:64:56:0E:A8:F1:3E:EE:B5:FF:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHTblkAv9c8YdWRWDqjxPu61_-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/UG72Y5tjPOVdDYZoF2OJHRvox8w.roa
Signing time: Mon 25 Aug 2025 13:31:23 +0000
ROA not before: Mon 25 Aug 2025 13:31:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8685
IP address blocks: 81.21.160.0/20 maxlen: 24
82.151.128.0/19 maxlen: 24
94.102.64.0/20 maxlen: 24
185.58.244.0/22 maxlen: 24
212.2.192.0/19 maxlen: 24
212.2.194.0/24 maxlen: 24
212.2.196.0/24 maxlen: 24
212.2.197.0/24 maxlen: 24
212.58.0.0/19 maxlen: 24
213.155.96.0/19 maxlen: 24
213.155.121.0/24 maxlen: 24
213.155.124.0/24 maxlen: 24
213.155.127.0/24 maxlen: 24
2a02:480::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/EHTblkAv9c8YdWRWDqjxPu61_-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/EHTblkAv9c8YdWRWDqjxPu61_-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHTblkAv9c8YdWRWDqjxPu61_-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 02:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:e1:6d:25:7d:47:11:83:43:e9:6d:24:4f:f8:f7:b1:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1074db96402ff5cf187564560ea8f13eeeb5ffeb
Validity
Not Before: Aug 25 13:31:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=506ef6639b633ce55d0d86681763891d1be8c7cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:16:1b:4c:57:aa:c0:3a:3b:7b:cf:4f:7c:6e:
fe:74:e3:7d:41:8f:1f:8a:c4:ad:4b:f7:24:d0:42:
a4:09:3d:6f:bd:00:a5:76:97:64:57:88:04:4a:ae:
59:6c:d5:cc:0f:7e:2f:1c:ef:c3:19:6b:22:68:d4:
58:53:5d:16:05:35:be:95:cb:12:3d:e3:a1:93:4b:
4a:3a:93:c7:ed:9e:fd:04:c4:19:f7:75:e9:e8:0d:
12:0c:95:e5:24:31:9c:ad:d8:bb:da:6e:52:a3:62:
9e:44:54:59:07:7d:0b:d3:9e:ef:45:7a:f9:a3:e0:
d9:e5:8c:06:11:e4:f9:45:8c:b4:10:69:ec:d8:55:
f3:4b:a3:ed:69:6e:f2:43:9e:08:e1:d3:da:22:d5:
83:02:86:55:24:6e:1a:1f:3e:4e:fe:ad:df:8b:6a:
ae:17:72:04:7e:5e:bf:b1:16:da:16:e6:91:a9:9a:
20:82:19:96:93:d8:36:80:74:37:1b:cf:85:63:fd:
87:2a:5e:53:d9:4d:b9:fc:5f:9a:83:e6:d5:1d:c6:
1f:f9:71:a8:7b:2d:4c:9d:95:c6:97:20:3b:50:89:
51:ea:96:ee:5d:b0:c1:87:6a:f1:3f:64:fb:50:4a:
f9:bd:bc:cd:fc:9a:4a:01:59:f4:36:e1:74:7b:d2:
c7:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:6E:F6:63:9B:63:3C:E5:5D:0D:86:68:17:63:89:1D:1B:E8:C7:CC
X509v3 Authority Key Identifier:
keyid:10:74:DB:96:40:2F:F5:CF:18:75:64:56:0E:A8:F1:3E:EE:B5:FF:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHTblkAv9c8YdWRWDqjxPu61_-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/UG72Y5tjPOVdDYZoF2OJHRvox8w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/EHTblkAv9c8YdWRWDqjxPu61_-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.21.160.0/20
82.151.128.0/19
94.102.64.0/20
