Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/uNzKfKgIpPbpXrUU6oGeZECqr9M.roa
File: uNzKfKgIpPbpXrUU6oGeZECqr9M.roa (raw, json)
Hash identifier: s2axTj5E8SUZbZUz5S5Jplmoh/pA2RgMQVViMaq+JJo=
Subject key identifier: B8:DC:CA:7C:A8:08:A4:F6:E9:5E:B5:14:EA:81:9E:64:40:AA:AF:D3
Certificate issuer: /CN=94d98e8fec680775a157266e0c6b78b141a34f5e
Certificate serial: 01994E2B77678D09C5DF42807014EA4C99E8
Authority key identifier: 94:D9:8E:8F:EC:68:07:75:A1:57:26:6E:0C:6B:78:B1:41:A3:4F:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lNmOj-xoB3WhVyZuDGt4sUGjT14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/uNzKfKgIpPbpXrUU6oGeZECqr9M.roa
Signing time: Mon 15 Sep 2025 16:18:15 +0000
ROA not before: Mon 15 Sep 2025 16:18:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15626
IP address blocks: 5.34.182.0/23 maxlen: 23
5.34.182.0/24 maxlen: 24
5.34.183.0/24 maxlen: 24
82.118.17.0/24 maxlen: 24
82.118.18.0/24 maxlen: 24
193.238.152.0/23 maxlen: 23
193.238.153.0/24 maxlen: 24
217.12.192.0/21 maxlen: 21
217.12.192.0/23 maxlen: 23
217.12.195.0/24 maxlen: 24
217.12.196.0/23 maxlen: 23
217.12.198.0/24 maxlen: 24
217.12.199.0/24 maxlen: 24
217.12.205.0/24 maxlen: 24
217.12.210.0/23 maxlen: 23
217.12.210.0/24 maxlen: 24
217.12.211.0/24 maxlen: 24
217.12.212.0/22 maxlen: 22
217.12.212.0/23 maxlen: 23
217.12.214.0/24 maxlen: 24
217.12.215.0/24 maxlen: 24
217.12.216.0/23 maxlen: 23
217.12.220.0/22 maxlen: 22
217.12.221.0/24 maxlen: 24
217.12.222.0/24 maxlen: 24
217.12.223.0/24 maxlen: 24
2a02:27a8::/32 maxlen: 32
2a02:27a8:feed::/48 maxlen: 48
2a02:27ad::/32 maxlen: 32
2a05:9407::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.mft
rsync://rpki.ripe.net/repository/DEFAULT/lNmOj-xoB3WhVyZuDGt4sUGjT14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Sep 2025 01:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:4e:2b:77:67:8d:09:c5:df:42:80:70:14:ea:4c:99:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94d98e8fec680775a157266e0c6b78b141a34f5e
Validity
Not Before: Sep 15 16:18:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b8dcca7ca808a4f6e95eb514ea819e6440aaafd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:65:c5:43:b9:2d:9f:cc:d3:bb:57:16:47:e8:
fe:5a:ce:81:e1:91:99:2a:3f:13:b3:14:fc:ac:47:
01:0e:04:a8:ae:d6:16:b8:cd:e2:75:db:38:cc:77:
07:d7:fa:72:bc:70:7f:59:ba:4d:dd:bf:6a:95:11:
46:b1:38:38:5b:2d:d7:73:10:9d:c4:ba:d6:56:54:
28:fb:81:42:f7:f1:14:d4:00:97:23:54:6c:2f:4c:
8f:ed:aa:80:f3:60:26:dd:63:a3:71:db:7b:9a:87:
ce:2d:16:e1:80:74:83:9a:de:bc:dc:ce:23:c3:07:
be:98:fe:0e:02:54:e1:28:a6:0a:f1:bd:24:ad:6e:
8d:9f:b5:d5:63:56:a5:c1:84:cb:3a:eb:95:0c:bc:
b9:24:e3:b1:75:a1:3c:3b:4a:44:ef:05:44:3b:63:
fb:45:99:d4:7e:8d:bc:c5:4b:3f:10:43:e0:a9:55:
53:0e:da:64:9a:74:4b:df:a6:7f:25:3f:ef:91:e2:
1f:bd:98:32:53:0a:a6:32:45:49:5e:21:75:37:5d:
ec:47:dc:c9:9d:f1:02:ad:fc:cf:2b:1d:19:bf:f8:
8f:ac:d0:eb:3f:ad:7d:c6:83:1b:08:1e:c8:11:d9:
5f:4e:6a:ce:e4:24:5c:d3:f0:f2:ca:50:1a:a7:63:
17:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:DC:CA:7C:A8:08:A4:F6:E9:5E:B5:14:EA:81:9E:64:40:AA:AF:D3
X509v3 Authority Key Identifier:
keyid:94:D9:8E:8F:EC:68:07:75:A1:57:26:6E:0C:6B:78:B1:41:A3:4F:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lNmOj-xoB3WhVyZuDGt4sUGjT14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/uNzKfKgIpPbpXrUU6oGeZECqr9M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.34.182.0/23
82.118.17.0-82.118.18.255
193.238.152.0/23
217.12.192.0/21
217.12.205.0/24
217.12.210.0-217.12.217.255
217.12.220.0/22
IPv6:
2a02:27a8::/32
2a02:27ad::/32
2a05:9407::/32
Signature Algorithm: sha256WithRSAEncryption
0a:2d:b1:21:3f:bc:60:af:6b:81:55:fa:7a:5e:03:3b:15:ea:
89:e5:b4:48:14:58:74:84:05:49:f2:4e:a1:23:10:9f:f4:06:
80:06:1a:f5:02:f3:b2:32:83:23:54:f6:9f:e1:9b:c6:32:5f:
97:9c:be:3c:58:26:12:50:d4:e1:c9:4c:85:ee:4c:e3:40:78:
24:6c:17:70:ab:15:aa:e5:67:1a:b8:03:c4:b6:41:da:12:5d:
08:5b:0a:a6:92:4d:df:9b:53:3c:13:80:87:f3:b7:a1:ec:0f:
21:d7:fc:a2:48:37:26:7b:d6:8a:08:ae:a5:df:14:24:d8:50:
97:9e:17:63:60:84:c9:c7:21:40:82:de:43:49:74:98:60:5d:
45:e4:ec:10:1e:af:49:29:fd:88:22:b8:4a:37:fd:c3:c1:1d:
f0:27:9d:53:cd:11:7d:48:59:67:c6:0c:51:ab:25:c5:6f:aa:
55:a0:15:37:ac:3b:97:4f:00:4f:29:04:9d:44:ed:1d:de:db:
cc:8b:06:bc:2e:5a:1c:70:f4:a8:c4:f8:6a:8d:e1:2f:e8:f1:
59:d5:98:08:d8:17:26:1b:af:03:20:d1:c3:25:0d:ca:f2:74:
53:c7:43:3d:ba:f6:26:8f:e9:21:1a:f4:3f:00:d4:e2:89:f2:
aa:c0:49:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 09:51:45 2025 by rpki-client