Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/uhML_oNbUvddVaM_8h0IgpoA3cc.roa
File: uhML_oNbUvddVaM_8h0IgpoA3cc.roa (raw, json)
Hash identifier: C4c5Ksbcv3rZrM8/EsXQOZhZrBbQbFeY/G5HM2327Gc=
Subject key identifier: BA:13:0B:FE:83:5B:52:F7:5D:55:A3:3F:F2:1D:08:82:9A:00:DD:C7
Certificate issuer: /CN=d6aa3fbc78e31229157c78b6d23a65eb2e353dce
Certificate serial: 019A3AF541DFA2F9E4FD17529762E88030D3
Authority key identifier: D6:AA:3F:BC:78:E3:12:29:15:7C:78:B6:D2:3A:65:EB:2E:35:3D:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/uhML_oNbUvddVaM_8h0IgpoA3cc.roa
Signing time: Fri 31 Oct 2025 15:49:03 +0000
ROA not before: Fri 31 Oct 2025 15:49:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5056
IP address blocks: 78.108.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:3a:f5:41:df:a2:f9:e4:fd:17:52:97:62:e8:80:30:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6aa3fbc78e31229157c78b6d23a65eb2e353dce
Validity
Not Before: Oct 31 15:49:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ba130bfe835b52f75d55a33ff21d08829a00ddc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:7e:50:b8:fd:7e:1f:c0:bf:3b:27:d2:c8:c3:
a8:c7:97:8b:6f:1b:f2:32:bc:b4:a8:69:84:dd:49:
7b:fd:c4:c7:96:2d:3f:65:ea:50:6e:10:e9:e6:a6:
49:12:45:9d:1b:56:5b:4d:5c:4b:8c:48:a5:db:e5:
f5:fe:6f:5e:3a:1f:5a:bf:c8:c4:37:9d:37:e2:55:
91:a2:34:27:db:41:59:02:03:4f:67:36:ad:3b:75:
7a:0d:a5:8b:26:dd:0c:20:25:63:86:0b:3f:d9:78:
c2:37:d7:21:8e:1d:ae:c5:74:2f:d4:df:4e:19:ed:
c1:39:a9:68:60:d3:aa:3c:16:77:5b:4a:f5:91:56:
3b:55:21:69:88:19:73:f1:7f:6d:82:98:d6:00:15:
f6:5e:fc:6f:48:7d:31:01:28:30:37:5c:c9:8e:cd:
c7:fb:79:4b:25:e0:7a:16:a2:8c:06:13:6d:75:37:
7a:85:61:81:0d:f5:2c:48:da:c8:ff:2e:d3:74:95:
41:93:48:4c:62:64:1b:a0:1c:33:08:ab:32:ce:c7:
1d:bf:ed:9c:f2:bd:52:5d:c6:03:29:93:c1:15:39:
a4:64:7f:4b:21:39:4d:a3:bf:e0:80:e8:3d:ff:c0:
5d:30:cb:8e:fd:d7:56:1e:ae:b3:1d:d5:9c:04:54:
58:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:13:0B:FE:83:5B:52:F7:5D:55:A3:3F:F2:1D:08:82:9A:00:DD:C7
X509v3 Authority Key Identifier:
keyid:D6:AA:3F:BC:78:E3:12:29:15:7C:78:B6:D2:3A:65:EB:2E:35:3D:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/uhML_oNbUvddVaM_8h0IgpoA3cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.108.63.0/24
Signature Algorithm: sha256WithRSAEncryption
16:82:c2:ea:92:e8:da:f3:bd:a1:44:64:a6:51:9e:7d:0d:5c:
bb:d4:f1:fc:50:15:fb:13:cf:76:a3:f4:a5:7d:6b:aa:67:71:
d9:57:37:9c:f6:8e:d4:83:bb:04:10:bc:6f:2b:ed:9d:36:82:
d0:53:5d:83:7a:b0:13:74:64:d6:92:28:cb:51:e9:90:e7:a1:
e2:a2:2d:d0:a1:81:8b:a5:c7:a7:18:a5:14:70:82:c6:84:6a:
fd:8a:eb:2c:a4:69:2e:bc:e5:cf:66:d5:f1:64:4e:e6:9f:c9:
e1:29:e9:a6:b2:2a:87:6f:78:b4:65:97:ff:63:4f:78:7f:70:
e4:e5:4f:1a:df:f6:5d:a2:49:f1:25:4e:26:ec:2a:7a:c0:c4:
87:e3:7d:cc:ef:89:55:d6:b4:3e:3c:ed:a2:ff:e8:0c:4c:17:
9f:47:76:a8:a0:2f:66:ce:51:1f:ea:23:fa:4c:6a:fe:08:19:
d6:1c:2f:99:fb:12:1b:76:42:fb:c0:21:ef:f7:1f:ae:d7:d0:
07:df:d1:9a:80:f2:aa:a5:be:84:5e:ba:35:78:2e:09:6b:5d:
33:77:b2:aa:a3:15:e1:a0:6f:f2:84:03:be:29:36:10:40:5b:
5f:d5:3f:72:3d:90:a4:b1:e7:fc:1f:5a:43:e4:f1:6c:29:9f:
9e:ff:4a:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:29:33 2025 by rpki-client