Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/UgHpKlqBO-yG6MAk71veImS8A_k.roa
File: UgHpKlqBO-yG6MAk71veImS8A_k.roa (raw, json)
Hash identifier: H2wN0fclsHaCiJncl4vgreBXyhU1eH5A4SSBf1lbp5Q=
Subject key identifier: 52:01:E9:2A:5A:81:3B:EC:86:E8:C0:24:EF:5B:DE:22:64:BC:03:F9
Certificate issuer: /CN=826605b4d27f13968e8794e6ef091223748817d8
Certificate serial: 01974287FE099E427C6C0435C8B59AB7D27D
Authority key identifier: 82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/UgHpKlqBO-yG6MAk71veImS8A_k.roa
Signing time: Thu 05 Jun 2025 23:58:18 +0000
ROA not before: Thu 05 Jun 2025 23:58:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 92.50.0.0/19 maxlen: 19
92.50.32.0/19 maxlen: 19
147.136.68.0/22 maxlen: 24
147.136.76.0/22 maxlen: 24
147.136.84.0/22 maxlen: 24
168.199.128.0/22 maxlen: 24
168.199.160.0/22 maxlen: 24
168.199.192.0/22 maxlen: 24
168.199.212.0/22 maxlen: 24
185.101.244.0/23 maxlen: 24
185.101.246.0/23 maxlen: 24
185.101.252.0/23 maxlen: 23
185.101.254.0/23 maxlen: 23
185.171.252.0/23 maxlen: 23
185.171.253.0/24 maxlen: 24
185.171.254.0/23 maxlen: 23
185.226.204.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 14:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:42:87:fe:09:9e:42:7c:6c:04:35:c8:b5:9a:b7:d2:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=826605b4d27f13968e8794e6ef091223748817d8
Validity
Not Before: Jun 5 23:58:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5201e92a5a813bec86e8c024ef5bde2264bc03f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2a:b3:55:b4:a8:93:22:63:bb:75:9e:92:a7:
17:c9:f7:3a:60:86:3c:26:12:98:94:b1:8d:44:15:
52:5f:1e:8b:2b:ba:09:2f:41:db:76:7e:c2:d0:f7:
6b:be:4d:46:a1:11:6f:8f:11:c9:c7:db:65:cc:48:
04:40:cc:c0:55:2d:1f:c7:d7:a6:07:62:67:e6:79:
78:82:0f:3c:f6:4f:a9:c6:78:e7:d8:76:9d:38:08:
be:50:40:8e:4f:94:14:2b:04:33:c6:3d:be:d5:ef:
a4:b2:28:81:b2:08:03:68:9e:8b:5e:fa:2f:6b:bd:
1b:68:07:e2:65:49:f7:15:ea:11:ef:d6:20:78:c5:
c9:00:ea:3c:0b:e6:6a:16:53:9f:d1:a1:f9:5c:f1:
ae:17:6c:33:06:e0:8f:ba:3e:4e:89:7d:c4:c0:fa:
3e:7d:e8:f8:f4:8d:f0:28:3a:aa:ce:dc:54:74:3d:
d1:33:cf:c8:c7:8f:d7:a6:29:0e:a1:c8:cc:2c:88:
fa:56:0e:22:90:eb:95:0e:39:90:2a:34:f0:f8:1e:
e5:6d:17:85:22:ad:3e:4c:48:43:7e:41:2c:20:a8:
ea:71:fe:29:9e:69:7c:32:d8:09:fc:b4:3a:29:21:
6e:39:45:f9:08:ce:01:48:4a:38:5b:f8:b2:18:69:
5f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:01:E9:2A:5A:81:3B:EC:86:E8:C0:24:EF:5B:DE:22:64:BC:03:F9
X509v3 Authority Key Identifier:
keyid:82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/UgHpKlqBO-yG6MAk71veImS8A_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.50.0.0/18
147.136.68.0/22
147.136.76.0/22
147.136.84.0/22
168.199.128.0/22
168.199.160.0/22
168.199.192.0/22
168.199.212.0/22
185.101.244.0/22
185.101.252.0/22
185.171.252.0/22
185.226.204.0/23
Signature Algorithm: sha256WithRSAEncryption
8e:25:5c:c3:a6:fe:f5:34:4b:3f:21:a0:3e:8f:b8:85:be:d7:
87:5d:8f:20:f1:8e:6e:ad:03:5d:1e:e9:9a:a5:ee:89:3e:74:
f0:28:99:a7:1d:4a:fd:8c:b8:c1:66:3f:86:70:12:c8:76:bc:
c7:5a:64:23:e4:9b:c7:f9:71:5b:aa:b0:a5:b3:c8:10:5e:31:
ad:31:4f:0f:47:5e:c1:f0:81:2b:43:5c:67:c4:db:1a:a5:23:
1f:13:0d:48:34:31:5c:19:b3:30:b1:bb:f3:8b:95:69:d9:a6:
cf:60:69:7f:ad:c9:6c:26:83:6d:61:70:36:e7:03:61:d9:9e:
41:b1:9d:2f:33:ce:08:6e:28:10:f2:c6:6d:bc:12:c7:5c:37:
77:91:76:6f:56:c4:8c:c9:2e:54:ec:50:4c:2e:58:c5:a6:ec:
23:21:f4:bf:a9:e0:2b:a3:f1:d9:10:de:42:e4:9d:08:f2:e9:
80:b8:44:49:92:47:30:fa:d6:30:76:7f:74:48:fb:ef:76:06:
bf:57:84:9b:9d:83:15:c1:6c:53:c1:bd:88:bb:48:1d:2e:88:
54:5d:54:8e:ba:c3:d9:85:a2:4f:2d:75:b3:d7:6d:94:31:cd:
76:96:10:54:5d:40:a1:0c:05:e5:34:fa:b9:86:68:d1:43:b3:
dd:ad:92:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:56:09 2025 by rpki-client