Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/UxXhvA9cEkARQKj3xjXhlWCXH_w.roa
File: UxXhvA9cEkARQKj3xjXhlWCXH_w.roa (raw, json)
Hash identifier: AhAmKofuFnG8wTxDrsEK8X0QyEDKWz4MH7Gp4S66yx0=
Subject key identifier: 53:15:E1:BC:0F:5C:12:40:11:40:A8:F7:C6:35:E1:95:60:97:1F:FC
Certificate issuer: /CN=987277fc47d848fa5634ce8031a174fc249fa673
Certificate serial: 019A101C53FDAF08A49A42F7FA37629AFF8B
Authority key identifier: 98:72:77:FC:47:D8:48:FA:56:34:CE:80:31:A1:74:FC:24:9F:A6:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/UxXhvA9cEkARQKj3xjXhlWCXH_w.roa
Signing time: Thu 23 Oct 2025 08:08:03 +0000
ROA not before: Thu 23 Oct 2025 08:08:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206190
IP address blocks: 185.194.8.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.mft
rsync://rpki.ripe.net/repository/DEFAULT/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 15:57:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:10:1c:53:fd:af:08:a4:9a:42:f7:fa:37:62:9a:ff:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=987277fc47d848fa5634ce8031a174fc249fa673
Validity
Not Before: Oct 23 08:08:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5315e1bc0f5c12401140a8f7c635e19560971ffc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:fc:e1:af:25:69:65:5d:6e:8a:40:eb:5b:cc:
3a:84:7e:ea:c6:0b:c6:ac:95:38:e9:71:48:16:b2:
3c:1b:28:78:52:03:e3:82:c3:4a:d0:2a:fa:14:e9:
95:7f:61:a2:90:5c:31:f0:12:17:85:64:41:a2:6b:
3f:ee:87:66:8a:33:13:d6:27:c0:d0:db:95:29:54:
fe:46:87:e2:1d:14:e8:85:a8:d0:dd:96:24:d5:c9:
82:d7:a3:51:33:01:e8:5b:00:87:a6:c2:54:b0:55:
4c:56:b9:44:6f:db:35:5b:e9:05:75:70:00:f6:34:
36:20:ee:90:a7:53:0d:26:ca:6d:ca:94:fa:ee:1d:
b6:59:d3:9b:9a:2d:8c:33:d1:d9:66:98:73:6d:cc:
97:74:e0:24:44:40:8a:33:91:09:dd:56:41:38:2c:
d4:1c:f6:ea:2a:96:74:e1:bf:7d:b9:22:05:eb:50:
f9:47:49:8e:0d:4c:b3:b3:dc:26:a0:12:01:1c:7b:
ae:d7:0c:10:5f:0f:14:fc:e4:56:6d:10:f8:22:0e:
f8:ef:d2:78:df:38:ff:d8:d9:3b:ed:c6:50:fe:6a:
9f:c4:2d:66:c9:aa:a9:85:a3:af:fa:80:5b:1d:5c:
da:28:e5:84:1c:1a:d4:5a:22:44:4d:c9:de:e4:09:
de:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:15:E1:BC:0F:5C:12:40:11:40:A8:F7:C6:35:E1:95:60:97:1F:FC
X509v3 Authority Key Identifier:
keyid:98:72:77:FC:47:D8:48:FA:56:34:CE:80:31:A1:74:FC:24:9F:A6:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/UxXhvA9cEkARQKj3xjXhlWCXH_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.8.0/22
Signature Algorithm: sha256WithRSAEncryption
12:42:86:34:46:ed:18:e2:e6:49:f1:c7:cb:5f:01:42:83:d2:
81:0c:32:60:30:23:10:0c:0c:e2:8d:f6:73:65:26:03:2b:73:
ce:18:0a:23:31:a6:b0:32:b0:82:e3:77:93:78:c1:9b:56:bd:
7f:b8:94:6f:74:1b:dc:ee:9a:85:b9:0c:d6:f6:b2:23:9f:38:
d2:de:e7:2f:1b:59:f7:c0:dc:c2:5d:65:88:2a:24:79:0e:6c:
ed:5a:f0:4a:48:7d:69:70:b0:43:d5:0b:40:0d:c3:0b:cb:61:
88:4d:67:ea:90:fa:ce:f8:9c:b6:d6:de:be:55:83:95:1f:c3:
e5:f9:69:37:6f:cf:70:67:aa:53:38:ac:4e:74:95:4b:81:76:
4a:f1:72:59:db:13:41:de:2b:2a:d5:91:35:36:c9:e5:de:e5:
4c:34:9f:70:fa:66:61:03:0f:78:b6:0c:44:59:ae:b4:5d:c3:
d1:54:15:fa:c0:b8:67:f4:2e:0d:08:ce:bc:de:bb:04:60:ac:
c3:a9:4c:e3:02:b6:5a:9b:00:75:ec:08:7d:34:b1:e6:b5:c7:
3f:a1:78:38:15:d7:45:07:7c:a0:4a:8e:0c:4b:ac:22:56:41:
bb:d9:b1:be:c3:d7:a1:5a:e3:39:03:18:3a:b7:f5:e2:e5:6a:
37:e4:d7:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 23:02:23 2025 by rpki-client