Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/U4Pud-U0d6Gr1GMe-1TjFMpMdMo.roa
File: U4Pud-U0d6Gr1GMe-1TjFMpMdMo.roa (raw, json)
Hash identifier: y3Kkek8VWtyH27rFF27oBhPspykEnUJ6YkH26jcCAK0=
Subject key identifier: 53:83:EE:77:E5:34:77:A1:AB:D4:63:1E:FB:54:E3:14:CA:4C:74:CA
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 01977257ADC64F4F34B599241BBE8A87D202
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/U4Pud-U0d6Gr1GMe-1TjFMpMdMo.roa
Signing time: Sun 15 Jun 2025 06:47:17 +0000
ROA not before: Sun 15 Jun 2025 06:47:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207350
IP address blocks: 46.249.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:72:57:ad:c6:4f:4f:34:b5:99:24:1b:be:8a:87:d2:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jun 15 06:47:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5383ee77e53477a1abd4631efb54e314ca4c74ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:91:a0:3a:3c:fe:11:0b:46:f0:e6:3d:aa:f4:
c7:a4:1a:79:b5:e7:e0:f9:ae:0d:d3:f0:72:4a:04:
16:6b:9e:b4:12:6f:63:e1:7e:ee:7e:4a:08:51:7b:
0f:62:39:f9:80:05:a4:c4:ea:02:22:2e:43:3e:11:
04:66:2a:ce:64:1f:60:21:d2:4c:6a:96:4a:08:2e:
ad:c5:83:8b:aa:cc:ef:e8:9c:2d:71:61:41:10:29:
a6:7c:dc:53:73:78:43:26:fb:5a:50:bb:72:2c:7b:
72:2e:53:57:2d:d1:04:6d:aa:24:50:00:48:84:ae:
90:ba:9d:dc:83:d0:87:49:ce:d1:f6:23:0e:e8:aa:
4f:36:fb:d8:f2:1b:da:56:6b:45:fb:9c:8a:61:24:
3e:12:4e:73:30:c1:ee:04:8b:bc:25:95:59:ed:20:
1b:b5:f5:1f:2f:15:42:4e:56:dc:dd:82:20:6f:67:
66:c5:a7:8a:4e:67:70:8c:04:4b:75:26:ba:cc:d8:
2c:73:c3:be:0e:aa:ff:7d:3d:51:94:f4:3f:3a:4a:
7c:e3:d3:73:42:be:01:70:5f:67:08:84:28:67:3c:
11:d8:f5:d3:c7:13:ba:d9:ac:75:a9:df:25:c8:78:
98:b2:3e:13:3d:d0:aa:2e:f0:72:2f:0b:e8:5f:90:
95:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:83:EE:77:E5:34:77:A1:AB:D4:63:1E:FB:54:E3:14:CA:4C:74:CA
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/U4Pud-U0d6Gr1GMe-1TjFMpMdMo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.249.110.0/24
Signature Algorithm: sha256WithRSAEncryption
15:21:f8:7b:70:b0:3d:8d:d0:06:c2:49:52:ef:cc:0c:e9:ba:
b6:ee:15:53:ac:65:0a:c8:19:34:26:37:1e:7e:8c:48:3b:3a:
b0:4b:66:61:8a:61:0d:99:cc:f7:db:3b:0b:db:6e:84:67:ce:
a9:96:d9:20:dd:9d:b5:04:a6:ad:38:ea:5a:c0:96:2d:9e:0b:
75:83:cc:ef:04:29:94:98:02:07:53:c5:63:a6:2e:86:01:1d:
1a:6c:25:32:65:a2:d0:6d:c2:4b:38:73:c3:80:00:96:51:5b:
76:a2:f4:05:ab:3c:71:79:92:e9:91:f8:b2:be:6a:f0:a2:c0:
76:07:40:15:96:b0:73:2b:77:52:79:08:76:4d:35:12:66:51:
bf:de:a9:4e:ae:8a:90:98:e8:05:08:10:0b:dd:34:0e:0c:d9:
ee:47:0f:68:3b:3f:0b:c7:d0:68:4e:15:3a:83:09:c0:88:ed:
b5:7d:2a:e3:23:a1:a9:4b:23:50:32:99:75:f8:21:b7:f8:f4:
7a:89:84:f5:95:81:8f:1d:ab:63:70:19:02:dc:cf:e4:a6:6d:
fd:56:af:d4:29:52:28:0c:f4:98:da:50:b5:1c:d2:67:d1:c6:
09:f4:29:5b:41:ec:89:4f:dd:f0:95:97:ab:cc:07:ad:d0:7d:
10:d3:36:cb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZdyV63GT080tZkkG76Kh9ICMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYzNkYWExYjE0ODUwZjJlNjFjNTkyYjIxOTE5MTVhNWU2
NWE0NzgwHhcNMjUwNjE1MDY0NzE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MzgzZWU3N2U1MzQ3N2ExYWJkNDYzMWVmYjU0ZTMxNGNhNGM3NGNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5GgOjz+EQtG8OY9qvTHpBp5tefg
+a4N0/BySgQWa560Em9j4X7ufkoIUXsPYjn5gAWkxOoCIi5DPhEEZirOZB9gIdJM
apZKCC6txYOLqszv6JwtcWFBECmmfNxTc3hDJvtaULtyLHtyLlNXLdEEbaokUABI
hK6Qup3cg9CHSc7R9iMO6KpPNvvY8hvaVmtF+5yKYSQ+Ek5zMMHuBIu8JZVZ7SAb
tfUfLxVCTlbc3YIgb2dmxaeKTmdwjARLdSa6zNgsc8O+Dqr/fT1RlPQ/Okp849Nz
Qr4BcF9nCIQoZzwR2PXTxxO62ax1qd8lyHiYsj4TPdCqLvByLwvoX5CVywIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFOD7nflNHehq9RjHvtU4xTKTHTKMB8GA1UdIwQY
MBaAFCrD2qGxSFDy5hxZKyGRkVpeZaR4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUt
ZmUwNjU5MTc2YTU2LzEvVTRQdWQtVTBkNkdyMUdNZS0xVGpGTXBNZE1vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUtZmUwNjU5MTc2YTU2
LzEvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALvluMA0G
CSqGSIb3DQEBCwUAA4IBAQAVIfh7cLA9jdAGwklS78wM6bq27hVTrGUKyBk0Jjce
foxIOzqwS2ZhimENmcz32zsL226EZ86pltkg3Z21BKatOOpawJYtngt1g8zvBCmU
mAIHU8Vjpi6GAR0abCUyZaLQbcJLOHPDgACWUVt2ovQFqzxxeZLpkfiyvmrwosB2
B0AVlrBzK3dSeQh2TTUSZlG/3qlOroqQmOgFCBAL3TQODNnuRw9oOz8Lx9BoThU6
gwnAiO21fSrjI6GpSyNQMpl1+CG3+PR6iYT1lYGPHatjcBkC3M/kpm39Vq/UKVIo
DPSY2lC1HNJn0cYJ9ClbQeyJT93wlZerzAet0H0Q0zbL
-----END CERTIFICATE-----
Generated at Wed Jun 18 20:15:34 2025 by rpki-client