Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/uElDFGcVxZsMl0bu0vs6jORoDh8.roa
File: uElDFGcVxZsMl0bu0vs6jORoDh8.roa (raw, json)
Hash identifier: aT6b179aTl0Zm/hagXpA3FILak7batN1BBwPLZgXw5k=
Subject key identifier: B8:49:43:14:67:15:C5:9B:0C:97:46:EE:D2:FB:3A:8C:E4:68:0E:1F
Certificate issuer: /CN=15ddd4c9dc23fac35574fce2b4294398add8521c
Certificate serial: 019A269AFDB5C1BCA749041B0ACCE5BDFFF8
Authority key identifier: 15:DD:D4:C9:DC:23:FA:C3:55:74:FC:E2:B4:29:43:98:AD:D8:52:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fd3Uydwj-sNVdPzitClDmK3YUhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/uElDFGcVxZsMl0bu0vs6jORoDh8.roa
Signing time: Mon 27 Oct 2025 16:58:02 +0000
ROA not before: Mon 27 Oct 2025 16:58:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 136787
IP address blocks: 185.183.212.0/24 maxlen: 24
185.183.213.0/24 maxlen: 24
185.183.214.0/24 maxlen: 24
185.183.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fd3Uydwj-sNVdPzitClDmK3YUhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:26:9a:fd:b5:c1:bc:a7:49:04:1b:0a:cc:e5:bd:ff:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15ddd4c9dc23fac35574fce2b4294398add8521c
Validity
Not Before: Oct 27 16:58:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b84943146715c59b0c9746eed2fb3a8ce4680e1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:28:bb:86:b4:45:44:c1:ab:db:99:48:6e:24:
3e:68:f7:5c:5e:cd:08:42:21:f4:05:61:6f:d5:11:
3c:d2:83:ed:af:ce:56:21:1f:22:8c:3c:a4:e7:81:
66:95:87:5b:47:f5:ec:a8:98:f1:12:d6:cc:94:cc:
ab:08:5a:e6:fe:51:ff:52:2f:8c:ac:2b:d0:9b:67:
e2:92:45:3d:e8:70:2b:c0:5a:8d:e2:78:bb:fe:9c:
d3:0f:a6:4f:b1:ef:a6:34:f9:b7:f0:0e:28:2e:46:
9b:5f:90:dc:18:95:0b:5f:97:ad:f3:ee:ee:c3:0f:
f7:31:04:0a:6a:d9:7b:fc:13:49:09:bd:4c:e3:b0:
d8:94:38:3e:a6:83:42:b8:70:c7:50:3e:ab:46:10:
86:14:6c:10:88:2a:ad:d7:dd:0a:66:1d:35:32:4d:
fa:4d:df:4f:63:dc:68:89:4b:d3:a4:de:13:48:2d:
1f:d8:2e:b3:30:c9:c9:a8:c7:d8:b4:c8:52:59:11:
2c:6d:29:21:72:20:4e:9d:26:fd:67:bc:ad:82:8c:
e2:8f:7a:b5:63:5a:8b:98:f1:aa:81:78:2d:e5:90:
97:72:e6:53:af:8c:1b:76:19:b7:9b:45:d8:a7:02:
b4:0d:a7:71:e3:21:05:ae:43:bc:69:e5:c5:a3:e9:
1e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:49:43:14:67:15:C5:9B:0C:97:46:EE:D2:FB:3A:8C:E4:68:0E:1F
X509v3 Authority Key Identifier:
keyid:15:DD:D4:C9:DC:23:FA:C3:55:74:FC:E2:B4:29:43:98:AD:D8:52:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fd3Uydwj-sNVdPzitClDmK3YUhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/uElDFGcVxZsMl0bu0vs6jORoDh8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.183.212.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:bb:9f:7a:e0:b3:76:fd:10:63:d7:3e:ae:00:06:18:7f:32:
6e:25:c7:04:fe:cc:49:6a:90:37:4e:f2:45:87:b0:6c:46:31:
79:a9:bc:6c:5f:f6:21:42:d6:04:c9:2b:e5:9b:a7:15:c6:a2:
8e:d1:1e:25:66:eb:10:4f:b8:f1:b2:70:d5:7e:2f:02:67:d4:
d7:c6:c7:ca:12:bb:9d:79:ea:25:4b:31:15:13:63:5d:99:ee:
be:e5:5b:15:b6:5f:a5:12:07:26:e8:82:5f:5a:b7:8b:0f:35:
aa:b2:90:76:d4:e9:95:ec:8f:97:78:c4:da:62:50:f5:9f:e3:
0d:5e:0a:e0:92:ba:1d:6e:2e:33:11:52:1b:e5:75:3b:6c:8f:
12:ab:88:85:77:a7:9d:fa:97:4e:85:38:c6:c1:eb:29:4f:c7:
42:38:f2:f3:ba:42:12:a1:d3:60:5a:00:b2:68:e6:37:c7:fc:
f8:12:04:65:b6:98:24:cd:cd:da:6a:f4:a4:27:ec:33:b7:7d:
f2:a8:57:91:06:a8:a1:98:1d:11:36:fb:97:e3:f0:20:93:5f:
86:36:c5:6c:e7:ab:52:31:0b:44:36:dc:ce:ac:67:4b:38:c7:
10:ba:69:f2:8e:a4:13:62:3e:8e:df:1d:a3:22:d8:ad:c2:f2:
f4:37:11:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:04:17 2025 by rpki-client