Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/4402b0-2eca-4836-bf22-a967159f887d/1/uQzwJOzoHcMdOvRujU6XA4cK0QI.roa
File: uQzwJOzoHcMdOvRujU6XA4cK0QI.roa (raw, json)
Hash identifier: Q/Bkx1wb4qbmw0UulF1TGpdw+xnEtQYgZbdCyTdbFoA=
Subject key identifier: B9:0C:F0:24:EC:E8:1D:C3:1D:3A:F4:6E:8D:4E:97:03:87:0A:D1:02
Certificate issuer: /CN=1366b960a6f1f04439f09186f9ecf531a9ce2648
Certificate serial: 01985B18320D69E9216AEDBA0BF2269B66D2
Authority key identifier: 13:66:B9:60:A6:F1:F0:44:39:F0:91:86:F9:EC:F5:31:A9:CE:26:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E2a5YKbx8EQ58JGG-ez1ManOJkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/4402b0-2eca-4836-bf22-a967159f887d/1/uQzwJOzoHcMdOvRujU6XA4cK0QI.roa
Signing time: Wed 30 Jul 2025 11:29:29 +0000
ROA not before: Wed 30 Jul 2025 11:29:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7029
IP address blocks: 194.150.220.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/4402b0-2eca-4836-bf22-a967159f887d/1/E2a5YKbx8EQ58JGG-ez1ManOJkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/4402b0-2eca-4836-bf22-a967159f887d/1/E2a5YKbx8EQ58JGG-ez1ManOJkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/E2a5YKbx8EQ58JGG-ez1ManOJkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5b:18:32:0d:69:e9:21:6a:ed:ba:0b:f2:26:9b:66:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1366b960a6f1f04439f09186f9ecf531a9ce2648
Validity
Not Before: Jul 30 11:29:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b90cf024ece81dc31d3af46e8d4e9703870ad102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:af:94:d0:73:db:ea:f7:81:47:a5:85:8c:fc:
6a:eb:87:62:12:bc:de:f0:e8:9a:9d:41:8e:8e:7f:
a7:f6:b0:cf:d2:68:ea:19:9b:cf:1b:80:92:38:0c:
a7:67:18:2a:f6:bf:ad:39:97:57:57:31:7f:f8:07:
b3:64:a2:42:c6:e3:3f:61:0f:dc:07:4e:a7:99:e9:
10:de:20:a4:c5:a7:f0:c9:f0:2d:f5:31:18:86:53:
a8:e2:f2:c6:e6:bd:3e:17:63:d1:ef:52:aa:a4:79:
f7:05:ea:d2:75:31:6f:3e:eb:d5:b6:bf:e7:40:0c:
4b:b8:29:c0:3c:19:8b:e1:65:51:57:cb:e7:6b:a7:
23:c1:87:e9:65:7c:4b:d4:d0:e7:c9:eb:d5:5d:f9:
82:63:1d:dd:13:ad:52:e8:3e:f1:f1:bd:44:06:be:
62:0b:62:db:df:f2:8e:62:96:af:d2:7f:d7:24:28:
4a:00:25:45:5e:8f:6a:f0:da:54:23:ef:d1:a1:0d:
cd:43:d4:84:24:cb:b1:6e:03:6a:0a:7f:7e:be:e4:
4d:b1:c6:e7:fb:9d:9b:b6:19:b5:74:ae:dd:90:e4:
cc:6f:c5:86:7b:3a:54:da:81:45:e1:c7:b8:a3:09:
45:3f:05:d0:01:f2:51:f3:0c:c7:89:3c:c3:28:47:
5b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:0C:F0:24:EC:E8:1D:C3:1D:3A:F4:6E:8D:4E:97:03:87:0A:D1:02
X509v3 Authority Key Identifier:
keyid:13:66:B9:60:A6:F1:F0:44:39:F0:91:86:F9:EC:F5:31:A9:CE:26:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E2a5YKbx8EQ58JGG-ez1ManOJkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4402b0-2eca-4836-bf22-a967159f887d/1/uQzwJOzoHcMdOvRujU6XA4cK0QI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4402b0-2eca-4836-bf22-a967159f887d/1/E2a5YKbx8EQ58JGG-ez1ManOJkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.150.220.0/23
Signature Algorithm: sha256WithRSAEncryption
22:53:80:31:ab:59:88:c1:1c:ab:d4:03:b1:05:48:3d:27:00:
e0:ec:95:74:26:46:b6:ab:5b:fb:2b:6c:e4:16:78:b5:a7:56:
80:cc:c2:d3:90:8d:3b:ae:1e:6a:08:f8:c8:eb:90:91:a9:a1:
94:e2:a8:1c:d2:83:cb:b3:64:23:86:b7:69:16:7f:95:f1:10:
ea:45:a5:7a:a1:2b:f7:86:c3:a4:89:b8:35:67:1c:97:e1:f8:
ea:cf:31:59:64:27:30:e0:84:98:e6:dd:84:69:0f:bb:fe:c8:
08:f1:19:60:99:9a:3d:f8:ae:c7:d5:a5:0b:11:76:7b:71:00:
8d:a8:09:05:0d:46:5d:5a:9c:16:49:e1:15:18:9f:d4:94:49:
52:5d:ea:e2:6a:fa:a9:d7:1c:49:01:a8:20:db:eb:12:e1:28:
0d:be:eb:ec:40:01:15:d7:3e:dd:7b:a3:6e:14:20:3e:f5:f9:
8d:3e:51:cd:7e:9c:62:3f:a8:7c:de:8f:6d:e4:cc:26:65:c2:
2a:53:87:12:a7:24:80:c0:fd:08:94:0c:9c:b3:2d:3d:79:92:
b0:e5:c3:e3:ab:38:a7:77:db:dc:d1:57:1f:22:ff:b7:40:16:
01:f0:52:c6:76:db:f4:0b:af:67:68:4b:48:56:bb:af:ce:36:
74:77:ac:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:24:17 2025 by rpki-client