Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/uGMjxL6ptlnIymAtFcUWAuWkKNs.roa
File: uGMjxL6ptlnIymAtFcUWAuWkKNs.roa (raw, json)
Hash identifier: wNITF9iZ/qjiP9YwkUs7vr6JSMFVD33mpPFOLdc+0gU=
Subject key identifier: B8:63:23:C4:BE:A9:B6:59:C8:CA:60:2D:15:C5:16:02:E5:A4:28:DB
Certificate issuer: /CN=53bbbbaa3ee24c7ad9b2c60432e14eda3849b5e2
Certificate serial: 0197E97C53A18EC6A7E36B5DA84D361B4E1F
Authority key identifier: 53:BB:BB:AA:3E:E2:4C:7A:D9:B2:C6:04:32:E1:4E:DA:38:49:B5:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U7u7qj7iTHrZssYEMuFO2jhJteI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/uGMjxL6ptlnIymAtFcUWAuWkKNs.roa
Signing time: Tue 08 Jul 2025 10:02:08 +0000
ROA not before: Tue 08 Jul 2025 10:02:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44066
IP address blocks: 212.79.216.0/22 maxlen: 22
212.79.220.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.mft
rsync://rpki.ripe.net/repository/DEFAULT/U7u7qj7iTHrZssYEMuFO2jhJteI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 10:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:e9:7c:53:a1:8e:c6:a7:e3:6b:5d:a8:4d:36:1b:4e:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53bbbbaa3ee24c7ad9b2c60432e14eda3849b5e2
Validity
Not Before: Jul 8 10:02:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b86323c4bea9b659c8ca602d15c51602e5a428db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:4c:f2:cd:fa:20:b8:a5:10:46:89:1d:ef:e5:
c3:53:63:6a:ff:2d:75:40:58:42:f3:13:88:a4:ad:
f6:9e:2f:52:f0:49:47:29:a5:15:68:50:82:79:67:
4b:69:e6:ec:20:dc:10:ce:53:1d:8d:2a:69:9b:5e:
a5:4f:b1:ca:b8:0d:ab:ec:40:1a:82:ef:df:b0:9e:
a7:08:38:bd:b4:59:e1:7e:c2:ba:18:86:f1:38:0f:
b7:78:df:39:11:23:e8:0e:2f:12:52:9b:06:c1:af:
13:ed:1f:7b:5b:ed:a7:e4:9d:75:51:9b:5d:dc:3a:
b7:e1:fc:5d:d2:d3:7c:8b:2d:c5:a3:d1:2e:6a:2a:
34:b0:d3:ab:84:0a:25:bd:d3:f7:5f:1e:6f:1d:5a:
2f:1a:97:96:df:89:4d:b7:dc:92:6d:23:71:e6:a8:
99:63:97:8a:64:89:c1:61:35:6a:ff:bc:b0:f1:2e:
16:bf:1f:62:e8:86:1b:0b:13:32:65:fd:4d:7c:6a:
c7:58:2d:42:fc:fd:ea:9f:ba:10:89:85:d7:72:b1:
8d:59:41:2f:a3:5c:33:f0:10:3d:6c:24:bd:1d:dc:
91:3f:ca:43:69:f0:bc:22:6b:e0:68:7f:d5:d3:c4:
a3:8f:2a:36:2f:b1:d1:b9:18:52:63:50:ac:4d:05:
49:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:63:23:C4:BE:A9:B6:59:C8:CA:60:2D:15:C5:16:02:E5:A4:28:DB
X509v3 Authority Key Identifier:
keyid:53:BB:BB:AA:3E:E2:4C:7A:D9:B2:C6:04:32:E1:4E:DA:38:49:B5:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7u7qj7iTHrZssYEMuFO2jhJteI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/uGMjxL6ptlnIymAtFcUWAuWkKNs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.79.216.0/21
