Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/4d7a96-0574-4a09-850d-75137b12842b/1/UCbP0uMxwI1Dtwy_MSnoOs0srFA.roa
File: UCbP0uMxwI1Dtwy_MSnoOs0srFA.roa (raw, json)
Hash identifier: FXCOZ3RR1v7GAOBmOczwXx+7sehvCfZ7oMWfxcGZPmk=
Subject key identifier: 50:26:CF:D2:E3:31:C0:8D:43:B7:0C:BF:31:29:E8:3A:CD:2C:AC:50
Certificate issuer: /CN=0ccd4d493d391ca4468e612ce91b47f1c8283362
Certificate serial: 019768BC491D572509DB9594BA7117F0F4DA
Authority key identifier: 0C:CD:4D:49:3D:39:1C:A4:46:8E:61:2C:E9:1B:47:F1:C8:28:33:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DM1NST05HKRGjmEs6RtH8cgoM2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/4d7a96-0574-4a09-850d-75137b12842b/1/UCbP0uMxwI1Dtwy_MSnoOs0srFA.roa
Signing time: Fri 13 Jun 2025 10:00:59 +0000
ROA not before: Fri 13 Jun 2025 10:00:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199028
IP address blocks: 81.161.112.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/4d7a96-0574-4a09-850d-75137b12842b/1/DM1NST05HKRGjmEs6RtH8cgoM2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/4d7a96-0574-4a09-850d-75137b12842b/1/DM1NST05HKRGjmEs6RtH8cgoM2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/DM1NST05HKRGjmEs6RtH8cgoM2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bc:49:1d:57:25:09:db:95:94:ba:71:17:f0:f4:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ccd4d493d391ca4468e612ce91b47f1c8283362
Validity
Not Before: Jun 13 10:00:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5026cfd2e331c08d43b70cbf3129e83acd2cac50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:19:8e:6a:56:43:5e:c6:35:8a:b2:17:03:db:
f4:bd:90:9a:e7:70:51:e5:2c:3e:1e:84:4a:d2:51:
9e:ef:44:35:85:fd:94:9d:52:66:d8:4d:db:9b:28:
e0:b3:5c:a2:46:30:ff:fe:9c:0f:90:82:40:7f:e5:
d0:f0:59:45:26:13:17:80:e7:f2:7e:ed:8e:17:60:
b2:53:c1:45:5e:ed:2b:38:9f:09:fa:f2:eb:2b:14:
6c:f9:14:f1:57:57:a0:40:14:f3:e9:38:e9:c4:dc:
7b:54:00:2a:f2:fc:39:cf:f8:be:d9:0b:2c:21:74:
f0:f2:19:21:f3:28:5c:9f:6d:a7:29:c9:a0:56:0f:
b5:6a:b4:15:5b:e1:ad:59:3e:7a:1f:fe:fc:14:e4:
90:a7:75:5a:c7:de:f7:78:93:b2:4c:55:f5:2a:58:
56:b5:0c:ad:87:e9:2e:16:5e:5b:be:87:d6:3e:81:
30:61:68:c4:42:72:8d:c5:a0:84:c4:e1:e6:c4:4b:
11:99:02:89:f5:66:84:4a:0e:15:4e:1b:b2:9f:96:
f1:88:fd:73:89:f9:c9:68:4e:dc:e1:54:14:b5:e8:
53:74:56:83:f4:9a:04:82:a2:35:e3:98:80:88:18:
21:ee:23:10:01:dc:65:bd:17:27:68:4d:98:3d:12:
22:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:26:CF:D2:E3:31:C0:8D:43:B7:0C:BF:31:29:E8:3A:CD:2C:AC:50
X509v3 Authority Key Identifier:
keyid:0C:CD:4D:49:3D:39:1C:A4:46:8E:61:2C:E9:1B:47:F1:C8:28:33:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DM1NST05HKRGjmEs6RtH8cgoM2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4d7a96-0574-4a09-850d-75137b12842b/1/UCbP0uMxwI1Dtwy_MSnoOs0srFA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4d7a96-0574-4a09-850d-75137b12842b/1/DM1NST05HKRGjmEs6RtH8cgoM2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.161.112.0/23
