Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/ukmVSYDCb9Jl4JxKXZBTnYu7mDg.roa
File: ukmVSYDCb9Jl4JxKXZBTnYu7mDg.roa (raw, json)
Hash identifier: M9zVx4mUz4O4QWCziZ5DwfpcCjVmQZC3ew4EDPjuQ3k=
Subject key identifier: BA:49:95:49:80:C2:6F:D2:65:E0:9C:4A:5D:90:53:9D:8B:BB:98:38
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 019A48BBA21CA6759A25652EE2FE7A2F2BA6
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/ukmVSYDCb9Jl4JxKXZBTnYu7mDg.roa
Signing time: Mon 03 Nov 2025 08:00:47 +0000
ROA not before: Mon 03 Nov 2025 08:00:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 45.155.253.0/24 maxlen: 24
185.199.212.0/23 maxlen: 23
185.199.213.0/24 maxlen: 24
185.221.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:48:bb:a2:1c:a6:75:9a:25:65:2e:e2:fe:7a:2f:2b:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Nov 3 08:00:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ba49954980c26fd265e09c4a5d90539d8bbb9838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:29:f4:c0:67:5f:b1:72:fd:5b:a2:1e:96:d1:
41:f4:65:1a:bb:a1:27:8f:aa:58:d0:5b:af:54:83:
1a:53:97:fe:6a:8c:02:29:e9:b9:56:2c:df:92:95:
df:6b:ac:85:b7:57:92:1e:12:7f:40:ff:18:6d:89:
c2:f7:61:34:b4:d0:3f:3e:f0:5e:e6:ae:50:ba:f8:
3e:f3:f5:a0:36:b8:a3:b6:02:7a:0e:7e:43:fc:2d:
3a:ed:96:b9:82:fa:41:6f:aa:f8:b3:9f:0e:fd:6c:
3d:ca:81:d1:ab:6a:e9:e0:41:a3:bd:ad:be:9a:45:
fe:93:b6:a6:5e:d7:d9:ab:8f:98:be:9d:c7:6b:7f:
a2:51:2e:34:91:d7:9c:19:4a:a6:d0:85:05:1d:63:
1d:60:72:43:bb:74:91:d5:d7:ed:dc:2a:d8:d4:e2:
0f:9e:98:95:cb:fa:ea:5b:00:2c:48:50:2b:0c:2a:
60:93:f8:1f:0d:f0:0b:10:65:67:a6:b5:7b:b4:9c:
c7:4b:06:90:57:1e:11:3c:ae:d4:bd:9d:9a:d4:65:
72:9d:3b:f9:36:92:2c:77:2f:4f:42:47:8f:7a:5e:
9d:ee:bf:9d:80:a2:0b:3c:3a:1f:ab:e5:c0:29:cd:
f6:5e:46:43:3a:b3:e8:8a:4c:17:cc:86:d2:8b:c9:
0f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:49:95:49:80:C2:6F:D2:65:E0:9C:4A:5D:90:53:9D:8B:BB:98:38
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/ukmVSYDCb9Jl4JxKXZBTnYu7mDg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.253.0/24
185.199.212.0/23
185.221.26.0/24
Signature Algorithm: sha256WithRSAEncryption
82:34:ea:8c:1d:bd:83:76:50:7b:5d:af:e4:ab:e9:5d:9e:07:
3f:9a:fa:19:84:9e:07:b3:67:b3:76:6d:44:bc:0b:25:9e:dc:
b5:56:13:f0:b3:70:30:51:3a:42:a5:e8:11:60:c6:33:75:3c:
54:c6:aa:ca:99:b4:fd:f0:e2:18:59:cf:3b:58:2a:ba:70:b5:
21:ec:e3:7e:a1:2b:c6:19:0b:be:5a:4e:32:d3:ad:47:e8:bd:
d3:ad:87:d0:06:80:39:35:c1:78:ac:bc:63:3e:fa:ec:6f:37:
98:a7:8a:97:71:7b:60:ee:6e:47:bf:6b:bb:2c:85:0b:b2:dc:
88:00:bb:5e:eb:32:be:a1:66:61:68:4d:65:ae:6a:30:a2:1f:
1c:3b:93:08:da:11:f9:81:1f:13:41:7b:00:3d:ec:1b:44:8d:
87:b6:d4:3b:b3:0c:e0:14:c4:94:fa:b5:5c:b8:97:5a:7b:1d:
96:40:3c:c5:8e:7f:06:ff:33:a0:df:a0:01:c6:cc:96:27:7e:
8b:ba:d6:6a:ff:ec:21:84:ed:55:f2:8c:b3:7c:08:d3:3b:df:
31:14:8e:00:38:9c:fb:5b:9f:f9:39:e5:13:05:d7:66:07:73:
98:42:e1:81:e3:bf:30:14:e9:7b:94:00:51:b7:1a:f5:64:cd:
e1:9b:84:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:50:51 2025 by rpki-client