Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/upHXyI-l9dhGBIOdLwpSxCKYoNQ.roa
File: upHXyI-l9dhGBIOdLwpSxCKYoNQ.roa (raw, json)
Hash identifier: 0iE6n2FbevPnKKt2MD0taksU6A7tOdh1fagPKo1OnLw=
Subject key identifier: BA:91:D7:C8:8F:A5:F5:D8:46:04:83:9D:2F:0A:52:C4:22:98:A0:D4
Certificate issuer: /CN=24f51bbdf01088d34c6baaeef86bda25a9f02196
Certificate serial: 019A48AA7951B99446529BBEFFD1FA67C990
Authority key identifier: 24:F5:1B:BD:F0:10:88:D3:4C:6B:AA:EE:F8:6B:DA:25:A9:F0:21:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JPUbvfAQiNNMa6ru-GvaJanwIZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/upHXyI-l9dhGBIOdLwpSxCKYoNQ.roa
Signing time: Mon 03 Nov 2025 07:42:03 +0000
ROA not before: Mon 03 Nov 2025 07:42:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 40676
IP address blocks: 86.106.24.0/24 maxlen: 24
91.205.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JPUbvfAQiNNMa6ru-GvaJanwIZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:48:aa:79:51:b9:94:46:52:9b:be:ff:d1:fa:67:c9:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24f51bbdf01088d34c6baaeef86bda25a9f02196
Validity
Not Before: Nov 3 07:42:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ba91d7c88fa5f5d84604839d2f0a52c42298a0d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:36:0d:8b:32:0e:e1:85:86:54:ae:8c:f2:da:
81:71:2a:3c:a7:8a:fc:5c:e6:6e:f6:69:2a:b0:09:
dc:1d:77:f6:78:a3:4e:5a:3c:e1:64:ae:02:41:ca:
96:ec:0e:34:76:06:80:ff:06:74:24:4a:89:cd:31:
f0:1f:47:c4:db:de:c4:69:25:cc:18:ad:ed:37:67:
1a:ff:fb:d1:4f:ed:66:76:16:e9:46:0c:be:35:6f:
99:e7:a7:57:8d:af:f8:2a:e8:97:33:2b:f0:4c:4e:
91:c0:da:11:eb:c7:f5:05:2e:6f:1b:de:44:44:19:
6d:6e:df:3e:c6:cc:29:76:74:f4:2e:34:cc:9b:d2:
5e:4a:f0:65:28:d3:c6:37:6f:2a:f7:13:ca:b2:9e:
96:b1:c0:3d:d7:c8:df:56:4f:2a:c7:9b:d1:cf:79:
7e:5e:40:f7:0a:40:60:4d:15:96:ef:c5:b7:98:fd:
59:bf:3a:c2:3a:ff:1f:a4:58:18:1e:26:6d:f4:5d:
f4:71:d8:7e:75:13:fb:d7:5e:c8:7a:b2:ac:b1:ef:
7a:ce:09:6b:d8:b4:43:a0:2a:f9:40:a6:73:5a:50:
b7:cf:ca:70:6b:1b:dd:bb:65:66:08:db:b2:06:14:
4b:f2:4a:ad:39:11:c7:6e:e6:d3:47:51:c2:2d:b4:
6c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:91:D7:C8:8F:A5:F5:D8:46:04:83:9D:2F:0A:52:C4:22:98:A0:D4
X509v3 Authority Key Identifier:
keyid:24:F5:1B:BD:F0:10:88:D3:4C:6B:AA:EE:F8:6B:DA:25:A9:F0:21:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JPUbvfAQiNNMa6ru-GvaJanwIZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/upHXyI-l9dhGBIOdLwpSxCKYoNQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.106.24.0/24
91.205.221.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:2c:92:90:7e:45:08:4c:63:88:84:1f:49:06:5f:41:9a:95:
67:d4:5a:e9:05:eb:9d:04:5e:6f:82:df:4e:ab:2d:26:e7:9c:
1a:70:bc:30:61:95:a4:3e:ce:04:54:70:43:16:0c:57:13:7d:
2a:7c:e9:18:fd:c5:fe:ea:63:74:da:a6:87:02:9e:fd:da:0c:
c9:0c:e6:eb:8f:c0:cc:46:a8:51:68:d3:44:84:34:7c:39:69:
26:fe:40:31:f4:08:eb:3d:67:2d:dc:20:ae:85:25:56:a7:d4:
d4:c1:c0:3e:ab:55:4c:6c:4b:a4:08:67:51:a7:a7:6b:4b:6e:
19:5e:c2:4c:8f:16:91:22:8d:50:72:78:98:fa:d4:e5:36:f4:
5d:a5:80:46:30:92:41:f2:d5:51:3d:f9:31:23:ab:ee:f6:bd:
10:74:fa:71:d6:f6:d3:87:68:d0:b1:03:14:88:42:3a:3d:ec:
6b:9e:c1:ea:11:a9:d7:9e:b7:11:6d:4d:6c:44:f2:b7:3e:9b:
bd:68:29:ea:3a:e2:a0:8f:0e:bc:d2:0f:af:1a:26:d3:e3:6d:
4d:71:5c:37:1b:e6:b7:77:12:2a:79:c2:43:1d:0c:23:4b:b7:
fd:fd:2b:c8:78:ee:ea:ab:72:88:34:51:3c:a8:14:57:b1:3b:
f1:aa:8c:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:47:08 2025 by rpki-client