Signature Algorithm: sha256WithRSAEncryption
00:9c:22:78:68:cd:fb:5b:92:61:84:fa:06:4c:15:3d:99:ca:
85:9e:42:22:00:cc:2a:4c:70:57:ad:70:4d:f3:9a:c0:10:ae:
3a:d7:c5:67:48:5e:17:f4:23:8e:74:ef:5c:fb:25:58:8c:0f:
b9:82:5b:5f:a1:8c:9d:2b:16:71:66:04:28:f9:52:23:62:df:
db:cb:cc:6f:8f:ec:c7:ac:b3:b3:37:f1:97:7c:1d:7b:6d:40:
97:bd:84:28:89:3b:21:14:90:25:bc:99:de:94:b6:40:e2:93:
93:71:f7:ae:7d:18:6d:58:3b:07:56:f5:4f:d8:73:f8:70:e8:
93:37:27:c5:7f:ab:3a:af:a1:95:18:47:ef:7e:eb:c5:d3:a6:
78:cf:92:2c:71:0b:eb:80:65:82:f9:43:95:dd:1a:b3:d8:57:
51:90:5a:90:64:a0:2a:3b:21:1c:bb:f7:89:c3:d7:38:48:cc:
06:42:4c:1a:52:6a:10:66:36:97:27:7d:73:b8:77:d7:d9:42:
49:8b:d0:26:7a:f8:ff:74:3f:e3:11:71:d9:4c:9f:23:a6:84:
fd:c8:c7:8e:69:4f:fe:0e:24:21:82:d2:4e:37:c1:e4:5c:4f:
d6:03:0b:61:ab:4c:e7:62:df:bf:dc:94:24:ea:a5:6e:a7:a2:
3b:bf:84:f4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZdovEkdVyUJ25WUunEX8PTaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjY2Q0ZDQ5M2QzOTFjYTQ0NjhlNjEyY2U5MWI0N2YxYzgy
ODMzNjIwHhcNMjUwNjEzMTAwMDU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MDI2Y2ZkMmUzMzFjMDhkNDNiNzBjYmYzMTI5ZTgzYWNkMmNhYzUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRmOalZDXsY1irIXA9v0vZCa53BR
5Sw+HoRK0lGe70Q1hf2UnVJm2E3bmyjgs1yiRjD//pwPkIJAf+XQ8FlFJhMXgOfy
fu2OF2CyU8FFXu0rOJ8J+vLrKxRs+RTxV1egQBTz6TjpxNx7VAAq8vw5z/i+2Qss
IXTw8hkh8yhcn22nKcmgVg+1arQVW+GtWT56H/78FOSQp3Vax973eJOyTFX1KlhW
tQyth+kuFl5bvofWPoEwYWjEQnKNxaCExOHmxEsRmQKJ9WaESg4VThuyn5bxiP1z
ifnJaE7c4VQUtehTdFaD9JoEgqI145iAiBgh7iMQAdxlvRcnaE2YPRIiOwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFAmz9LjMcCNQ7cMvzEp6DrNLKxQMB8GA1UdIwQY
MBaAFAzNTUk9ORykRo5hLOkbR/HIKDNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE0xTlNUMDVIS1JHam1FczZSdEg4Y2dvTTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi80ZDdhOTYtMDU3NC00YTA5LTg1MGQt
NzUxMzdiMTI4NDJiLzEvVUNiUDB1TXh3STFEdHd5X01Tbm9PczBzckZBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi80ZDdhOTYtMDU3NC00YTA5LTg1MGQtNzUxMzdiMTI4NDJi
LzEvRE0xTlNUMDVIS1JHam1FczZSdEg4Y2dvTTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBUaFwMA0G
CSqGSIb3DQEBCwUAA4IBAQAAnCJ4aM37W5JhhPoGTBU9mcqFnkIiAMwqTHBXrXBN
85rAEK4618VnSF4X9COOdO9c+yVYjA+5gltfoYydKxZxZgQo+VIjYt/by8xvj+zH
rLOzN/GXfB17bUCXvYQoiTshFJAlvJnelLZA4pOTcfeufRhtWDsHVvVP2HP4cOiT
NyfFf6s6r6GVGEfvfuvF06Z4z5IscQvrgGWC+UOV3Rqz2FdRkFqQZKAqOyEcu/eJ
w9c4SMwGQkwaUmoQZjaXJ31zuHfX2UJJi9Amevj/dD/jEXHZTJ8jpoT9yMeOaU/+
DiQhgtJON8HkXE/WAwthq0znYt+/3JQk6qVup6I7v4T0
-----END CERTIFICATE-----
Generated at Wed Jun 18 22:16:25 2025 by rpki-client