Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/UP95dYm_UGdWPwM5e-hmVMOKlN8.roa
File: UP95dYm_UGdWPwM5e-hmVMOKlN8.roa (raw, json)
Hash identifier: gOnw7RVPilPs06ygYRn/QyhHZMI6rI4Ptc6yGbvCXFY=
Subject key identifier: 50:FF:79:75:89:BF:50:67:56:3F:03:39:7B:E8:66:54:C3:8A:94:DF
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 0198550543C5308276A657DF0B56B2905E95
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/UP95dYm_UGdWPwM5e-hmVMOKlN8.roa
Signing time: Tue 29 Jul 2025 07:11:05 +0000
ROA not before: Tue 29 Jul 2025 07:11:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47690
IP address blocks: 81.181.132.0/22 maxlen: 24
194.153.252.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 06:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:55:05:43:c5:30:82:76:a6:57:df:0b:56:b2:90:5e:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jul 29 07:11:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=50ff797589bf5067563f03397be86654c38a94df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:09:a7:28:62:21:d9:b5:4e:8f:db:9a:e5:92:
cd:7d:5a:0e:14:bb:c4:61:a4:63:46:3f:45:e2:bf:
6d:be:93:a1:f6:fe:0c:1e:18:8d:70:8a:31:b7:e4:
ad:82:33:de:24:fd:b6:e6:86:e3:dd:ed:0d:42:47:
58:ad:6b:2b:a5:cb:4e:b3:de:a6:07:49:c3:3e:41:
78:76:b9:e8:fe:7c:6e:11:df:b7:73:f5:f8:fa:f1:
ec:1b:5f:48:8f:3f:87:56:7b:c4:6f:ec:6a:43:c4:
86:32:7e:2c:bb:10:7c:9f:b0:10:d3:1b:ca:fd:a5:
00:ba:25:f9:bd:e2:16:1d:d2:a8:71:94:4b:35:e1:
f6:aa:7b:fe:9e:1b:77:8f:3c:79:92:9e:46:81:27:
60:c3:e5:c0:b7:44:33:f3:c8:8d:8c:5e:5f:1e:47:
00:35:94:79:96:92:2a:ea:00:b7:f6:00:ce:94:d1:
eb:a5:e3:33:0b:90:d0:3d:4e:c0:64:1e:0a:9a:45:
38:59:0c:c3:db:28:ee:f8:8b:47:9f:0f:70:b3:7e:
81:b2:e1:94:32:18:e6:44:68:09:21:75:bb:b0:a8:
07:de:8f:c6:5b:c6:16:0a:56:ee:60:7c:13:73:fa:
ef:31:0f:00:14:89:d5:e7:6b:b2:2a:ea:fd:25:b9:
e9:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:FF:79:75:89:BF:50:67:56:3F:03:39:7B:E8:66:54:C3:8A:94:DF
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/UP95dYm_UGdWPwM5e-hmVMOKlN8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.181.132.0/22
194.153.252.0/22
Signature Algorithm: sha256WithRSAEncryption
62:bc:23:d6:0c:ca:19:93:a5:04:f2:63:b7:fb:5e:cb:de:05:
45:75:8d:e9:1c:3d:e0:72:35:33:41:db:9e:f2:56:cc:db:65:
6d:2e:e4:00:e7:73:cc:fb:a1:c2:fa:a4:0b:b8:c1:3e:7d:69:
15:98:82:29:65:c6:d7:93:6a:ac:72:0b:d2:a6:c7:fd:3d:ff:
06:dd:1a:3d:39:10:a1:9b:84:47:f3:78:13:7f:65:fb:a8:89:
1c:65:1c:8f:dd:fd:bd:a9:d6:8b:48:7e:bb:33:a1:da:29:e9:
42:68:1e:ed:44:fb:a9:67:9c:31:ab:b4:40:c6:14:e3:67:de:
5b:c1:c4:18:ba:48:38:98:f3:0e:9f:99:9c:2d:58:44:de:6a:
7a:f0:1c:a3:52:35:70:80:63:6d:28:10:f1:30:77:14:bd:91:
a3:e1:63:62:84:61:c5:ee:ad:53:5a:9a:bd:93:37:5c:fa:4a:
65:0d:e9:64:8f:62:70:89:a8:52:c9:68:91:63:fb:99:b6:a7:
93:17:8a:48:74:84:a8:6a:54:65:6a:60:08:65:de:c6:3e:67:
98:3a:db:39:c7:c7:e7:43:fa:12:e2:ed:a9:7e:49:4b:31:9c:
e1:b4:0e:c0:e3:b0:ec:bc:da:08:06:92:e3:14:be:d8:23:67:
ad:0a:f0:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:00:43 2025 by rpki-client