Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/74e085-3a29-4c19-8485-b7f9b702ed48/1/u0y20R9QTPyQ909oZwz8h1z4D_c.roa
File: u0y20R9QTPyQ909oZwz8h1z4D_c.roa (raw, json)
Hash identifier: JOHDDdtCt33NzefI4pce2GppbGjse6UDJKzNAqgwUuA=
Subject key identifier: BB:4C:B6:D1:1F:50:4C:FC:90:F7:4F:68:67:0C:FC:87:5C:F8:0F:F7
Certificate issuer: /CN=c015aa6cec86df2115e2a10e9209d8aa2df98bbf
Certificate serial: 0196D8EC5B2648BA1DA8B4EFAB1993D1742A
Authority key identifier: C0:15:AA:6C:EC:86:DF:21:15:E2:A1:0E:92:09:D8:AA:2D:F9:8B:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wBWqbOyG3yEV4qEOkgnYqi35i78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/74e085-3a29-4c19-8485-b7f9b702ed48/1/u0y20R9QTPyQ909oZwz8h1z4D_c.roa
Signing time: Fri 16 May 2025 11:48:10 +0000
ROA not before: Fri 16 May 2025 11:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49515
IP address blocks: 185.230.32.0/22 maxlen: 22
188.95.32.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/74e085-3a29-4c19-8485-b7f9b702ed48/1/wBWqbOyG3yEV4qEOkgnYqi35i78.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/74e085-3a29-4c19-8485-b7f9b702ed48/1/wBWqbOyG3yEV4qEOkgnYqi35i78.mft
rsync://rpki.ripe.net/repository/DEFAULT/wBWqbOyG3yEV4qEOkgnYqi35i78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d8:ec:5b:26:48:ba:1d:a8:b4:ef:ab:19:93:d1:74:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c015aa6cec86df2115e2a10e9209d8aa2df98bbf
Validity
Not Before: May 16 11:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bb4cb6d11f504cfc90f74f68670cfc875cf80ff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ee:c5:a6:af:66:72:a6:f3:50:fa:fc:28:9c:
9f:28:f2:56:a3:ac:22:46:bb:ed:4e:3c:03:bf:b8:
e9:9b:60:eb:46:7b:75:74:62:3e:e3:14:93:36:37:
7e:1f:ca:f2:68:87:dd:7d:ea:b1:16:8d:05:c7:c0:
ff:a6:b2:83:72:e3:39:18:a3:9f:6d:87:a9:23:9a:
ee:65:a6:b0:e1:b4:39:6c:4e:9c:67:5c:61:6a:65:
5e:62:b4:ec:e0:fc:f6:9d:5a:52:ac:8f:d7:1f:b3:
ad:35:ad:2b:fb:5f:b6:fa:92:c4:71:7e:0e:36:0f:
f6:20:83:28:ad:1d:99:60:48:71:8a:b4:1d:76:4b:
e5:dd:c8:37:1d:b5:54:d5:dc:12:44:39:78:af:50:
2d:61:36:a5:a7:48:be:df:63:80:9d:4d:98:d4:7b:
cc:76:76:1e:a2:56:b7:dd:06:9a:59:2d:ab:1a:8a:
32:99:df:80:88:6c:36:a1:58:a4:28:60:14:3d:a8:
5a:73:28:5d:16:2f:1c:cb:ff:e1:be:a9:0c:6f:77:
1d:02:56:57:f3:81:d0:0e:8f:e4:aa:de:05:80:e1:
9a:fd:6f:a3:07:77:10:21:06:5b:3f:52:97:f2:ef:
c9:77:63:da:b7:53:0a:cc:5b:1e:8a:fb:08:ff:62:
e5:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:4C:B6:D1:1F:50:4C:FC:90:F7:4F:68:67:0C:FC:87:5C:F8:0F:F7
X509v3 Authority Key Identifier:
keyid:C0:15:AA:6C:EC:86:DF:21:15:E2:A1:0E:92:09:D8:AA:2D:F9:8B:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBWqbOyG3yEV4qEOkgnYqi35i78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/74e085-3a29-4c19-8485-b7f9b702ed48/1/u0y20R9QTPyQ909oZwz8h1z4D_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/74e085-3a29-4c19-8485-b7f9b702ed48/1/wBWqbOyG3yEV4qEOkgnYqi35i78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.230.32.0/22
188.95.32.0/21
Signature Algorithm: sha256WithRSAEncryption
3f:d5:20:e6:ca:c5:5f:37:45:91:e1:27:d3:f1:68:38:38:ae:
5c:84:c5:27:ca:b8:0e:98:62:c7:04:28:d9:eb:2e:ef:a9:8d:
4e:af:da:5c:19:6a:5b:c1:da:14:32:ad:8e:57:97:be:a1:5a:
b8:a4:71:8a:90:51:02:59:27:9d:d2:33:f9:e2:07:9d:c3:7d:
de:30:e5:f7:be:1d:3c:db:8e:71:a5:ba:48:8c:4d:8f:36:07:
8a:f1:e2:4d:50:bd:84:fd:ed:d3:6f:25:83:b9:be:ac:c6:3f:
28:7c:53:e7:60:2f:cb:04:c2:72:f6:3d:58:b3:5e:5c:a7:6c:
1d:eb:35:82:86:14:5c:2f:ac:d6:3e:e7:7c:43:df:35:52:23:
a2:6d:3a:d7:be:87:25:1f:e8:a8:d6:9d:a5:a4:6c:46:25:3c:
c7:9c:5a:d1:6c:11:1b:0b:fb:de:90:86:61:6c:04:3b:8a:76:
06:1a:01:be:c1:e1:9d:93:dd:af:d0:4a:02:ce:9a:7a:ee:7a:
92:c9:42:bb:76:0d:f3:e0:31:8f:9d:da:97:e2:f3:e2:ab:27:
1e:4c:08:5e:42:31:af:40:bc:46:e6:93:fc:e3:8a:30:70:64:
80:43:76:8b:8c:ce:ef:64:03:bb:38:2f:f5:d1:9f:13:88:3e:
ca:7a:41:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:05:13 2025 by rpki-client