Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/ULp3R7-E9pVZnafqKIKrFjEGKus.roa
File: ULp3R7-E9pVZnafqKIKrFjEGKus.roa (raw, json)
Hash identifier: gXkMPsIEGfy/Cqe4l1vt/ucpQbRlXSPDHwNoFXIBGBQ=
Subject key identifier: 50:BA:77:47:BF:84:F6:95:59:9D:A7:EA:28:82:AB:16:31:06:2A:EB
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 0197C2EE8BDB7F0B941080716D550D9BE361
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/ULp3R7-E9pVZnafqKIKrFjEGKus.roa
Signing time: Mon 30 Jun 2025 22:21:42 +0000
ROA not before: Mon 30 Jun 2025 22:21:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 142111
IP address blocks: 46.37.112.0/24 maxlen: 24
91.205.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 03:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c2:ee:8b:db:7f:0b:94:10:80:71:6d:55:0d:9b:e3:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jun 30 22:21:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=50ba7747bf84f695599da7ea2882ab1631062aeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7e:d6:98:18:33:99:33:62:f9:cc:93:ea:95:
04:db:4b:c9:19:65:2f:bf:32:ca:6d:32:a0:67:72:
7a:36:a6:bd:cd:88:e5:1e:e7:91:bf:5a:4e:76:55:
d5:d9:dc:88:30:19:c1:77:4a:70:ef:03:3f:7d:b1:
25:42:4d:97:26:ac:96:01:6f:63:8c:a9:39:8b:90:
ef:84:07:92:3e:ce:1d:f1:ee:62:7c:f1:ea:97:26:
b2:2d:b8:c9:a6:1c:4c:0d:f2:d4:9c:36:23:bb:db:
62:08:14:e1:fc:70:e9:9f:12:c7:e3:40:01:b3:41:
da:dd:1c:6b:52:5a:80:db:13:7e:66:38:e5:26:55:
3d:0d:9c:40:43:15:8d:0f:a4:3e:1b:ba:23:6e:c6:
80:f5:73:10:aa:c5:14:b7:88:ed:2d:f7:0e:fd:f0:
1c:e3:5f:00:53:d0:e7:4e:bd:86:9e:59:d9:61:46:
e6:2a:40:46:ee:1d:4c:7b:16:1b:1a:82:c6:ce:38:
50:c3:75:f5:ce:fe:31:27:e0:3e:84:3f:76:80:cf:
27:d9:d1:92:22:86:6a:1a:ee:7c:20:92:89:8b:5a:
54:67:cb:e1:74:2f:ef:72:e0:b4:71:0d:19:12:3b:
6e:d3:f9:06:5c:1b:40:15:82:ac:64:21:4b:93:87:
8b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:BA:77:47:BF:84:F6:95:59:9D:A7:EA:28:82:AB:16:31:06:2A:EB
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/ULp3R7-E9pVZnafqKIKrFjEGKus.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.112.0/24
91.205.228.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:ef:77:5a:65:0d:47:7b:19:05:00:67:e6:a5:e5:4e:8c:02:
06:d4:bb:8f:63:f7:87:92:f3:34:4f:01:50:89:c9:18:9d:67:
4b:5a:ba:29:f9:bd:f1:e3:35:44:d9:6f:32:51:e4:a5:52:b4:
bb:77:89:39:2d:1d:0b:5e:93:23:6d:e6:e7:fc:45:43:74:8c:
16:19:61:49:6d:15:88:01:5d:2e:95:6d:6b:71:5c:8a:a6:45:
32:63:26:9c:23:bb:9f:74:a0:4f:ec:38:72:18:d4:f7:78:fa:
79:b5:cd:16:f7:9f:09:87:87:bb:0d:a6:f6:23:65:02:3b:05:
94:b1:4b:a1:73:02:fc:5a:be:bd:75:5b:7e:61:49:e4:f7:0a:
f8:6a:05:a2:47:15:83:83:d6:43:6e:ac:b3:47:23:5a:43:bf:
cc:50:30:42:d1:8e:92:52:d6:df:b1:21:d9:ef:b6:de:21:71:
50:bb:c3:4e:1f:31:aa:9e:71:8f:62:cb:ad:cc:e7:27:3f:5d:
72:e5:b4:67:48:17:89:d9:e4:b8:21:fc:37:72:7c:60:11:66:
7a:ed:c9:f3:99:9b:1b:31:70:6f:56:fd:e1:1c:ae:d5:d5:13:
27:9f:f3:2d:d7:98:a0:ae:fb:e0:33:b2:00:30:b1:9b:1b:73:
ce:d2:4a:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 14:12:20 2025 by rpki-client