Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/UFFg_RrZt6SWK8PHLn0KfUCcf2A.roa
File: UFFg_RrZt6SWK8PHLn0KfUCcf2A.roa (raw, json)
Hash identifier: rA3WXx8z0+qhpsBMN1owb3lAlFIG4N/Uq29kAjRAbP4=
Subject key identifier: 50:51:60:FD:1A:D9:B7:A4:96:2B:C3:C7:2E:7D:0A:7D:40:9C:7F:60
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 019855254F9EC5215CB77872C4C49C7B4653
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/UFFg_RrZt6SWK8PHLn0KfUCcf2A.roa
Signing time: Tue 29 Jul 2025 07:46:05 +0000
ROA not before: Tue 29 Jul 2025 07:46:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 185.209.38.0/24 maxlen: 24
185.209.73.0/24 maxlen: 24
185.210.233.0/24 maxlen: 24
185.210.235.0/24 maxlen: 24
185.218.20.0/24 maxlen: 24
185.222.30.0/24 maxlen: 24
193.58.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:55:25:4f:9e:c5:21:5c:b7:78:72:c4:c4:9c:7b:46:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jul 29 07:46:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=505160fd1ad9b7a4962bc3c72e7d0a7d409c7f60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e3:d2:18:89:94:bc:1d:98:1f:c2:81:68:41:
bf:b6:54:cb:7c:a0:c8:fa:d1:56:1c:be:6c:df:b5:
15:50:0b:98:9b:0f:24:d7:2d:e2:55:cf:df:14:5a:
e1:0b:2b:e7:dc:37:6e:06:a9:00:f4:36:a1:00:e7:
f1:0a:bb:66:a7:7d:1a:f6:c5:f9:68:01:1c:91:16:
52:d4:7a:07:aa:68:89:a4:d5:bc:2a:15:d3:0e:fc:
3a:aa:dc:e8:e8:e9:77:7c:11:bf:68:74:b9:99:3b:
2e:5a:c7:49:8a:d0:ca:44:50:70:f8:12:ed:17:a4:
98:c1:5a:af:c1:df:47:c0:4c:86:34:14:8b:f0:28:
ef:b0:f9:1d:50:3b:5b:86:85:0e:d4:5e:17:d1:7b:
d1:18:0a:2d:5c:6c:4d:55:95:34:28:e7:7f:d7:ce:
ed:46:14:c0:a6:aa:f6:ec:88:28:e2:b7:1b:21:9e:
e6:49:3a:5e:f1:0b:69:f7:71:34:36:d1:ef:c4:c6:
04:96:b2:98:51:11:7e:a7:f4:75:e4:f3:2e:a4:f8:
3a:13:f8:1b:37:4a:36:0b:0f:35:f8:69:71:74:08:
3f:57:50:c8:bd:a6:0b:a9:be:30:b5:ae:66:a0:c9:
8b:ea:e8:11:3c:b2:fb:7c:f0:e5:c1:32:96:86:2f:
4a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:51:60:FD:1A:D9:B7:A4:96:2B:C3:C7:2E:7D:0A:7D:40:9C:7F:60
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/UFFg_RrZt6SWK8PHLn0KfUCcf2A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.209.38.0/24
185.209.73.0/24
185.210.233.0/24
185.210.235.0/24
185.218.20.0/24
185.222.30.0/24
193.58.146.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:ab:61:8e:f6:a3:2f:9c:54:7d:5d:c4:82:8d:fa:d4:07:3f:
ff:d0:d6:f6:c6:02:da:05:ed:69:39:fd:2c:f6:1b:4a:6d:c2:
a8:0b:e1:3d:ea:c7:35:dc:61:ee:0a:98:90:f7:08:6f:10:83:
90:35:ef:fe:2e:96:91:5a:41:fe:37:56:d6:75:7b:af:bb:e9:
f5:33:e8:a4:1b:af:4c:34:95:56:14:f6:40:df:1c:ba:43:02:
7b:50:6a:37:b2:33:f7:09:55:c5:d1:f5:c3:0c:f1:15:a8:7c:
a6:69:a6:0e:1e:15:5a:cc:c0:77:3e:1b:28:3f:ac:0e:52:6e:
0a:2a:0c:57:cf:08:91:ac:7b:7d:76:2b:f4:bc:d1:5f:70:d3:
f6:d2:b0:20:7f:46:f2:a5:9c:a5:0b:93:c6:89:89:af:3a:91:
cd:1d:b0:a6:47:bf:6e:e7:36:72:94:f8:05:78:97:50:35:aa:
d3:84:40:25:0c:40:5f:2d:6b:08:46:0f:2a:30:c6:ae:3b:12:
5a:4a:6d:86:f9:ca:5d:92:3f:96:37:ef:15:54:c8:ed:5d:ac:
df:00:24:a2:23:1c:78:73:07:92:2e:a0:ac:d6:61:47:45:c1:
0a:82:3d:39:9c:23:97:d8:37:d2:bc:18:3e:61:7f:05:48:a0:
6f:e6:5d:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:22:59 2025 by rpki-client