Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/83b07f-1d22-4ae0-a2de-4e0aa42a15a8/1/UzaT3qczRx9MrIyKWc7cOxkA9jA.roa
File: UzaT3qczRx9MrIyKWc7cOxkA9jA.roa (raw, json)
Hash identifier: YYx63eLBoapHAc3VPYXZUKfQcDvkGRH5yytzJR0a6J4=
Subject key identifier: 53:36:93:DE:A7:33:47:1F:4C:AC:8C:8A:59:CE:DC:3B:19:00:F6:30
Certificate issuer: /CN=5a756994bb292e49ecc6337b7f95d69ee2af61e1
Certificate serial: 019A2FB4180BC971BBAA6920B174A84B6DD0
Authority key identifier: 5A:75:69:94:BB:29:2E:49:EC:C6:33:7B:7F:95:D6:9E:E2:AF:61:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WnVplLspLknsxjN7f5XWnuKvYeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/83b07f-1d22-4ae0-a2de-4e0aa42a15a8/1/UzaT3qczRx9MrIyKWc7cOxkA9jA.roa
Signing time: Wed 29 Oct 2025 11:22:03 +0000
ROA not before: Wed 29 Oct 2025 11:22:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207110
IP address blocks: 185.39.110.0/23 maxlen: 24
212.7.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/83b07f-1d22-4ae0-a2de-4e0aa42a15a8/1/WnVplLspLknsxjN7f5XWnuKvYeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/83b07f-1d22-4ae0-a2de-4e0aa42a15a8/1/WnVplLspLknsxjN7f5XWnuKvYeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/WnVplLspLknsxjN7f5XWnuKvYeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2f:b4:18:0b:c9:71:bb:aa:69:20:b1:74:a8:4b:6d:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a756994bb292e49ecc6337b7f95d69ee2af61e1
Validity
Not Before: Oct 29 11:22:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=533693dea733471f4cac8c8a59cedc3b1900f630
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5d:a4:3b:2c:f9:f8:95:e7:1f:99:e5:1d:c2:
25:4b:10:cc:23:ad:3a:08:25:96:54:8c:3a:1e:8f:
37:b0:20:77:3c:f6:e2:da:a5:cf:b8:92:21:40:23:
76:5e:19:f9:d4:06:46:07:ba:a7:2e:d8:a5:55:47:
6b:ea:11:fd:97:03:50:77:08:8d:eb:20:ff:cf:cb:
29:19:db:bd:44:c6:7a:1c:9b:20:4e:19:46:4a:b7:
48:5e:99:8a:a9:ad:65:89:a9:d2:0c:ca:93:cf:9c:
8d:63:c6:97:75:4f:d2:ca:1b:71:cb:9a:a7:37:94:
8b:8b:a5:85:ad:02:c5:b2:c6:6c:11:2d:89:77:6a:
59:c2:03:6f:3f:63:81:22:ac:54:7c:f2:c6:41:ec:
4a:4c:f7:cf:35:6e:f6:7b:85:43:9f:09:93:ec:73:
5a:43:42:d8:d5:4f:b0:99:24:89:a5:8c:c9:46:45:
1c:fe:26:df:5a:f1:52:48:ba:21:7c:c2:e4:67:49:
b6:41:1f:90:2c:34:32:32:63:ef:62:31:f0:12:09:
85:ed:c5:93:c1:b1:bc:04:f8:02:69:00:fe:4b:5b:
6b:e2:2e:cb:91:92:cc:cc:da:6b:5f:f5:ad:31:77:
d7:24:29:74:96:f1:8c:99:94:a4:19:20:eb:bc:ee:
60:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:36:93:DE:A7:33:47:1F:4C:AC:8C:8A:59:CE:DC:3B:19:00:F6:30
X509v3 Authority Key Identifier:
keyid:5A:75:69:94:BB:29:2E:49:EC:C6:33:7B:7F:95:D6:9E:E2:AF:61:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WnVplLspLknsxjN7f5XWnuKvYeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/83b07f-1d22-4ae0-a2de-4e0aa42a15a8/1/UzaT3qczRx9MrIyKWc7cOxkA9jA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/83b07f-1d22-4ae0-a2de-4e0aa42a15a8/1/WnVplLspLknsxjN7f5XWnuKvYeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.39.110.0/23
212.7.177.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:ba:c3:7b:69:12:14:90:bd:ef:49:72:59:5b:1a:b9:ee:be:
50:89:e5:b0:56:a2:e9:28:31:9c:85:19:17:c8:3a:b6:bf:d8:
ff:91:00:7e:4c:72:27:ce:7d:2e:a3:74:a7:93:57:37:4e:26:
b4:d7:0b:eb:98:31:8f:e3:fa:b1:67:db:92:21:5c:19:af:06:
67:fa:ec:d7:16:79:32:51:2b:4e:9d:f1:aa:73:19:e9:09:55:
5d:a4:86:86:de:17:ac:93:56:0b:32:fa:3e:4f:7c:39:c7:a3:
54:77:f4:71:ad:8b:2b:ed:ad:e3:04:a9:7a:78:83:d4:21:b4:
3d:88:50:ce:a8:6b:bd:d3:75:b3:1b:94:4c:f5:cb:20:7a:25:
42:82:67:25:79:52:c1:ec:ed:de:e2:e4:8c:90:a1:0f:bd:ba:
46:0a:ec:1c:9b:31:4d:d8:91:f8:61:37:7b:8a:42:e0:ba:ff:
7e:29:31:fa:c0:39:9e:a1:b8:65:df:88:df:dc:24:36:0a:cb:
36:d3:2e:ae:3b:47:6e:df:27:bd:b8:58:c5:54:cf:8b:59:22:
f4:a2:d7:d9:2f:f3:c8:5f:a6:84:d1:0c:2f:48:ab:f7:ef:20:
60:54:6b:3a:1d:26:f1:73:00:e7:c8:f2:3a:d4:be:f1:e0:68:
92:9b:8d:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 19:25:51 2025 by rpki-client