Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/5240a6-cd61-4e0c-88b6-f59d20ef27b4/1/uPuOBXO8b4-bI2P5P3XpiRIEXXA.roa
File: uPuOBXO8b4-bI2P5P3XpiRIEXXA.roa (raw, json)
Hash identifier: q/g5oVhV8oJmXJeCRjYEShHLH12PHyzIo7YhSAchvwE=
Subject key identifier: B8:FB:8E:05:73:BC:6F:8F:9B:23:63:F9:3F:75:E9:89:12:04:5D:70
Certificate issuer: /CN=d37969f5d253210b0abe8e07a086f608d6f2a0af
Certificate serial: 019A06F028EBC1F3E00F008E5E377A244FC4
Authority key identifier: D3:79:69:F5:D2:53:21:0B:0A:BE:8E:07:A0:86:F6:08:D6:F2:A0:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/03lp9dJTIQsKvo4HoIb2CNbyoK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/5240a6-cd61-4e0c-88b6-f59d20ef27b4/1/uPuOBXO8b4-bI2P5P3XpiRIEXXA.roa
Signing time: Tue 21 Oct 2025 13:23:13 +0000
ROA not before: Tue 21 Oct 2025 13:23:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43030
IP address blocks: 77.95.0.0/21 maxlen: 21
77.95.0.0/24 maxlen: 24
77.95.1.0/24 maxlen: 24
77.95.2.0/24 maxlen: 24
77.95.3.0/24 maxlen: 24
77.95.4.0/24 maxlen: 24
77.95.5.0/24 maxlen: 24
77.95.6.0/24 maxlen: 24
77.95.7.0/24 maxlen: 24
185.194.196.0/23 maxlen: 23
185.194.196.0/24 maxlen: 24
185.194.197.0/24 maxlen: 24
185.194.198.0/24 maxlen: 24
2a0b:ae80::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/5240a6-cd61-4e0c-88b6-f59d20ef27b4/1/03lp9dJTIQsKvo4HoIb2CNbyoK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/5240a6-cd61-4e0c-88b6-f59d20ef27b4/1/03lp9dJTIQsKvo4HoIb2CNbyoK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/03lp9dJTIQsKvo4HoIb2CNbyoK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:06:f0:28:eb:c1:f3:e0:0f:00:8e:5e:37:7a:24:4f:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d37969f5d253210b0abe8e07a086f608d6f2a0af
Validity
Not Before: Oct 21 13:23:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b8fb8e0573bc6f8f9b2363f93f75e98912045d70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3f:23:39:b5:4a:44:bb:38:f3:82:56:fd:cf:
ab:54:61:89:0f:ea:2c:40:d1:1f:14:7f:1f:43:8a:
41:17:c2:3c:fd:f5:0f:9e:9a:d1:2f:4d:3f:1a:a5:
af:2c:19:0b:5b:50:13:56:7d:ce:59:68:df:21:96:
19:f7:cb:9c:67:16:0e:59:80:cc:57:59:38:57:8b:
02:8f:4b:0a:ab:1c:23:62:8a:cd:09:00:27:c6:7a:
03:95:41:27:70:84:24:7b:47:8b:35:e3:29:38:c6:
fd:09:58:30:da:a9:04:62:76:23:79:b8:ba:0e:2d:
3d:ff:46:c1:a5:20:5f:dc:7f:8d:99:c5:93:3f:01:
95:fc:a1:94:99:24:67:e9:33:26:32:03:02:d3:b8:
31:77:65:20:97:4d:6a:63:25:2f:de:b0:6f:36:9c:
5b:3a:9c:02:9e:1d:87:fd:ea:6f:10:ba:95:42:d5:
5f:bb:2d:cd:57:43:2d:a4:20:da:cb:fd:eb:6f:d8:
07:35:8b:eb:72:a9:22:8b:26:26:03:ed:66:ce:b3:
db:d9:f5:89:f7:9b:fd:5a:c3:e8:ee:dc:28:65:ad:
15:90:be:0a:32:25:1b:e8:3a:36:59:48:1a:83:34:
e1:06:cf:01:c3:94:b1:2a:9d:eb:ef:32:ca:9f:95:
6e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:FB:8E:05:73:BC:6F:8F:9B:23:63:F9:3F:75:E9:89:12:04:5D:70
X509v3 Authority Key Identifier:
