Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/uazpYdEQmWTVBrV_evjP-XWanVY.roa
File: uazpYdEQmWTVBrV_evjP-XWanVY.roa (raw, json)
Hash identifier: iJp6wx8I8gJIIDSXybtHw+nWLDmqjxbOfp6qXooDEPk=
Subject key identifier: B9:AC:E9:61:D1:10:99:64:D5:06:B5:7F:7A:F8:CF:F9:75:9A:9D:56
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 01990B89AF8DF5EDF1EA91CE4791DF0B915B
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/uazpYdEQmWTVBrV_evjP-XWanVY.roa
Signing time: Tue 02 Sep 2025 17:46:36 +0000
ROA not before: Tue 02 Sep 2025 17:46:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 52041
IP address blocks: 82.215.64.0/24 maxlen: 24
86.54.213.0/24 maxlen: 24
185.248.134.0/24 maxlen: 24
194.46.57.0/24 maxlen: 24
2a12:bec0:d0::/44 maxlen: 48
2a12:bec0:6a0::/44 maxlen: 44
2a12:bec0:e40::/44 maxlen: 44
2a12:bec0:7000::/48 maxlen: 48
2a12:bec0:7001::/48 maxlen: 48
2a12:bec0:7002::/48 maxlen: 48
2a12:bec0:7003::/48 maxlen: 48
2a12:bec0:7004::/48 maxlen: 48
2a12:bec0:7006::/48 maxlen: 48
2a12:bec0:7007::/48 maxlen: 48
2a12:bec0:7008::/48 maxlen: 48
2a12:bec0:b00b::/48 maxlen: 48
2a12:bec1::/32 maxlen: 48
2a12:bec1:2::/48 maxlen: 48
2a12:bec1:b00b::/48 maxlen: 48
2a12:bec2::/32 maxlen: 32
2a12:bec2::/48 maxlen: 48
2a12:bec2:b00b::/48 maxlen: 48
2a12:bec3:b00b::/48 maxlen: 48
2a12:bec4:20::/44 maxlen: 48
2a12:bec4:100::/44 maxlen: 44
2a12:bec4:1120::/44 maxlen: 44
2a12:bec4:1430::/44 maxlen: 44
2a12:bec4:1490::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 22:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:0b:89:af:8d:f5:ed:f1:ea:91:ce:47:91:df:0b:91:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Sep 2 17:46:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b9ace961d1109964d506b57f7af8cff9759a9d56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:81:ef:8e:5c:ac:7f:6d:ab:99:df:c9:a7:f3:
63:7b:a5:d8:4a:c0:de:4a:c7:ff:0e:72:74:86:04:
78:66:54:cf:54:ff:eb:4b:c7:e5:5e:22:4b:ed:67:
07:34:d3:66:74:fa:55:5b:7e:f3:c9:9d:1e:3c:ed:
72:f8:79:ab:18:33:51:32:b5:29:01:c7:24:57:48:
c9:8a:61:7a:cf:ff:fa:db:97:47:54:c9:d0:35:88:
a2:42:86:a9:c8:31:5c:a3:e9:0a:17:2b:df:74:9c:
4e:ba:18:75:93:24:f2:14:eb:97:de:5f:6d:37:ec:
24:93:8f:86:09:04:c1:f5:88:3b:05:84:cc:6c:da:
84:45:6f:cd:4a:5d:fc:e9:0f:8e:d8:0d:29:01:87:
68:9b:a5:ce:56:6b:65:ae:99:4e:1b:6a:e4:53:ce:
6f:98:47:d0:be:7c:f4:e8:d1:a4:d6:ee:69:92:ed:
7c:f3:2e:87:aa:b0:06:b8:cb:b5:ec:68:00:8c:6f:
a1:34:b2:9d:cc:d1:89:7b:b3:ef:24:29:58:f5:d8:
da:02:4d:3f:f9:8f:5d:1f:5e:f5:e8:5b:5b:c3:88:
1c:c1:8d:e1:5b:9c:c1:67:a0:3b:3e:01:d0:20:04:
62:10:85:4c:c3:ae:0a:27:1b:18:de:d9:04:57:a0:
39:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:AC:E9:61:D1:10:99:64:D5:06:B5:7F:7A:F8:CF:F9:75:9A:9D:56
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/uazpYdEQmWTVBrV_evjP-XWanVY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.215.64.0/24
86.54.213.0/24
185.248.134.0/24
194.46.57.0/24
IPv6:
2a12:bec0:d0::/44
2a12:bec0:6a0::/44
2a12:bec0:e40::/44
2a12:bec0:7000::-2a12:bec0:7004:ffff:ffff:ffff:ffff:ffff
2a12:bec0:7006::-2a12:bec0:7008:ffff:ffff:ffff:ffff:ffff
2a12:bec0:b00b::/48
2a12:bec1::-2a12:bec2:ffff:ffff:ffff:ffff:ffff:ffff
2a12:bec3:b00b::/48
2a12:bec4:20::/44
2a12:bec4:100::/44
2a12:bec4:1120::/44
2a12:bec4:1430::/44
2a12:bec4:1490::/44
Signature Algorithm: sha256WithRSAEncryption
c0:3f:34:81:03:44:f6:ae:6b:99:90:be:99:89:a3:39:d2:c4:
b7:cd:8b:f4:16:cf:20:01:dd:cf:7a:ac:91:96:6c:01:04:e3:
49:e1:e7:a4:e0:c1:e7:76:a0:5a:96:3a:2b:79:0c:81:20:b4:
dd:e5:28:1f:31:cc:b3:a6:5b:72:92:2b:d3:81:7f:bf:c2:cc:
22:37:fb:72:64:ef:18:9d:9b:6e:7a:bd:93:3e:53:b5:8e:1e:
95:2e:6a:03:54:ab:b3:3d:7d:e1:f0:a7:85:eb:aa:f3:86:25:
f6:e3:10:ea:c8:b2:a3:27:ea:b9:88:db:53:04:ba:72:85:33:
06:3c:d4:1b:1d:e9:ec:0c:a6:45:12:39:74:c6:a4:f3:93:5e:
bf:ca:f3:d6:21:d6:09:f8:34:d0:73:0d:ce:de:46:0b:51:3b:
fa:78:21:78:9d:07:47:92:ce:84:78:b0:f3:45:c0:fb:d7:b1:
81:72:79:19:46:3b:cc:38:01:e8:aa:44:25:89:48:75:4c:da:
cc:b4:5f:2f:dd:e3:ec:8c:69:e1:b8:01:cb:5d:79:cd:4e:4f:
65:c5:79:da:6d:b9:1d:7f:63:c6:77:7d:ab:7a:12:7d:01:68:
68:ad:a8:51:0e:ea:86:ae:e0:e1:79:03:89:a2:3b:56:f1:2b:
ae:be:d7:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 06:10:06 2025 by rpki-client