Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/UQO82HwY3h5qxJz3XhxUlfT9GiQ.roa
File: UQO82HwY3h5qxJz3XhxUlfT9GiQ.roa (raw, json)
Hash identifier: pu79E0lxRnWgqdggO/8xrQskLSlvG2Uv43uGZeJ9LuI=
Subject key identifier: 51:03:BC:D8:7C:18:DE:1E:6A:C4:9C:F7:5E:1C:54:95:F4:FD:1A:24
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 019938CE1BE3EFCDF27B7799EE1974DD1C4F
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/UQO82HwY3h5qxJz3XhxUlfT9GiQ.roa
Signing time: Thu 11 Sep 2025 12:44:15 +0000
ROA not before: Thu 11 Sep 2025 12:44:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 77.242.146.0/23 maxlen: 24
83.137.153.0/24 maxlen: 24
88.151.56.0/23 maxlen: 24
88.209.201.0/24 maxlen: 24
88.209.207.0/24 maxlen: 24
88.209.232.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Sep 2025 00:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:38:ce:1b:e3:ef:cd:f2:7b:77:99:ee:19:74:dd:1c:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Sep 11 12:44:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5103bcd87c18de1e6ac49cf75e1c5495f4fd1a24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:1a:9b:2b:cf:a4:24:93:62:16:29:1a:f9:5d:
f8:57:1b:57:5c:bf:d6:6f:60:79:e3:3e:33:53:9d:
68:7b:18:83:3d:b3:0a:7d:50:7a:71:8a:da:25:e6:
9d:6a:92:8a:ac:84:b7:ac:40:ac:8e:df:de:cf:5e:
4e:6b:86:0d:b4:01:22:c7:c0:47:89:25:ab:87:8f:
d8:3d:0e:99:bd:57:bf:02:d6:71:da:3b:db:60:f4:
71:d1:3b:59:90:6b:5c:bd:9d:6e:a2:d5:b5:9e:e3:
cb:ee:81:7b:a3:5a:b6:c1:e4:d7:a5:c9:f4:7d:ac:
53:cf:8a:7f:36:1b:cb:9e:d7:66:8b:ae:19:7f:af:
da:a2:ab:03:25:7f:a2:99:f5:f0:df:c5:da:6b:3c:
2c:a5:14:b4:84:76:83:15:01:1c:45:55:13:98:ac:
cf:68:76:af:62:87:c4:c0:8d:dc:a3:a7:3c:3d:8d:
c1:b4:5f:a8:fd:cd:30:55:41:74:49:fe:06:56:21:
20:8f:42:41:10:85:b1:f9:ff:8c:89:f3:65:7f:20:
61:87:5d:ef:e2:16:1e:17:6d:6e:ef:22:7e:79:06:
5f:37:cb:04:bb:25:ee:b8:f5:48:10:46:8d:84:ba:
9a:d4:e2:ff:a6:4b:aa:f2:7c:56:5e:b6:0f:90:d5:
dd:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:03:BC:D8:7C:18:DE:1E:6A:C4:9C:F7:5E:1C:54:95:F4:FD:1A:24
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/UQO82HwY3h5qxJz3XhxUlfT9GiQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.242.146.0/23
83.137.153.0/24
88.151.56.0/23
88.209.201.0/24
88.209.207.0/24
88.209.232.0/22
Signature Algorithm: sha256WithRSAEncryption
01:65:e1:c0:c7:6d:fe:c6:50:21:3f:e7:d6:98:dd:14:26:9b:
46:d1:2a:46:85:99:0b:3b:88:23:f6:ed:4c:de:c8:a1:41:c4:
df:eb:2f:53:8d:35:9b:c9:ca:c8:b9:9b:db:dc:9b:d0:bc:50:
cb:c3:56:84:64:ff:13:da:bc:fb:ed:8f:bb:b9:36:af:13:1a:
0d:e9:b1:8a:bc:84:06:5d:71:da:eb:f8:3f:82:b1:fa:bc:bf:
02:fd:6b:cd:ae:b0:78:ec:0f:da:60:50:b0:cc:d4:83:36:c7:
43:ce:fa:96:66:4a:1c:2f:5d:75:b1:9e:eb:06:69:85:7c:5b:
34:6b:a5:61:87:19:65:b6:e7:24:de:ed:77:47:f5:6d:77:7b:
6a:12:40:61:b8:a1:88:eb:09:4c:2a:22:fc:20:f2:9a:09:79:
07:26:5d:c0:75:a9:76:65:66:18:23:bb:38:96:0e:f2:49:da:
8e:19:77:ee:12:5e:7c:dc:87:19:5f:d9:79:72:8f:ab:13:f7:
7b:69:40:ac:bf:c6:9a:e6:be:d4:6c:76:34:aa:dc:5c:f1:8b:
e2:d1:9d:be:62:78:a3:58:e3:89:d4:cd:1d:12:cc:eb:26:ae:
4e:a6:8c:27:9c:a2:c6:e0:9f:69:b5:7a:45:22:9c:e1:b1:82:
9d:2b:35:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 08:12:08 2025 by rpki-client