Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/UbvGC_vVuccRdi56drVeTtbeuyc.roa
File: UbvGC_vVuccRdi56drVeTtbeuyc.roa (raw, json)
Hash identifier: OKja/GGTYH8ooRDP1zsyKVxKdxkSIR376kJkWGvy+bc=
Subject key identifier: 51:BB:C6:0B:FB:D5:B9:C7:11:76:2E:7A:76:B5:5E:4E:D6:DE:BB:27
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019A345D07F18EFE3EFBF3403D007BCE8D9A
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/UbvGC_vVuccRdi56drVeTtbeuyc.roa
Signing time: Thu 30 Oct 2025 09:05:03 +0000
ROA not before: Thu 30 Oct 2025 09:05:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205886
IP address blocks: 81.168.65.0/24 maxlen: 24
82.152.70.0/24 maxlen: 24
82.152.92.0/24 maxlen: 24
82.152.118.0/24 maxlen: 24
82.153.42.0/24 maxlen: 24
82.153.53.0/24 maxlen: 24
82.153.86.0/24 maxlen: 24
82.153.180.0/24 maxlen: 24
109.176.20.0/24 maxlen: 24
109.176.91.0/24 maxlen: 24
212.38.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:34:5d:07:f1:8e:fe:3e:fb:f3:40:3d:00:7b:ce:8d:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Oct 30 09:05:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=51bbc60bfbd5b9c711762e7a76b55e4ed6debb27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3a:39:58:7c:16:61:df:7b:7b:a3:31:8e:a5:
64:d3:91:ed:02:ac:9b:a8:8b:fd:9a:4d:1b:f1:89:
92:b9:86:99:6c:be:4a:b6:36:2c:29:86:df:b9:00:
cd:dd:47:c0:3a:91:e4:d0:f9:73:3c:e7:cf:86:e9:
9d:48:dc:37:49:c2:d1:35:34:7c:78:fe:cf:28:ce:
31:aa:97:b6:d5:65:cf:59:4e:cd:e4:2b:2a:68:62:
41:e4:06:cf:21:4b:95:99:4e:68:07:89:d1:ce:92:
76:b9:e5:58:7f:a8:80:9e:5a:15:9a:05:f4:53:c1:
cb:f6:c3:f1:70:41:87:16:60:76:6f:f3:36:53:8c:
44:db:ad:b2:42:54:94:62:e6:53:1e:fe:a2:ff:05:
83:c6:f9:4c:79:a1:fe:c8:b4:e7:3a:14:0a:c7:c1:
94:e2:fc:53:00:17:7b:5e:84:2c:9d:74:23:42:d4:
31:8d:ed:ab:19:3a:82:b6:de:23:db:58:89:9d:86:
55:cb:1a:87:fd:dd:c8:4d:3e:17:bc:38:06:28:63:
7c:5a:70:20:26:b8:68:1b:38:b5:d0:f7:c7:2a:01:
3b:a8:54:95:06:eb:40:95:a6:34:0e:f6:f1:01:9e:
53:49:b6:c0:5b:71:09:4d:db:67:a6:e4:39:24:f5:
04:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:BB:C6:0B:FB:D5:B9:C7:11:76:2E:7A:76:B5:5E:4E:D6:DE:BB:27
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/UbvGC_vVuccRdi56drVeTtbeuyc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.65.0/24
82.152.70.0/24
82.152.92.0/24
82.152.118.0/24
82.153.42.0/24
82.153.53.0/24
82.153.86.0/24
82.153.180.0/24
109.176.20.0/24
109.176.91.0/24
212.38.81.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:b3:23:29:7b:c4:13:cb:9b:17:29:72:7b:89:bf:7a:b1:d9:
c6:6e:c7:a1:d4:74:59:5b:2d:9a:e9:0d:b9:e3:d2:37:10:c0:
e1:0d:f5:38:57:41:6e:88:f4:ae:bf:1a:9b:b1:55:d4:61:72:
63:cf:23:f7:f8:e9:34:fb:26:0d:c4:9b:4b:e2:93:91:a5:31:
30:03:0b:2d:e7:fb:1b:61:8a:7f:1b:0d:5b:7e:6b:77:96:9c:
e7:1e:7c:b1:b2:c3:86:77:88:67:95:55:47:ae:02:25:29:a6:
4f:c1:c8:ff:40:84:08:f2:c6:3a:f9:f7:46:1d:0f:54:cc:f9:
7e:29:fd:5c:e9:77:fa:eb:78:bf:ea:0e:82:ba:1d:ad:ff:09:
82:7c:45:8d:1d:54:7b:d0:a3:c3:7b:aa:5c:5e:88:7f:9e:88:
cc:f8:72:80:43:c3:5d:ae:2c:6a:02:91:76:c3:d7:ee:49:82:
68:56:24:ab:bb:45:fb:f8:b6:42:58:81:d3:87:73:92:7c:06:
aa:8b:5d:62:ba:ed:ba:aa:c2:3d:01:5e:59:63:0d:6d:1e:2d:
47:4e:2f:c1:ca:37:16:79:a6:9d:64:9d:d8:f0:4f:06:32:85:
9a:27:55:82:ed:d1:5b:e0:79:44:75:9c:91:ef:63:30:ce:26:
2e:f0:48:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 08:29:44 2025 by rpki-client