Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/U-U_Tkm4xBBrlekFBtQjiXrIauU.roa
File: U-U_Tkm4xBBrlekFBtQjiXrIauU.roa (raw, json)
Hash identifier: 41TyEm79tZ+O3IraL+NOA9wwTefMXNRXTAYZJHoHXZs=
Subject key identifier: 53:E5:3F:4E:49:B8:C4:10:6B:95:E9:05:06:D4:23:89:7A:C8:6A:E5
Certificate issuer: /CN=11125404c6dd472f1001ed9ffdf726762ac7701d
Certificate serial: 019854B1F3CDDC6304F7C8CDDE637F0179AE
Authority key identifier: 11:12:54:04:C6:DD:47:2F:10:01:ED:9F:FD:F7:26:76:2A:C7:70:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/U-U_Tkm4xBBrlekFBtQjiXrIauU.roa
Signing time: Tue 29 Jul 2025 05:40:05 +0000
ROA not before: Tue 29 Jul 2025 05:40:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213689
IP address blocks: 164.138.8.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:b1:f3:cd:dc:63:04:f7:c8:cd:de:63:7f:01:79:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11125404c6dd472f1001ed9ffdf726762ac7701d
Validity
Not Before: Jul 29 05:40:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=53e53f4e49b8c4106b95e90506d423897ac86ae5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:74:eb:45:f8:b1:50:72:68:72:8d:05:25:d2:
03:34:2f:cf:68:22:f0:6d:ac:e1:c8:a5:2b:8e:05:
f4:59:92:33:f2:42:e1:bf:0d:14:d5:14:43:9e:80:
2e:08:e0:92:a8:09:fe:0e:8f:75:29:a7:28:08:f3:
d0:9f:3f:c9:bf:33:67:1d:63:49:b3:45:cc:8f:42:
00:fb:e6:5b:42:f6:5e:c1:da:4c:46:84:41:2c:bb:
0c:83:45:99:8f:20:37:82:67:40:1b:59:f5:72:05:
9b:3b:f9:31:c3:18:0a:e1:9c:a9:45:12:59:d9:f4:
de:1e:26:ba:4c:4b:dc:fe:ee:da:be:e9:15:db:31:
69:19:e4:1f:f2:24:ac:4d:04:7a:92:06:58:19:27:
c5:b4:91:26:af:b6:04:b7:4c:04:b7:df:96:e6:48:
f5:9b:49:b8:ba:5f:76:9c:97:48:4d:85:ea:0e:29:
d7:60:f1:5b:75:d2:55:82:6a:d5:1a:a7:51:73:ce:
ef:05:d5:fb:7e:6b:c6:84:f1:d2:5f:1e:3d:5d:02:
a7:a1:2d:aa:6a:e6:61:b8:cc:be:f8:b8:d2:b4:16:
a3:ce:2b:c5:f6:10:7c:6b:ca:26:d0:15:02:4b:2f:
41:ba:30:3e:21:8e:65:86:69:ee:c0:52:4b:3c:13:
fb:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:E5:3F:4E:49:B8:C4:10:6B:95:E9:05:06:D4:23:89:7A:C8:6A:E5
X509v3 Authority Key Identifier:
keyid:11:12:54:04:C6:DD:47:2F:10:01:ED:9F:FD:F7:26:76:2A:C7:70:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/U-U_Tkm4xBBrlekFBtQjiXrIauU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.138.8.0/21
Signature Algorithm: sha256WithRSAEncryption
67:b2:ce:96:d7:a8:67:f0:cb:4a:2b:c9:3d:78:f2:af:72:7c:
1d:73:ac:32:be:a6:26:d4:49:1a:9c:7b:26:5a:0f:4a:8b:41:
95:95:42:af:42:06:f1:2c:53:4d:04:0c:46:a3:d3:14:75:27:
e1:76:e8:00:63:1e:24:a1:69:d7:6c:1f:67:02:d9:66:61:2e:
2f:ea:ea:6d:2b:b7:77:22:5f:d2:f3:df:33:46:30:ea:db:80:
cb:78:1b:14:5e:5e:ad:1c:8e:02:4e:9c:0d:39:11:75:9a:6a:
af:a8:a4:11:31:85:e8:89:4e:52:0f:5a:48:5e:e4:81:bb:5c:
6a:0d:ed:72:44:3b:7b:03:3a:31:d7:9b:e3:ef:80:c0:bf:19:
5c:51:b5:04:66:06:0c:5d:c5:be:44:21:ca:2d:85:04:f7:81:
3c:a7:ae:60:f6:a4:32:ad:b7:6c:a6:1e:56:9f:b6:c3:22:af:
0d:18:00:e6:ca:10:6c:c7:df:1b:66:30:ad:f4:62:35:92:e4:
03:4f:d9:d7:d1:81:4a:d8:42:87:f9:43:f1:89:b4:b8:ee:d8:
41:35:7b:1b:a9:1d:a6:d6:1b:a9:21:1b:16:7d:6e:42:ad:85:
b4:81:53:8c:d4:76:84:80:16:b1:7f:3c:dd:aa:e9:ab:ea:e1:
5f:4a:ec:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:05:32 2025 by rpki-client