Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/UmT_FPNudJQYBwqyPv7j4HzM6OI.roa
File: UmT_FPNudJQYBwqyPv7j4HzM6OI.roa (raw, json)
Hash identifier: NKhaW/ar4SkRZtdC4lRXtLsrSNtnCSoqYCwabcn3p1g=
Subject key identifier: 52:64:FF:14:F3:6E:74:94:18:07:0A:B2:3E:FE:E3:E0:7C:CC:E8:E2
Certificate issuer: /CN=064dcd0ee7014efb2e3b554fbb706384ef11d051
Certificate serial: 019A34C3912D201095E61872300DBC6E86DC
Authority key identifier: 06:4D:CD:0E:E7:01:4E:FB:2E:3B:55:4F:BB:70:63:84:EF:11:D0:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bk3NDucBTvsuO1VPu3BjhO8R0FE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/UmT_FPNudJQYBwqyPv7j4HzM6OI.roa
Signing time: Thu 30 Oct 2025 10:57:03 +0000
ROA not before: Thu 30 Oct 2025 10:57:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198949
IP address blocks: 193.135.123.0/24 maxlen: 24
2a09:fb00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bk3NDucBTvsuO1VPu3BjhO8R0FE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Nov 2025 13:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:34:c3:91:2d:20:10:95:e6:18:72:30:0d:bc:6e:86:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=064dcd0ee7014efb2e3b554fbb706384ef11d051
Validity
Not Before: Oct 30 10:57:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5264ff14f36e749418070ab23efee3e07ccce8e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1a:36:5e:5c:e4:eb:cd:84:19:21:9a:e6:05:
63:cd:67:89:33:85:df:0d:c8:85:02:6e:7a:05:c6:
69:78:2e:f4:33:27:7e:58:af:2b:02:0f:c9:81:7e:
02:30:76:7e:66:fd:59:4d:8c:dd:2a:64:fb:0e:98:
91:24:e9:75:c5:84:4f:2a:76:8f:2e:c4:65:39:d0:
84:c2:33:6d:9b:a8:12:e3:16:6e:85:7e:b0:46:c3:
d5:d9:8c:b7:e7:eb:bd:8e:b6:be:26:d6:88:b3:52:
d2:57:11:54:f7:84:79:4c:29:61:74:32:9c:b8:41:
a9:54:25:f4:1a:f8:86:24:bd:f0:1f:f9:2a:c8:61:
a3:1a:51:1d:2b:85:ad:e6:b2:64:1b:7c:8d:b8:81:
c8:4d:bf:91:d2:62:95:2b:c6:92:90:5f:b5:f0:18:
66:ba:ad:66:9c:b3:dc:55:ea:a1:da:aa:e6:ba:4d:
83:a3:87:40:47:25:a1:42:1b:27:c5:a0:3d:48:5f:
d5:28:12:5c:66:d2:cd:c4:4d:c9:b8:8a:9e:07:5a:
10:37:c7:6e:d5:58:44:72:23:bb:58:fe:66:99:ea:
b1:9f:ba:fc:ff:a3:fc:66:bf:b8:71:4a:10:f8:4c:
bb:d3:c9:2a:f8:d6:fe:d0:18:ad:41:82:d1:ba:2e:
25:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:64:FF:14:F3:6E:74:94:18:07:0A:B2:3E:FE:E3:E0:7C:CC:E8:E2
X509v3 Authority Key Identifier:
keyid:06:4D:CD:0E:E7:01:4E:FB:2E:3B:55:4F:BB:70:63:84:EF:11:D0:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bk3NDucBTvsuO1VPu3BjhO8R0FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/UmT_FPNudJQYBwqyPv7j4HzM6OI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.135.123.0/24
