Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/uYfTiZUenieDLAqzAqEtKjXxmxY.roa
File: uYfTiZUenieDLAqzAqEtKjXxmxY.roa (raw, json)
Hash identifier: crjZ6u+zfD5XfvP7WF32qEhp4QqD5Zqy96hmKLxZuNo=
Subject key identifier: B9:87:D3:89:95:1E:9E:27:83:2C:0A:B3:02:A1:2D:2A:35:F1:9B:16
Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Certificate serial: 01991AE3D9EA5C00BAB7E6DB6E91414D44E1
Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/uYfTiZUenieDLAqzAqEtKjXxmxY.roa
Signing time: Fri 05 Sep 2025 17:19:24 +0000
ROA not before: Fri 05 Sep 2025 17:19:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58061
IP address blocks: 170.168.4.0/24 maxlen: 24
170.168.5.0/24 maxlen: 24
170.168.26.0/24 maxlen: 24
170.168.27.0/24 maxlen: 24
170.168.32.0/24 maxlen: 24
170.168.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1a:e3:d9:ea:5c:00:ba:b7:e6:db:6e:91:41:4d:44:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Validity
Not Before: Sep 5 17:19:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b987d389951e9e27832c0ab302a12d2a35f19b16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:44:06:7a:af:24:46:a8:7c:69:16:ce:d9:71:
47:20:60:13:de:7e:80:f3:a0:c9:70:bc:1e:9f:44:
43:1e:1b:75:ab:e8:06:36:ae:c6:78:5b:60:a8:9a:
7c:57:a8:f2:b5:66:69:6c:bc:20:c3:a0:1b:5c:80:
00:e4:25:73:b8:bf:01:44:8e:1c:59:78:43:04:f5:
d2:f6:b2:4f:c0:9f:5e:45:24:f9:00:f1:d0:02:93:
18:ee:f8:3a:c6:dc:09:9f:19:de:88:b2:ab:c7:37:
fb:39:9c:eb:1d:54:c7:59:12:a0:ea:fe:53:70:1e:
03:e2:ff:f8:f5:9f:28:f0:7a:45:2f:1d:27:4c:5f:
c1:8e:7f:e1:7d:de:1a:11:42:78:e3:6d:88:41:78:
f0:6f:e5:8e:f7:a8:22:fa:ba:b9:84:a9:dc:e7:93:
8e:d7:a5:e7:75:a0:6b:81:45:d5:25:97:d1:b4:3d:
3e:0b:f8:04:cf:a2:77:94:c6:cc:f3:79:3b:5f:a0:
f1:34:c4:47:48:ee:e2:24:d3:ae:f3:bb:c9:1e:eb:
b0:62:a7:27:88:20:88:8e:1f:f4:0f:5e:28:26:18:
72:5b:96:05:85:e3:0f:86:a0:9e:ab:aa:f4:93:c2:
f8:c4:d6:23:a9:ea:e7:4c:06:5c:90:74:ab:20:ad:
99:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:87:D3:89:95:1E:9E:27:83:2C:0A:B3:02:A1:2D:2A:35:F1:9B:16
X509v3 Authority Key Identifier:
keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/uYfTiZUenieDLAqzAqEtKjXxmxY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.168.4.0/23
170.168.26.0/23
170.168.32.0/24
170.168.41.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:d8:fe:f9:13:69:3b:42:09:d1:9b:68:77:6e:bd:59:8a:78:
2e:39:15:17:ba:73:60:2a:69:7e:b4:92:b7:89:3e:89:5b:f0:
4e:0b:6c:87:c2:fc:82:88:fd:3e:b2:84:04:0f:08:08:a9:98:
d1:c6:7d:65:89:c3:64:58:23:c9:2d:54:c2:4d:38:d7:78:7c:
9b:f8:c4:e2:36:f8:0d:8a:ff:9c:28:fb:23:1b:5a:f0:4b:fd:
e8:c4:2e:2a:74:7d:c2:b1:1f:fd:ef:13:16:f5:0c:90:f4:f4:
fd:5c:e8:9d:a8:46:ef:4a:81:d5:de:dd:8b:80:d4:5a:f5:59:
27:f9:43:9b:c7:f6:4f:ed:c3:04:c0:c2:4a:a1:88:1a:df:ac:
b3:76:8a:d5:4d:7f:c9:67:23:17:0f:8c:4e:64:89:55:80:1f:
c8:d5:84:fd:d2:5d:23:0a:fc:b6:88:e2:29:95:9b:a5:30:15:
04:2d:57:84:e2:5a:4c:04:f9:4a:eb:5f:f9:67:b8:3c:27:dd:
5e:cf:3b:64:af:5a:66:0c:49:34:ff:a7:70:77:67:de:dd:6f:
76:15:2e:d4:1a:f1:64:5a:fc:a9:ab:e7:a5:d1:bc:e5:06:6f:
bb:55:b0:a7:cd:f1:73:db:b3:11:62:ee:50:61:15:97:d4:1e:
f0:e2:47:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 07:29:52 2025 by rpki-client