Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/mUUPpPDeJpWxy2ucZtADUwPu1vE.roa
File: mUUPpPDeJpWxy2ucZtADUwPu1vE.roa (raw, json)
Hash identifier: SlWed8R0jkI4ahY1r3sLHRR3VTAWW5qh1xFw8CiSbrI=
Subject key identifier: 99:45:0F:A4:F0:DE:26:95:B1:CB:6B:9C:66:D0:03:53:03:EE:D6:F1
Certificate issuer: /CN=8c32a6e57ec81cc5cb43bb503749b360f2b05c3b
Certificate serial: 019A4EF6B7B2AACCBF09D7571806B7DB4840
Authority key identifier: 8C:32:A6:E5:7E:C8:1C:C5:CB:43:BB:50:37:49:B3:60:F2:B0:5C:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/mUUPpPDeJpWxy2ucZtADUwPu1vE.roa
Signing time: Tue 04 Nov 2025 13:03:03 +0000
ROA not before: Tue 04 Nov 2025 13:03:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59877
IP address blocks: 31.223.190.0/24 maxlen: 24
62.68.65.0/24 maxlen: 24
91.212.33.0/24 maxlen: 24
185.61.176.0/22 maxlen: 24
185.160.52.0/22 maxlen: 24
193.39.0.0/22 maxlen: 24
193.56.146.0/24 maxlen: 24
217.197.108.0/24 maxlen: 24
2a02:7b20::/32 maxlen: 32
2a03:9260::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 07:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f6:b7:b2:aa:cc:bf:09:d7:57:18:06:b7:db:48:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c32a6e57ec81cc5cb43bb503749b360f2b05c3b
Validity
Not Before: Nov 4 13:03:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=99450fa4f0de2695b1cb6b9c66d0035303eed6f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:71:0a:ff:32:a7:37:53:66:46:a5:6b:c1:7c:
46:7b:59:b4:87:8d:b3:29:e5:5a:c1:9f:bd:e1:d6:
d3:58:1d:2e:47:3a:51:c1:b0:f3:f5:7c:fa:2f:d1:
bb:ac:ba:7c:f9:13:71:fe:63:3c:0a:56:b6:66:92:
11:d1:e5:c0:64:d5:73:09:b6:5a:50:18:61:b4:00:
fe:d0:35:81:73:90:a4:70:2f:87:93:d3:4c:b5:de:
4b:da:e5:82:b4:c6:6b:07:26:37:3f:a6:58:78:b0:
ce:97:8c:f9:37:9c:73:c3:20:71:90:be:99:61:90:
46:91:9e:c6:2d:0f:9d:34:07:ec:4f:a0:45:ee:07:
80:28:51:86:e8:1f:bc:aa:66:1d:f5:ef:a9:a8:0e:
5a:76:45:95:f0:9c:6c:da:2d:28:c9:95:ed:3b:65:
72:bb:48:ca:8c:23:45:ba:94:eb:49:ca:d2:c8:ec:
cd:4b:17:e0:c2:0f:1f:7e:90:8f:3d:d6:b3:6c:fc:
40:1a:c6:d3:b9:ad:a9:1f:77:b3:b2:ba:45:d4:09:
1e:c8:b3:90:26:b2:12:ec:27:70:e1:47:3c:04:8e:
74:99:a0:91:80:56:64:1d:7c:4e:f9:c1:4e:69:0a:
12:64:34:f9:10:12:d9:32:94:a8:8c:49:5e:52:92:
cd:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:45:0F:A4:F0:DE:26:95:B1:CB:6B:9C:66:D0:03:53:03:EE:D6:F1
X509v3 Authority Key Identifier:
keyid:8C:32:A6:E5:7E:C8:1C:C5:CB:43:BB:50:37:49:B3:60:F2:B0:5C:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/mUUPpPDeJpWxy2ucZtADUwPu1vE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.223.190.0/24
62.68.65.0/24
91.212.33.0/24
185.61.176.0/22
185.160.52.0/22
193.39.0.0/22
193.56.146.0/24
217.197.108.0/24
IPv6:
2a02:7b20::/32
2a03:9260::/32
Signature Algorithm: sha256WithRSAEncryption
7d:47:46:5e:25:85:81:ad:b4:25:22:b2:74:cf:96:9b:58:01:
97:64:42:4c:a5:de:42:48:34:48:c4:f7:3a:e8:ad:55:e8:18:
94:61:b4:7c:ad:5a:bb:4e:e9:fd:4b:1b:4f:3d:9e:4b:eb:3c:
13:f6:f9:5b:41:19:50:2c:46:65:6a:72:34:d2:2c:b4:25:55:
91:2d:e2:fb:1f:ab:d9:c3:27:46:3e:f4:13:bc:40:ca:8c:7e:
d6:7e:9e:10:eb:85:2f:88:3e:fd:36:dc:35:55:27:80:f8:a3:
93:88:8f:6e:98:b5:7b:0b:3e:57:1b:0c:ed:bf:25:69:0c:98:
71:5a:fb:ab:da:ce:9b:fe:86:13:e4:a0:da:fd:a4:60:0d:22:
45:ce:56:aa:5b:1c:a0:6a:1a:6f:d6:21:38:0e:fe:f4:8d:7d:
7e:59:da:a1:5f:60:fc:38:60:d1:6b:07:58:00:42:d9:bc:5b:
4b:85:43:ba:da:5f:4b:88:01:d7:e4:68:e6:f8:c5:9c:47:f3:
ab:34:d9:12:7b:61:64:b8:58:9f:96:09:16:d2:38:91:71:8a:
ed:34:a7:a1:db:7c:81:68:c5:97:9d:21:10:69:5a:d1:93:89:
b1:a7:6c:59:4c:a3:ba:b9:0c:c6:f1:8f:8b:2c:de:cc:73:6c:
f2:77:dd:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:52:22 2025 by rpki-client