keyid:D3:79:69:F5:D2:53:21:0B:0A:BE:8E:07:A0:86:F6:08:D6:F2:A0:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/03lp9dJTIQsKvo4HoIb2CNbyoK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5240a6-cd61-4e0c-88b6-f59d20ef27b4/1/uPuOBXO8b4-bI2P5P3XpiRIEXXA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5240a6-cd61-4e0c-88b6-f59d20ef27b4/1/03lp9dJTIQsKvo4HoIb2CNbyoK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.95.0.0/21
185.194.196.0-185.194.198.255
IPv6:
2a0b:ae80::/32
Signature Algorithm: sha256WithRSAEncryption
7a:6c:4b:6a:cf:a9:58:bd:1f:db:20:88:0d:80:35:45:11:9d:
0b:e1:69:81:67:b9:03:cc:75:15:51:98:02:c5:3a:6a:06:3d:
a9:d7:32:a9:a9:3e:dc:f6:be:36:28:5d:2f:ce:8f:18:50:db:
6f:7d:59:09:3c:fd:60:f4:fb:ba:43:b4:c8:e1:3e:3f:2c:56:
d6:4f:f1:f4:3e:2d:04:fc:5d:8e:db:fb:3d:8b:e8:18:3a:3c:
59:93:75:62:0f:69:d8:a3:83:ee:ed:e9:a7:29:ae:97:e1:92:
eb:da:a9:12:db:14:9a:fd:53:87:0e:5b:76:6a:68:0b:76:ea:
ca:bd:b0:93:9e:0c:b9:9a:6a:33:70:79:bb:46:30:d8:c2:1d:
2e:ba:e8:72:78:7b:6a:4d:09:24:0c:d4:a4:6d:ad:1c:09:34:
8c:fc:8e:e7:dd:b6:78:f6:f1:1a:9f:c8:04:a5:85:67:c2:99:
3f:ab:af:22:74:ef:5a:39:03:ce:54:12:c7:75:cd:76:15:ef:
6e:c0:9c:19:b4:c0:30:ef:c1:c1:d7:4d:e0:be:b4:0b:c7:53:
c2:fe:8d:2a:85:75:ab:b6:bb:c3:11:d0:ef:19:2a:d9:d9:74:
a8:78:d3:41:1e:85:56:f3:84:c7:44:9b:18:51:90:1b:84:c1:
62:b0:7c:82
-----BEGIN CERTIFICATE-----
MIIFGjCCBAKgAwIBAgISAZoG8CjrwfPgDwCOXjd6JE/EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzNzk2OWY1ZDI1MzIxMGIwYWJlOGUwN2EwODZmNjA4ZDZm
MmEwYWYwHhcNMjUxMDIxMTMyMzEzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOGZiOGUwNTczYmM2ZjhmOWIyMzYzZjkzZjc1ZTk4OTEyMDQ1ZDcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApT8jObVKRLs484JW/c+rVGGJD+os
QNEfFH8fQ4pBF8I8/fUPnprRL00/GqWvLBkLW1ATVn3OWWjfIZYZ98ucZxYOWYDM
V1k4V4sCj0sKqxwjYorNCQAnxnoDlUEncIQke0eLNeMpOMb9CVgw2qkEYnYjebi6
Di09/0bBpSBf3H+NmcWTPwGV/KGUmSRn6TMmMgMC07gxd2Ugl01qYyUv3rBvNpxb
OpwCnh2H/epvELqVQtVfuy3NV0MtpCDay/3rb9gHNYvrcqkiiyYmA+1mzrPb2fWJ
95v9WsPo7twoZa0VkL4KMiUb6Do2WUgagzThBs8Bw5SxKp3r7zLKn5VuGQIDAQAB
o4ICJjCCAiIwHQYDVR0OBBYEFLj7jgVzvG+PmyNj+T916YkSBF1wMB8GA1UdIwQY
MBaAFNN5afXSUyELCr6OB6CG9gjW8qCvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDNscDlkSlRJUXNLdm80SG9JYjJDTmJ5b0s4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC81MjQwYTYtY2Q2MS00ZTBjLTg4YjYt
ZjU5ZDIwZWYyN2I0LzEvdVB1T0JYTzhiNC1iSTJQNVAzWHBpUklFWFhBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC81MjQwYTYtY2Q2MS00ZTBjLTg4YjYtZjU5ZDIwZWYyN2I0
LzEvMDNscDlkSlRJUXNLdm80SG9JYjJDTmJ5b0s4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAaBAIAATAUAwQDTV8AMAwD
BAK5wsQDBAC5wsYwDQQCAAIwBwMFACoLroAwDQYJKoZIhvcNAQELBQADggEBAHps
S2rPqVi9H9sgiA2ANUURnQvhaYFnuQPMdRVRmALFOmoGPanXMqmpPtz2vjYoXS/O
jxhQ2299WQk8/WD0+7pDtMjhPj8sVtZP8fQ+LQT8XY7b+z2L6Bg6PFmTdWIPadij
g+7t6acprpfhkuvaqRLbFJr9U4cOW3ZqaAt26sq9sJOeDLmaajNwebtGMNjCHS66
6HJ4e2pNCSQM1KRtrRwJNIz8jufdtnj28RqfyASlhWfCmT+rryJ071o5A85UEsd1
zXYV727AnBm0wDDvwcHXTeC+tAvHU8L+jSqFdau2u8MR0O8ZKtnZdKh400EehVbz
hMdEmxhRkBuEwWKwfII=
-----END CERTIFICATE-----
Generated at Tue Nov 11 17:11:12 2025 by rpki-client