Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/pUYXng4Iu_PkzthTK2XDGBTgf4U.roa
File: pUYXng4Iu_PkzthTK2XDGBTgf4U.roa (raw, json)
Hash identifier: 5j2gJKPXIaIlj0YYRI3X6XQMQvUedfi+MeSrwua0DlU=
Subject key identifier: A5:46:17:9E:0E:08:BB:F3:E4:CE:D8:53:2B:65:C3:18:14:E0:7F:85
Certificate issuer: /CN=37431f1be9fdc2419098479cde457bbf79571759
Certificate serial: 01991D133C8001C7862E4AAA0660AFFC3EB0
Authority key identifier: 37:43:1F:1B:E9:FD:C2:41:90:98:47:9C:DE:45:7B:BF:79:57:17:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N0MfG-n9wkGQmEec3kV7v3lXF1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/pUYXng4Iu_PkzthTK2XDGBTgf4U.roa
Signing time: Sat 06 Sep 2025 03:30:23 +0000
ROA not before: Sat 06 Sep 2025 03:30:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41717
IP address blocks: 185.211.133.0/24 maxlen: 32
185.211.134.0/24 maxlen: 32
185.211.135.0/24 maxlen: 32
2a0b:65c0:4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/N0MfG-n9wkGQmEec3kV7v3lXF1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/N0MfG-n9wkGQmEec3kV7v3lXF1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/N0MfG-n9wkGQmEec3kV7v3lXF1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 21:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1d:13:3c:80:01:c7:86:2e:4a:aa:06:60:af:fc:3e:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37431f1be9fdc2419098479cde457bbf79571759
Validity
Not Before: Sep 6 03:30:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a546179e0e08bbf3e4ced8532b65c31814e07f85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ac:89:48:82:fd:3f:44:39:fa:6a:99:3e:ac:
38:00:cd:aa:a1:bf:dc:53:71:8a:42:b8:d8:1c:4f:
8d:da:b6:0d:c0:9b:4f:6c:f7:fa:66:65:03:ae:20:
35:81:f4:b4:1f:8d:20:66:03:58:52:32:2b:3d:77:
ab:c3:be:00:e2:36:92:b2:d3:ec:e6:c1:3b:24:a0:
dd:a7:e1:14:fa:a1:9b:49:5f:5f:18:2f:bd:74:d7:
2b:96:22:f4:93:ef:0f:ac:19:0e:ca:be:39:0c:8c:
ae:3d:8f:7e:16:f0:f3:c3:ee:a9:b4:d4:f0:7e:0b:
93:67:e3:19:5e:5a:d8:65:18:51:2e:75:16:74:a1:
b7:97:91:c8:43:25:f2:3b:0b:cb:e8:b3:91:23:a0:
39:a2:8e:09:7f:8a:aa:0d:cd:3d:0d:df:ea:50:c9:
22:48:c7:3e:ad:fb:c1:1c:ac:c4:08:cd:27:19:14:
33:56:f8:61:88:f4:73:70:eb:ab:4b:70:18:c4:42:
88:0e:37:47:40:06:cb:86:5e:68:70:7c:f6:20:d6:
12:5e:cc:6a:5e:52:fc:b8:b6:d5:46:fd:f1:db:60:
ec:e2:3b:30:07:38:4c:40:53:7b:1d:7c:0c:ff:31:
e0:09:4e:b9:fc:13:d9:a5:c0:6e:e8:f1:b2:b1:4b:
d2:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:46:17:9E:0E:08:BB:F3:E4:CE:D8:53:2B:65:C3:18:14:E0:7F:85
X509v3 Authority Key Identifier:
keyid:37:43:1F:1B:E9:FD:C2:41:90:98:47:9C:DE:45:7B:BF:79:57:17:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0MfG-n9wkGQmEec3kV7v3lXF1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/pUYXng4Iu_PkzthTK2XDGBTgf4U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/N0MfG-n9wkGQmEec3kV7v3lXF1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.211.133.0-185.211.135.255
IPv6:
2a0b:65c0:4::/48
Signature Algorithm: sha256WithRSAEncryption
8a:37:fb:00:fc:0f:2d:4b:f1:44:88:11:e7:33:0b:6e:78:fe:
33:93:9e:8a:42:93:ab:ff:07:40:17:f3:2a:10:85:d5:1b:d9:
3a:92:c6:f5:95:35:3a:b1:ce:7d:64:5a:ce:b5:37:28:dd:7f:
7a:27:be:07:4b:9c:06:12:56:12:d3:64:12:ce:bf:7f:e0:68:
15:86:41:60:d9:ef:a2:54:90:0a:68:54:b3:82:d0:ff:26:b5:
5c:24:36:78:e8:16:2a:b7:d4:af:0b:f4:98:44:66:a9:8a:f8:
48:11:16:84:ea:17:66:d6:ba:0a:62:c0:37:9f:ea:db:9a:18:
f5:c4:f8:b3:af:d6:1d:ab:91:ea:a6:13:a8:df:ec:cb:90:ec:
73:f6:75:3f:7a:a6:2c:7c:7f:ae:3d:5c:22:58:72:68:2e:69:
2b:c6:6e:44:ab:ec:19:8c:31:37:c4:7d:09:da:c7:e6:4c:f1:
53:09:82:6f:85:77:89:29:f2:0b:3e:09:02:a8:f0:d7:c4:f4:
91:ef:44:bf:60:02:b9:d0:1b:ca:ab:37:50:ff:aa:a0:a7:eb:
a2:89:c1:5b:28:fe:6c:20:71:e0:39:1c:b2:74:3e:9f:2c:23:
7a:7d:60:c2:b6:7b:41:54:9d:be:81:db:29:b8:e8:4d:7e:de:
b3:56:e8:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 06:30:17 2025 by rpki-client