Signature Algorithm: sha256WithRSAEncryption
85:c7:66:0e:30:9a:27:4c:d3:d5:5a:e6:ee:15:b4:44:e3:31:
ca:f6:87:ed:49:cb:4b:3b:96:1a:99:0e:83:97:bb:9e:4c:6e:
a8:83:e1:11:57:07:f8:22:89:ce:ae:a1:27:cb:2b:fc:68:41:
9b:f6:fe:5e:61:71:83:c4:28:a4:35:c8:4a:fb:78:9d:4b:f9:
b4:57:fe:2b:6d:c0:be:95:24:98:f2:3a:82:25:ef:78:4c:21:
3e:d0:f4:ba:22:55:f2:d4:42:dd:8b:24:b5:c6:6a:1f:45:2f:
77:4a:ac:b3:be:6d:37:80:3f:2c:b9:31:4a:9f:75:14:23:c2:
ed:5a:83:7f:e4:3e:7f:24:78:15:d2:f0:d2:19:48:e1:f0:28:
59:99:a9:0e:52:c0:f4:c6:a4:8c:23:c8:d1:2a:d3:4f:1b:82:
0c:af:59:9c:06:a3:c8:42:7e:d2:b1:29:f0:b0:97:e8:52:25:
6a:13:47:c4:30:24:25:ac:63:65:02:53:9b:2b:8b:83:32:fa:
f9:25:5f:ce:08:10:10:46:12:4f:48:b0:d0:a1:eb:65:c4:c9:
b3:42:e2:60:76:1a:14:6f:86:ff:39:7b:90:18:e0:02:7e:1c:
cc:49:e7:fa:5a:15:df:5e:fc:fe:39:b0:55:1e:5a:cc:33:c7:
6b:be:59:cd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZfpfFOhjsan42tdqE02G04fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzYmJiYmFhM2VlMjRjN2FkOWIyYzYwNDMyZTE0ZWRhMzg0
OWI1ZTIwHhcNMjUwNzA4MTAwMjA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiODYzMjNjNGJlYTliNjU5YzhjYTYwMmQxNWM1MTYwMmU1YTQyOGRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUzyzfoguKUQRokd7+XDU2Nq/y11
QFhC8xOIpK32ni9S8ElHKaUVaFCCeWdLaebsINwQzlMdjSppm16lT7HKuA2r7EAa
gu/fsJ6nCDi9tFnhfsK6GIbxOA+3eN85ESPoDi8SUpsGwa8T7R97W+2n5J11UZtd
3Dq34fxd0tN8iy3Fo9Euaio0sNOrhAolvdP3Xx5vHVovGpeW34lNt9ySbSNx5qiZ
Y5eKZInBYTVq/7yw8S4Wvx9i6IYbCxMyZf1NfGrHWC1C/P3qn7oQiYXXcrGNWUEv
o1wz8BA9bCS9HdyRP8pDafC8ImvgaH/V08Sjjyo2L7HRuRhSY1CsTQVJXQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLhjI8S+qbZZyMpgLRXFFgLlpCjbMB8GA1UdIwQY
MBaAFFO7u6o+4kx62bLGBDLhTto4SbXiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTd1N3FqN2lUSHJac3NZRU11Rk8yamhKdGVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My8zMzk0YzAtNDU4Ny00NDRlLTlhMjUt
MDBlY2YwYzRkMGVmLzEvdUdNanhMNnB0bG5JeW1BdEZjVVdBdVdrS05zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My8zMzk0YzAtNDU4Ny00NDRlLTlhMjUtMDBlY2YwYzRkMGVm
LzEvVTd1N3FqN2lUSHJac3NZRU11Rk8yamhKdGVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD1E/YMA0G
CSqGSIb3DQEBCwUAA4IBAQCFx2YOMJonTNPVWubuFbRE4zHK9oftSctLO5YamQ6D
l7ueTG6og+ERVwf4IonOrqEnyyv8aEGb9v5eYXGDxCikNchK+3idS/m0V/4rbcC+
lSSY8jqCJe94TCE+0PS6IlXy1ELdiyS1xmofRS93Sqyzvm03gD8suTFKn3UUI8Lt
WoN/5D5/JHgV0vDSGUjh8ChZmakOUsD0xqSMI8jRKtNPG4IMr1mcBqPIQn7SsSnw
sJfoUiVqE0fEMCQlrGNlAlObK4uDMvr5JV/OCBAQRhJPSLDQoetlxMmzQuJgdhoU
b4b/OXuQGOACfhzMSef6WhXfXvz+ObBVHlrMM8drvlnN
-----END CERTIFICATE-----
Generated at Sun Aug 10 18:19:15 2025 by rpki-client