Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/UbTczMXH1DXAp6Y4rzAMo0-vjMY.roa
File: UbTczMXH1DXAp6Y4rzAMo0-vjMY.roa (raw, json)
Hash identifier: /5fKT3FRRFYWFa0s/Qas8JVmnywA6hIsUQs3iIAfCSc=
Subject key identifier: 51:B4:DC:CC:C5:C7:D4:35:C0:A7:A6:38:AF:30:0C:A3:4F:AF:8C:C6
Certificate issuer: /CN=6991c56f11a7171c6153239769f557beba10182d
Certificate serial: 0197F43D544E7DA81D01BBB2285F7BEB798A
Authority key identifier: 69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/UbTczMXH1DXAp6Y4rzAMo0-vjMY.roa
Signing time: Thu 10 Jul 2025 12:09:09 +0000
ROA not before: Thu 10 Jul 2025 12:09:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 53856
IP address blocks: 95.164.24.0/22 maxlen: 22
95.164.28.0/22 maxlen: 22
95.164.78.0/23 maxlen: 23
95.164.96.0/21 maxlen: 21
95.164.104.0/21 maxlen: 21
95.164.168.0/23 maxlen: 23
95.164.252.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 20:26:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:f4:3d:54:4e:7d:a8:1d:01:bb:b2:28:5f:7b:eb:79:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6991c56f11a7171c6153239769f557beba10182d
Validity
Not Before: Jul 10 12:09:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=51b4dcccc5c7d435c0a7a638af300ca34faf8cc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d7:e7:87:de:6f:33:b7:68:d6:46:a7:23:e3:
47:ac:de:15:93:e9:2a:7c:86:43:e6:23:d4:18:f7:
9e:c6:5f:b9:34:91:39:d5:2b:44:53:d9:69:63:36:
bd:11:d3:5a:15:86:e5:69:8c:6d:fc:ea:f2:03:17:
aa:35:c5:8e:b1:20:b4:41:fd:0c:d9:4c:63:d0:8d:
d2:af:3e:9d:33:c3:b2:7c:c3:59:c4:a1:c1:17:b3:
72:fd:16:4c:35:c2:b7:2a:5f:d4:ab:88:c1:e9:38:
d9:70:dd:47:83:9b:f0:80:17:bf:af:eb:4d:1f:f3:
15:f3:2f:f3:32:62:ae:67:b2:75:f4:4d:3e:ad:74:
bc:3f:46:22:39:eb:f6:40:53:73:17:3e:7d:db:89:
1a:51:d5:ec:c0:df:ec:c8:8e:46:33:64:fe:a4:7c:
3c:33:09:3e:37:30:a6:b1:a1:3e:52:fd:86:a5:30:
8d:f2:21:53:c3:7f:35:c7:f1:f4:ea:35:ae:ba:88:
75:ff:02:c5:22:7b:96:8b:33:92:ea:91:ef:33:37:
ae:53:aa:e9:c2:4e:20:dc:ff:2b:10:62:e8:8d:55:
bd:82:41:b9:f5:b8:3f:46:cc:78:73:06:f0:e5:d5:
a1:97:a2:88:cb:18:a0:20:ce:bb:f8:36:8e:47:4a:
0c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:B4:DC:CC:C5:C7:D4:35:C0:A7:A6:38:AF:30:0C:A3:4F:AF:8C:C6
X509v3 Authority Key Identifier:
keyid:69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/UbTczMXH1DXAp6Y4rzAMo0-vjMY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.164.24.0/21
95.164.78.0/23
95.164.96.0/20
95.164.168.0/23
95.164.252.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:8b:67:5d:2e:a0:b7:fb:d9:0d:ae:f5:02:a6:56:01:2a:1a:
16:5b:21:ac:42:7e:8a:ca:88:72:68:a3:94:ff:a2:69:a1:a9:
14:1c:0d:6a:a9:1c:ec:0c:b9:29:7e:36:65:04:a7:08:2e:bc:
56:15:00:d3:e1:f2:db:9a:23:8b:6d:0c:06:ad:28:46:47:34:
ec:e3:cc:5f:dd:48:b5:ed:f9:21:cd:98:7f:54:dd:a1:45:17:
5f:f3:e8:2e:4d:30:0f:8f:c6:02:50:b9:77:2e:dd:01:25:1b:
ab:40:55:77:8c:79:3b:53:3f:01:3f:35:66:ae:60:17:ae:51:
26:02:8d:8e:d3:0d:06:5a:82:a8:09:3e:09:30:e9:64:dd:5f:
10:a8:90:d7:d1:d2:1a:cf:b0:80:df:eb:0a:b1:9c:85:06:97:
9e:86:cd:9e:d4:5b:44:2b:0b:3c:70:59:d9:f9:10:57:8a:c5:
e0:4b:df:00:26:fc:79:7e:81:f4:d6:88:00:42:67:c9:b4:70:
13:4d:fc:73:a3:1e:ff:2f:db:62:70:48:e7:1b:7d:de:2b:de:
69:2a:eb:80:78:c2:7e:d2:36:9b:a7:f7:e6:46:c7:bb:95:8f:
50:2b:6b:bb:9a:84:4f:72:b4:d3:8c:d0:4f:7e:f8:02:ee:46:
76:d7:ee:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 04:23:26 2025 by rpki-client