IPv6:
2a09:fb00::/29
Signature Algorithm: sha256WithRSAEncryption
b1:6b:b2:d1:6c:3c:80:9d:f4:3f:34:f2:24:85:24:60:61:ac:
ce:15:7a:ed:f5:94:2e:12:1e:7a:23:cf:2e:8d:3f:29:a1:36:
01:e5:6d:a3:c4:93:28:41:a4:aa:5a:8c:57:d5:83:11:7d:29:
d3:6e:90:d5:42:91:13:88:29:11:72:47:6e:eb:f4:db:2b:e9:
b0:49:8d:08:8f:3a:e2:e9:68:e1:72:f3:76:5e:61:63:45:92:
78:ad:53:9f:ae:80:09:4f:e3:19:d8:6e:ef:8d:ad:f4:85:7b:
d9:6f:68:b2:bd:0a:87:5f:ed:9f:83:81:23:5d:e7:1e:fb:ee:
ee:ad:97:a0:51:77:9e:02:ee:3e:c2:03:65:4b:64:3d:cc:d6:
4a:ff:f8:24:da:35:07:90:e8:5c:95:d9:03:fa:b1:ea:40:77:
bb:92:dc:d4:30:cc:72:68:d5:fc:c5:f2:e2:5f:ad:c3:cc:72:
a4:14:47:53:3c:44:f9:55:32:16:47:76:21:4e:cd:ba:e3:11:
8f:ed:8c:51:f5:7d:01:25:15:56:5e:3f:86:0d:2d:13:27:72:
9b:a5:5f:8f:2f:18:ce:03:fc:81:ca:73:70:7f:11:df:12:62:
7b:85:49:c1:05:73:23:84:5b:7f:0b:86:f3:19:5d:62:b1:97:
d3:97:61:c9
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZo0w5EtIBCV5hhyMA28bobcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2NGRjZDBlZTcwMTRlZmIyZTNiNTU0ZmJiNzA2Mzg0ZWYx
MWQwNTEwHhcNMjUxMDMwMTA1NzAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MjY0ZmYxNGYzNmU3NDk0MTgwNzBhYjIzZWZlZTNlMDdjY2NlOGUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxo2Xlzk682EGSGa5gVjzWeJM4Xf
DciFAm56BcZpeC70Myd+WK8rAg/JgX4CMHZ+Zv1ZTYzdKmT7DpiRJOl1xYRPKnaP
LsRlOdCEwjNtm6gS4xZuhX6wRsPV2Yy35+u9jra+JtaIs1LSVxFU94R5TClhdDKc
uEGpVCX0GviGJL3wH/kqyGGjGlEdK4Wt5rJkG3yNuIHITb+R0mKVK8aSkF+18Bhm
uq1mnLPcVeqh2qrmuk2Do4dARyWhQhsnxaA9SF/VKBJcZtLNxE3JuIqeB1oQN8du
1VhEciO7WP5mmeqxn7r8/6P8Zr+4cUoQ+Ey708kq+Nb+0BitQYLRui4lOQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFFJk/xTzbnSUGAcKsj7+4+B8zOjiMB8GA1UdIwQY
MBaAFAZNzQ7nAU77LjtVT7twY4TvEdBRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmszTkR1Y0JUdnN1TzFWUHUzQmpoTzhSMEZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9kY2IwOGMtNTUxNS00NDVjLWFkOTkt
ZmI0NzQwZmRhMjUwLzEvVW1UX0ZQTnVkSlFZQndxeVB2N2o0SHpNNk9JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS9kY2IwOGMtNTUxNS00NDVjLWFkOTktZmI0NzQwZmRhMjUw
LzEvQmszTkR1Y0JUdnN1TzFWUHUzQmpoTzhSMEZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwYd7MA0E
AgACMAcDBQMqCfsAMA0GCSqGSIb3DQEBCwUAA4IBAQCxa7LRbDyAnfQ/NPIkhSRg
YazOFXrt9ZQuEh56I88ujT8poTYB5W2jxJMoQaSqWoxX1YMRfSnTbpDVQpETiCkR
ckdu6/TbK+mwSY0Ijzri6WjhcvN2XmFjRZJ4rVOfroAJT+MZ2G7vja30hXvZb2iy
vQqHX+2fg4EjXece++7urZegUXeeAu4+wgNlS2Q9zNZK//gk2jUHkOhcldkD+rHq
QHe7ktzUMMxyaNX8xfLiX63DzHKkFEdTPET5VTIWR3YhTs264xGP7YxR9X0BJRVW
Xj+GDS0TJ3KbpV+PLxjOA/yBynNwfxHfEmJ7hUnBBXMjhFt/C4bzGV1isZfTl2HJ
-----END CERTIFICATE-----
Generated at Mon Nov 3 22:15:41 2025 by rpki-client