Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/U-IyMhrcBxpT3UtliSVfjDWlPv8.roa
File: U-IyMhrcBxpT3UtliSVfjDWlPv8.roa (raw, json)
Hash identifier: EXgV78rvyO1oAJdlXEtogQ+OZ2mue8BIYb+CYomGh14=
Subject key identifier: 53:E2:32:32:1A:DC:07:1A:53:DD:4B:65:89:25:5F:8C:35:A5:3E:FF
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 01991542D1755C5946734C24A3FABCBBA871
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/U-IyMhrcBxpT3UtliSVfjDWlPv8.roa
Signing time: Thu 04 Sep 2025 15:05:24 +0000
ROA not before: Thu 04 Sep 2025 15:05:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28546
IP address blocks: 85.92.124.0/24 maxlen: 24
85.92.125.0/24 maxlen: 24
85.92.126.0/24 maxlen: 24
85.92.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 22:03:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:15:42:d1:75:5c:59:46:73:4c:24:a3:fa:bc:bb:a8:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Sep 4 15:05:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=53e232321adc071a53dd4b6589255f8c35a53eff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f4:c4:26:55:f5:88:7b:34:d9:9e:e2:0a:b4:
db:da:85:e2:ac:8f:cc:90:8f:6c:fe:8d:f0:97:ce:
3b:92:97:60:b6:a8:e6:1b:e4:2a:90:16:ae:96:9c:
59:49:86:a0:7f:a1:c2:43:26:ea:8a:1e:c4:66:67:
e1:90:48:6e:15:14:30:e7:a8:24:b9:5f:5b:1b:d8:
fa:be:36:a8:ce:7f:f5:94:ef:90:76:3e:fd:b9:d7:
59:8b:3f:98:d5:79:0a:39:dc:b3:d1:66:81:29:ce:
35:7d:7f:7f:ca:bb:af:c9:43:2b:77:af:43:6a:a8:
e0:8f:91:54:ec:92:91:c2:b4:16:e7:d1:af:43:7d:
f2:42:6e:c0:11:7b:5f:d2:19:a7:ba:5c:9f:92:b8:
e0:00:99:96:50:3b:30:4f:99:66:bf:41:c4:1e:63:
a3:74:25:49:6c:c5:79:91:24:a7:53:a8:3f:b5:fa:
77:8f:43:97:5d:94:9d:e2:cc:af:33:08:5a:0a:8e:
58:e7:fa:b2:2b:0b:ac:af:79:9f:33:3d:d8:09:d1:
8f:8b:ac:a4:9b:17:16:80:05:44:a0:c5:e6:14:17:
ea:01:31:0a:dd:b6:34:9d:e9:b6:9c:d9:cd:31:bc:
62:96:cc:9e:9e:2a:b4:80:74:07:4e:f5:81:e9:ff:
ec:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:E2:32:32:1A:DC:07:1A:53:DD:4B:65:89:25:5F:8C:35:A5:3E:FF
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/U-IyMhrcBxpT3UtliSVfjDWlPv8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.92.124.0/22
Signature Algorithm: sha256WithRSAEncryption
bf:a2:b8:87:83:28:f9:ca:29:6d:c3:81:80:62:4b:d3:81:da:
00:08:85:40:64:2e:b7:94:0b:78:4b:e5:7a:6d:34:e8:d6:ef:
c7:5d:cb:77:86:ce:75:96:94:43:99:8d:27:42:8c:74:3a:98:
a1:6b:8f:81:b6:f6:c6:3f:26:78:77:8e:ba:36:3a:cf:9f:6d:
34:f2:81:de:e5:38:be:77:b7:c4:ac:f2:a7:18:01:a9:c3:9d:
fe:e2:10:df:bb:6e:20:04:53:dc:cd:53:88:b9:71:73:90:4c:
d2:3b:c3:cf:80:8a:03:fc:9a:71:a2:c5:67:cd:c1:90:46:e3:
99:98:dd:26:98:8b:f3:a7:89:54:67:33:36:4d:15:2a:11:12:
3b:aa:b5:ed:da:32:cd:e4:e4:a2:c2:c5:82:02:02:85:23:85:
5c:8b:ed:9d:e5:47:21:9c:b5:2e:0c:d8:7f:00:ed:98:64:d3:
7c:cb:01:a2:50:6e:c6:57:aa:88:84:df:b6:2c:8a:19:fa:0e:
c6:e0:b1:ef:ac:66:b8:60:90:b1:42:93:bb:65:ac:74:f0:6b:
d2:b3:d3:90:7a:a4:09:0d:1d:37:23:a5:1d:81:14:9b:67:c2:
ee:67:f9:84:98:a5:19:5a:82:d1:1c:f7:58:1f:be:27:c4:40:
5f:12:93:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 07:58:38 2025 by rpki-client