Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/UATBmWHHW2WxzQOpSP-OnmiPiw0.roa
File: UATBmWHHW2WxzQOpSP-OnmiPiw0.roa (raw, json)
Hash identifier: om/mbZRVPg8hXXaFTnaK3rFZPZJ64+QW02960LzG76E=
Subject key identifier: 50:04:C1:99:61:C7:5B:65:B1:CD:03:A9:48:FF:8E:9E:68:8F:8B:0D
Certificate issuer: /CN=5fbe65ae23f207fa695255f55a907ac1608be094
Certificate serial: 019A3908B41BCFA867827318D84C15E3460F
Authority key identifier: 5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/UATBmWHHW2WxzQOpSP-OnmiPiw0.roa
Signing time: Fri 31 Oct 2025 06:51:02 +0000
ROA not before: Fri 31 Oct 2025 06:51:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29226
IP address blocks: 155.212.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:39:08:b4:1b:cf:a8:67:82:73:18:d8:4c:15:e3:46:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fbe65ae23f207fa695255f55a907ac1608be094
Validity
Not Before: Oct 31 06:51:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5004c19961c75b65b1cd03a948ff8e9e688f8b0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:51:e8:5e:ab:e1:d0:3d:7e:b6:48:6c:38:aa:
09:79:e6:d8:31:1a:d3:f0:72:1d:9a:ec:0b:4a:e7:
91:0f:aa:19:a9:81:49:8b:54:8a:72:8f:53:6a:36:
bb:01:66:cb:29:80:c1:9f:fb:ca:d9:8c:49:7b:2c:
2e:32:50:c7:a6:4a:03:f9:22:95:68:fa:da:c7:de:
a8:80:cf:0a:80:66:9b:d9:ba:df:d7:3c:35:71:47:
06:c4:51:dd:70:96:6e:80:4c:aa:d4:a8:c4:d9:fc:
c5:d8:43:7f:7d:6d:b1:16:33:7f:ed:13:df:de:ac:
50:19:9f:51:c6:10:e8:21:70:78:04:1c:3d:42:6c:
eb:8f:2f:3f:5f:a1:db:4a:fa:72:26:bd:64:9e:df:
08:38:7f:50:d9:09:f5:72:41:d5:3b:9d:b0:c0:a4:
24:e0:a8:b0:87:57:ae:54:34:12:59:f4:c5:28:16:
c3:97:bb:b8:17:67:bf:73:85:1d:ca:fe:1c:e3:bf:
b8:0a:b5:c4:ab:79:c9:aa:97:00:97:25:d5:c3:5c:
b1:b1:b7:fb:c2:4f:21:b7:0f:ec:b9:cd:a3:8e:3f:
d9:20:72:d6:be:aa:99:04:59:b8:ad:b6:b6:f3:8a:
37:56:e5:21:a0:86:b9:4d:17:7b:1f:5a:45:ae:82:
57:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:04:C1:99:61:C7:5B:65:B1:CD:03:A9:48:FF:8E:9E:68:8F:8B:0D
X509v3 Authority Key Identifier:
keyid:5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/UATBmWHHW2WxzQOpSP-OnmiPiw0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.212.247.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:78:51:55:3d:45:84:98:f7:e5:bc:69:42:aa:76:f2:47:fd:
ca:71:3e:b0:76:8d:07:98:7d:07:c8:f7:01:55:9d:a2:b0:a2:
52:29:38:90:44:5b:5a:4f:78:45:99:f3:f4:57:d7:bb:a4:08:
c8:88:cc:87:d3:9d:e9:0e:01:81:d7:af:c7:b2:5a:a7:18:97:
d2:e7:8e:52:e0:bb:a9:66:45:b4:ce:91:3c:24:bd:2f:d1:f1:
6d:f5:4d:49:24:f2:67:2b:92:79:ef:48:c4:b1:f5:af:ff:37:
60:17:aa:26:28:65:dd:ea:af:37:b3:a5:f5:8d:ef:13:b6:53:
c4:3f:fe:6d:9e:97:c7:4f:95:bd:b4:27:9a:f7:ee:e2:47:b5:
95:c6:38:b4:f1:6d:a2:f2:95:eb:ce:5a:7b:22:ac:b0:f3:9a:
40:08:0b:31:e5:64:67:8b:47:43:01:56:9f:7c:81:ba:9b:98:
5b:6a:fe:7d:9f:08:a0:28:88:2d:8f:b1:fe:4a:f3:7c:08:07:
ac:46:10:f9:60:73:b8:a0:f3:16:25:cb:76:61:12:e5:1d:ea:
d7:12:e8:85:13:8d:c8:5a:dd:cf:a7:6c:94:a5:7c:13:89:d6:
17:61:4c:aa:00:2a:8c:00:b8:9f:64:39:91:5d:59:17:70:95:
34:9b:53:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:45:43 2025 by rpki-client