185.58.244.0/22
212.2.192.0/19
212.58.0.0/19
213.155.96.0/19
IPv6:
2a02:480::/32
Signature Algorithm: sha256WithRSAEncryption
84:eb:00:1f:56:90:1d:ec:c7:16:f7:1d:ad:ae:88:f5:75:4e:
9e:17:76:a7:c2:a9:71:3d:4a:6b:a5:51:ec:2f:fb:1d:f4:6d:
46:87:1c:87:9a:64:b8:5c:40:c9:bc:72:90:7d:2c:1d:1a:54:
af:20:fb:54:d9:2b:77:f0:07:48:5a:8a:ef:a8:4c:f0:25:4f:
e4:0f:cc:29:96:ad:6e:de:88:fb:b5:dc:a4:42:df:1a:de:e3:
f2:78:9d:6e:cd:25:1e:ff:2b:a9:91:27:d3:23:b9:c1:d7:b1:
10:e7:31:72:39:16:9d:89:fa:35:d9:72:36:cd:06:80:0d:b1:
e0:88:2b:9e:ac:12:67:be:cb:88:ab:8c:8c:aa:56:33:a7:47:
35:88:25:b3:5f:52:7e:f1:ef:8d:33:bc:68:3c:ca:22:a9:88:
ac:ab:3f:db:b0:7f:0e:72:67:bd:b2:86:a4:f9:6d:85:75:5c:
59:0e:f5:9f:b8:d5:ac:cf:4d:46:c2:f8:23:dd:1a:f2:73:1a:
5b:b1:81:b4:41:f3:40:ee:5c:fe:9a:00:2b:b9:8f:fb:52:0c:
53:7d:69:ee:4c:6d:67:e5:0d:bb:c8:80:83:e5:42:44:ff:78:
c9:82:16:8f:0b:02:ad:d2:9d:15:06:aa:77:0e:9b:e4:ca:37:
a9:41:f7:85
-----BEGIN CERTIFICATE-----
MIIFMDCCBBigAwIBAgISAZjhbSV9RxGDQ+ltJE/497FgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwNzRkYjk2NDAyZmY1Y2YxODc1NjQ1NjBlYThmMTNlZWVi
NWZmZWIwHhcNMjUwODI1MTMzMTIzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MDZlZjY2MzliNjMzY2U1NWQwZDg2NjgxNzYzODkxZDFiZThjN2NjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0RYbTFeqwDo7e89PfG7+dON9QY8f
isStS/ck0EKkCT1vvQCldpdkV4gESq5ZbNXMD34vHO/DGWsiaNRYU10WBTW+lcsS
PeOhk0tKOpPH7Z79BMQZ93Xp6A0SDJXlJDGcrdi72m5So2KeRFRZB30L057vRXr5
o+DZ5YwGEeT5RYy0EGns2FXzS6PtaW7yQ54I4dPaItWDAoZVJG4aHz5O/q3fi2qu
F3IEfl6/sRbaFuaRqZogghmWk9g2gHQ3G8+FY/2HKl5T2U25/F+ag+bVHcYf+XGo
ey1MnZXGlyA7UIlR6pbuXbDBh2rxP2T7UEr5vbzN/JpKAVn0NuF0e9LH0QIDAQAB
o4ICPDCCAjgwHQYDVR0OBBYEFFBu9mObYzzlXQ2GaBdjiR0b6MfMMB8GA1UdIwQY
MBaAFBB025ZAL/XPGHVkVg6o8T7utf/rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUhUYmxrQXY5YzhZZFdSV0RxanhQdTYxXy1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My8xZTFkNjktMGJmZC00MGFmLTg4YjEt
YWI0MGI1OGEyODkyLzEvVUc3Mlk1dGpQT1ZkRFlab0YyT0pIUnZveDh3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My8xZTFkNjktMGJmZC00MGFmLTg4YjEtYWI0MGI1OGEyODky
LzEvRUhUYmxrQXY5YzhZZFdSV0RxanhQdTYxXy1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFIGCCsGAQUFBwEHAQH/BEMwQTAwBAIAATAqAwQEURWgAwQF
UpeAAwQEXmZAAwQCuTr0AwQF1ALAAwQF1DoAAwQF1ZtgMA0EAgACMAcDBQAqAgSA
MA0GCSqGSIb3DQEBCwUAA4IBAQCE6wAfVpAd7McW9x2troj1dU6eF3anwqlxPUpr
pVHsL/sd9G1GhxyHmmS4XEDJvHKQfSwdGlSvIPtU2St38AdIWorvqEzwJU/kD8wp
lq1u3oj7tdykQt8a3uPyeJ1uzSUe/yupkSfTI7nB17EQ5zFyORadifo12XI2zQaA
DbHgiCuerBJnvsuIq4yMqlYzp0c1iCWzX1J+8e+NM7xoPMoiqYisqz/bsH8Ocme9
soak+W2FdVxZDvWfuNWsz01Gwvgj3RrycxpbsYG0QfNA7lz+mgAruY/7UgxTfWnu
TG1n5Q27yICD5UJE/3jJghaPCwKt0p0VBqp3DpvkyjepQfeF
-----END CERTIFICATE-----
Generated at Sat Sep 6 09:36:09 2025 by rpki-client