Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/ur75_utePzQFHMJnHtwdIqrcVvE.roa
File: ur75_utePzQFHMJnHtwdIqrcVvE.roa (raw, json)
Hash identifier: KyHjYmZU1vSOh/Fl9iCE7ipsY2BzRFcyEiJ6qYetbaM=
Subject key identifier: BA:BE:F9:FE:EB:5E:3F:34:05:1C:C2:67:1E:DC:1D:22:AA:DC:56:F1
Certificate issuer: /CN=20e425a32b62d39818c4cbb0081075686fc4c8e8
Certificate serial: 019855EC57697D97A1527373ED05E48D7AF0
Authority key identifier: 20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/ur75_utePzQFHMJnHtwdIqrcVvE.roa
Signing time: Tue 29 Jul 2025 11:23:28 +0000
ROA not before: Tue 29 Jul 2025 11:23:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30058
IP address blocks: 95.170.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 10:43:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:55:ec:57:69:7d:97:a1:52:73:73:ed:05:e4:8d:7a:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20e425a32b62d39818c4cbb0081075686fc4c8e8
Validity
Not Before: Jul 29 11:23:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=babef9feeb5e3f34051cc2671edc1d22aadc56f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:13:f2:01:07:74:a1:8c:33:60:19:f3:bd:a8:
ad:a6:fa:55:1b:b6:16:2f:55:15:ca:20:f0:95:7c:
24:0c:df:70:6e:c8:1a:a9:d0:10:37:24:cb:8a:56:
4c:02:13:17:42:0c:78:60:f8:ef:75:ab:96:bc:8b:
4a:c2:e0:e5:32:8e:17:19:6a:c1:0f:15:96:8f:22:
62:49:38:c6:4a:6f:4b:e5:c7:68:fc:87:dc:dc:cb:
6b:48:6f:ac:4f:5c:61:6a:74:d2:a3:8a:50:9e:bd:
66:d0:9d:fc:09:1b:d4:7d:a6:91:e1:06:04:40:d7:
d4:90:e7:02:e8:52:86:66:cf:6d:d0:79:aa:23:b4:
71:b5:68:6d:78:35:e0:99:79:b3:d3:aa:e0:1d:dc:
52:4c:14:40:2f:b2:63:08:15:b2:1c:ae:06:5d:6a:
f7:d5:9f:bc:3d:92:f7:13:1c:9c:9d:ec:a0:3d:37:
49:6f:4c:52:22:b8:1a:90:39:ba:a4:25:71:fe:a8:
bb:39:45:2b:5c:1b:e6:83:22:73:56:21:29:34:22:
3d:e2:b1:93:7a:be:5d:59:a7:97:48:1c:2f:a1:2d:
ab:0e:12:c1:a9:c4:57:95:4c:bc:33:be:ae:23:c1:
97:fb:6d:b8:82:3c:87:fd:c3:8f:14:fa:49:a8:29:
b5:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:BE:F9:FE:EB:5E:3F:34:05:1C:C2:67:1E:DC:1D:22:AA:DC:56:F1
X509v3 Authority Key Identifier:
keyid:20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/ur75_utePzQFHMJnHtwdIqrcVvE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.170.18.0/24
Signature Algorithm: sha256WithRSAEncryption
38:95:45:af:07:75:bc:96:5d:4e:59:d1:ca:e0:36:7d:26:af:
e6:a9:f5:3a:da:3f:83:18:47:d5:dd:3d:9a:46:66:26:33:7c:
04:c0:6b:30:e2:e7:27:de:49:1b:6e:69:a0:7f:ea:bb:21:80:
06:e4:0d:b2:70:af:23:c9:bc:67:07:df:b3:51:3c:20:b4:88:
de:5b:01:8b:b9:e5:57:e7:df:f2:ef:f4:ca:69:ce:30:26:94:
6e:dd:e7:f6:51:fe:6a:ee:fe:d3:97:be:a4:b1:e9:d9:c2:11:
12:00:71:04:77:57:79:73:f1:de:03:d5:d7:d0:33:0d:c8:4c:
b5:f0:89:4a:f4:ed:c5:d3:eb:56:97:b4:a7:75:2c:5c:ed:79:
b6:2d:85:21:81:19:9e:dd:24:fe:71:c6:43:60:a5:f1:df:55:
69:8a:a5:f4:43:92:b6:01:bc:62:76:28:95:b9:41:38:0e:c1:
0a:c0:0f:10:a9:2f:ea:e7:31:b1:ec:e0:7c:42:85:db:ea:66:
f8:b3:cb:27:68:f0:79:27:92:da:da:cc:e3:ff:5c:e5:37:31:
99:b9:80:36:d8:48:0d:a5:38:7b:df:3d:18:e0:38:34:dc:0b:
e4:f5:77:1b:dc:bf:00:3f:da:76:03:df:a1:8a:c9:7c:02:4b:
b9:b1:d7:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:29:23 2025 by rpki-client