Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/UCRoAwNB78ZsHZE9I6YfwoLSqGs.roa
File: UCRoAwNB78ZsHZE9I6YfwoLSqGs.roa (raw, json)
Hash identifier: nIZEj/cfzbmC6p9w7qeSsW3ljF7MVCpSzyawtrQnMMk=
Subject key identifier: 50:24:68:03:03:41:EF:C6:6C:1D:91:3D:23:A6:1F:C2:82:D2:A8:6B
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 019A24A0B4BDBB392A382A6E20F9E20184F3
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/UCRoAwNB78ZsHZE9I6YfwoLSqGs.roa
Signing time: Mon 27 Oct 2025 07:45:03 +0000
ROA not before: Mon 27 Oct 2025 07:45:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 45.155.240.0/24 maxlen: 24
45.155.241.0/24 maxlen: 24
194.143.210.0/24 maxlen: 24
194.143.217.0/24 maxlen: 24
194.143.218.0/24 maxlen: 24
194.143.222.0/24 maxlen: 24
194.143.223.0/24 maxlen: 24
195.114.192.0/24 maxlen: 24
195.114.195.0/24 maxlen: 24
195.114.202.0/24 maxlen: 24
195.114.203.0/24 maxlen: 24
195.114.205.0/24 maxlen: 24
213.220.2.0/24 maxlen: 24
213.220.4.0/24 maxlen: 24
213.220.6.0/24 maxlen: 24
213.220.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:a0:b4:bd:bb:39:2a:38:2a:6e:20:f9:e2:01:84:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: Oct 27 07:45:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=502468030341efc66c1d913d23a61fc282d2a86b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f9:86:f6:7c:47:59:ce:7d:49:ef:6b:bc:09:
0b:2d:81:3c:f9:b7:89:19:dd:ef:3f:1f:55:94:cf:
f7:0e:3f:4c:71:8c:b8:a1:9f:ad:63:d6:fe:6b:10:
0d:63:2d:f1:6e:ab:33:08:54:a5:7f:c2:44:f8:80:
78:7c:ae:fd:7e:29:9a:4a:c8:c2:ff:7e:2d:da:16:
e1:f2:f3:d9:d6:3c:9a:cf:bf:6c:c8:77:1c:ae:c0:
e8:a5:06:71:d9:99:5b:32:ef:41:b3:d5:7e:27:35:
4e:87:74:da:95:0c:b7:62:3f:60:92:26:97:d6:e2:
fe:b0:74:f5:d9:0d:f6:54:d6:70:c4:43:04:75:0e:
f6:bd:18:1b:e9:30:f8:ee:b1:c8:fe:77:94:b2:c9:
ef:77:7d:f5:68:84:ec:6e:cb:45:c0:24:1c:75:3e:
47:1e:82:d5:4d:b9:93:a3:49:3b:6d:70:04:73:14:
fe:79:89:6d:72:e3:82:96:42:0c:d1:77:90:a2:d5:
7d:25:94:d6:aa:85:98:d9:6a:88:5a:92:d5:a6:d7:
92:a6:a7:c6:2d:ba:a8:8f:94:5d:64:9f:67:72:f0:
97:4a:e1:11:cd:a9:e7:2c:16:d1:9d:95:b0:fd:de:
b9:09:7c:e5:5c:58:a7:44:db:73:e0:75:e1:99:e0:
09:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:24:68:03:03:41:EF:C6:6C:1D:91:3D:23:A6:1F:C2:82:D2:A8:6B
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/UCRoAwNB78ZsHZE9I6YfwoLSqGs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.240.0/23
194.143.210.0/24
194.143.217.0-194.143.218.255
194.143.222.0/23
195.114.192.0/24
195.114.195.0/24
195.114.202.0/23
195.114.205.0/24
213.220.2.0/24
213.220.4.0/24
213.220.6.0/24
213.220.41.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:75:67:71:d8:d9:3c:0a:35:49:24:45:46:d4:c4:67:ed:d9:
ca:a5:b6:ee:38:c0:8f:03:87:f0:0b:99:be:f8:d4:da:14:4c:
ab:56:ea:a4:76:64:f0:42:4e:9c:df:e9:57:08:fb:54:7d:5b:
c3:71:a1:21:5c:7d:0d:81:2f:37:16:0d:aa:80:16:e9:ad:f5:
5a:50:6d:0d:38:d3:6a:5b:55:84:db:50:05:a5:26:85:ab:42:
5f:e0:94:c5:9a:26:e7:bd:32:70:f1:d8:d1:25:f8:42:e1:af:
44:c6:51:ad:b7:e5:46:8b:83:79:0b:8f:b3:7f:5e:71:c5:9a:
0d:f1:07:3a:47:7e:5a:41:4a:b7:45:6d:51:3e:e4:f1:dd:12:
a5:72:ac:f0:22:50:c8:41:18:cb:08:2e:4b:0b:cb:0e:c8:1d:
b9:59:e9:f2:09:cd:eb:6e:b9:89:4b:09:24:bd:78:b7:86:3b:
5a:4d:92:12:32:4f:1c:81:00:16:66:3a:19:28:fd:c5:63:d7:
23:27:19:ee:56:f1:e2:c1:12:d3:53:2c:fd:d9:92:98:49:31:
29:fd:23:af:7e:03:02:76:86:46:1d:9e:18:a5:e6:0c:4e:39:
bb:ad:b1:91:60:d3:94:a0:71:fb:98:02:f3:67:22:b5:f2:8c:
18:0e:8d:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:03:07 2025 by rpki-client