Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/4d6ae6-5ff5-4ebc-a39c-d10d592279c4/1/xyxNUe6_xTPg1BwooOAJHadvvKE.roa
File: xyxNUe6_xTPg1BwooOAJHadvvKE.roa (raw, json)
Hash identifier: CvJet221H1FFDlIcl3np9Wh/j472ZgRnm9IKOaXGJ7w=
Subject key identifier: C7:2C:4D:51:EE:BF:C5:33:E0:D4:1C:28:A0:E0:09:1D:A7:6F:BC:A1
Certificate issuer: /CN=50c4c24be8d5efbf0642fd18e3b6b7c8d22cc60f
Certificate serial: 019855483A2F7C039978D6216C94258EE967
Authority key identifier: 50:C4:C2:4B:E8:D5:EF:BF:06:42:FD:18:E3:B6:B7:C8:D2:2C:C6:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UMTCS-jV778GQv0Y47a3yNIsxg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/4d6ae6-5ff5-4ebc-a39c-d10d592279c4/1/xyxNUe6_xTPg1BwooOAJHadvvKE.roa
Signing time: Tue 29 Jul 2025 08:24:13 +0000
ROA not before: Tue 29 Jul 2025 08:24:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215596
IP address blocks: 212.108.117.0/24 maxlen: 24
2a0e:4d40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/4d6ae6-5ff5-4ebc-a39c-d10d592279c4/1/UMTCS-jV778GQv0Y47a3yNIsxg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/4d6ae6-5ff5-4ebc-a39c-d10d592279c4/1/UMTCS-jV778GQv0Y47a3yNIsxg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UMTCS-jV778GQv0Y47a3yNIsxg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 08:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:55:48:3a:2f:7c:03:99:78:d6:21:6c:94:25:8e:e9:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50c4c24be8d5efbf0642fd18e3b6b7c8d22cc60f
Validity
Not Before: Jul 29 08:24:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c72c4d51eebfc533e0d41c28a0e0091da76fbca1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e3:bd:0e:43:f9:2d:18:fd:ab:7f:a9:a7:6b:
55:de:b2:84:a8:c8:f4:4c:e8:ff:f9:aa:72:05:66:
fa:71:af:7f:c8:ef:ca:41:75:5a:75:62:84:51:d2:
83:bd:35:7a:37:d0:00:b9:8e:66:df:11:d4:80:9e:
f5:65:10:3c:e6:30:5a:82:ed:b7:4b:3c:0a:48:9a:
1f:86:b7:8b:e7:87:b8:d1:56:b4:42:2e:ac:ae:53:
04:af:0c:1f:42:4e:b7:b4:2f:a8:1b:e4:6e:23:52:
be:3d:59:c3:91:99:d6:a2:89:bc:d1:03:ab:cb:0f:
bc:5e:ab:bb:cc:64:5c:4d:bd:89:d3:0d:e5:b3:31:
1a:f6:1d:98:21:9a:94:48:04:05:f0:ca:ed:86:d0:
c1:97:c1:92:a3:47:1b:55:ab:d6:2c:94:43:6e:e6:
27:a8:b0:fb:ef:9f:3a:bb:44:a7:8f:d8:86:c0:ca:
ae:ef:63:59:5f:db:97:2c:21:74:82:ce:76:3d:ca:
88:9b:2d:45:de:93:0d:da:91:30:a6:af:41:22:a4:
99:2f:f1:79:57:16:41:3a:8a:4a:17:d7:af:2d:d2:
f8:06:94:72:6d:93:d4:f4:41:5c:b9:a7:e4:14:46:
38:a4:30:5c:14:73:72:81:1d:0c:88:70:bc:05:d7:
54:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:2C:4D:51:EE:BF:C5:33:E0:D4:1C:28:A0:E0:09:1D:A7:6F:BC:A1
X509v3 Authority Key Identifier:
keyid:50:C4:C2:4B:E8:D5:EF:BF:06:42:FD:18:E3:B6:B7:C8:D2:2C:C6:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UMTCS-jV778GQv0Y47a3yNIsxg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/4d6ae6-5ff5-4ebc-a39c-d10d592279c4/1/xyxNUe6_xTPg1BwooOAJHadvvKE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/4d6ae6-5ff5-4ebc-a39c-d10d592279c4/1/UMTCS-jV778GQv0Y47a3yNIsxg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.108.117.0/24
IPv6:
2a0e:4d40::/29
Signature Algorithm: sha256WithRSAEncryption
64:6c:01:59:71:69:62:2d:29:3e:46:71:de:e0:c9:5e:8e:5d:
e1:65:65:72:56:dc:7d:6f:e2:2b:1d:5d:5c:2f:26:e5:ec:a4:
45:cd:bd:ed:a3:46:36:0c:01:b3:ff:f4:6f:61:30:a0:84:cb:
56:1c:1b:8c:4b:9f:3e:44:a6:52:da:4a:e5:8e:96:fb:7c:cd:
d1:6f:ba:83:5f:82:d6:2e:92:ac:2f:f6:1b:76:23:6c:3c:06:
66:44:1b:69:0a:df:bd:84:3f:35:74:c2:b7:71:d0:fd:a0:c1:
a1:d9:20:75:e6:42:fe:54:7f:e0:2e:56:7e:12:e0:7f:a3:b0:
97:1e:03:69:26:7e:5a:e8:45:9e:33:aa:03:de:b0:68:dd:fd:
85:c3:6b:67:7b:e5:40:e1:5c:33:d2:0a:30:10:a8:87:20:17:
06:17:a3:6f:a8:77:0b:f5:1a:73:88:a0:5d:da:d2:3c:b8:4a:
70:fc:bc:a4:80:01:14:65:d6:75:24:a4:77:a6:87:1b:5b:94:
35:a6:84:68:70:f3:07:99:bb:d5:86:65:c9:85:80:36:1f:f6:
0e:67:c7:7c:17:c5:24:8f:8b:5a:c8:f9:c5:c6:46:8c:0e:5b:
f1:20:03:76:f8:81:42:8a:20:8b:b7:ac:e1:e5:fd:65:51:b7:
2f:d9:04:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:01:25 2025 by rpki-client