Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/uTqDOXMBzaUcm3aTFfIkRdJzB_k.roa
File: uTqDOXMBzaUcm3aTFfIkRdJzB_k.roa (raw, json)
Hash identifier: OQQ9b7E9+F7d3ieC2uVjPwlaR66C7dIdP4pNorXtk2E=
Subject key identifier: B9:3A:83:39:73:01:CD:A5:1C:9B:76:93:15:F2:24:45:D2:73:07:F9
Certificate issuer: /CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf
Certificate serial: 019EDCD726F9052BF5C5AA1FF48AF1A4C909
Authority key identifier: C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/uTqDOXMBzaUcm3aTFfIkRdJzB_k.roa
Signing time: Thu 18 Jun 2026 22:25:48 +0000
ROA not before: Thu 18 Jun 2026 22:25:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213388
IP address blocks: 45.142.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft
rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:dc:d7:26:f9:05:2b:f5:c5:aa:1f:f4:8a:f1:a4:c9:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf
Validity
Not Before: Jun 18 22:25:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b93a83397301cda51c9b769315f22445d27307f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:61:d6:ad:d3:15:3b:ca:8d:66:48:6f:2e:80:
bc:3b:bf:9a:f6:ca:54:bc:51:2f:ee:36:e1:46:69:
3c:63:6b:da:cc:3a:25:41:22:7e:cd:1f:e0:1d:bc:
86:e7:1d:fc:e3:2c:79:ae:85:ca:8f:9b:e1:dc:aa:
df:b6:15:55:8b:2e:4b:40:38:07:aa:6e:37:cb:d9:
8b:ac:f1:4b:49:b6:e8:71:b7:3c:02:b1:f6:2d:47:
72:db:69:51:45:99:49:c9:d3:d1:be:44:76:f7:17:
2d:f3:fe:23:33:e8:af:c8:39:98:45:33:ab:34:a7:
d0:6b:b9:29:e9:ec:ce:20:1e:c1:d3:8a:ca:0e:97:
ec:11:e8:f6:d4:28:b0:b0:ef:a5:6d:f2:d4:3a:59:
c0:2c:a6:cd:03:53:3a:dd:51:96:ff:66:41:23:e7:
74:c8:c1:20:e0:b3:b4:04:35:9e:a3:25:b4:b3:16:
d6:1e:f9:6f:bc:59:59:ce:2d:a7:f7:45:20:22:a0:
09:1e:f3:99:da:23:40:ee:d4:4b:93:56:4e:3f:47:
93:5f:79:00:67:2d:ae:36:ce:2b:90:7c:7b:48:ed:
b1:fe:47:a1:fa:c8:2b:be:a4:e8:9e:8b:74:b4:ab:
7c:2a:8f:bf:1f:7a:76:26:c3:d0:08:f0:b9:b7:5d:
5a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:3A:83:39:73:01:CD:A5:1C:9B:76:93:15:F2:24:45:D2:73:07:F9
X509v3 Authority Key Identifier:
keyid:C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/uTqDOXMBzaUcm3aTFfIkRdJzB_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.193.0/24
Signature Algorithm: sha256WithRSAEncryption
45:6f:c0:5f:27:22:90:d4:1c:73:23:d1:c2:c9:f2:2c:ce:75:
e3:44:56:5d:cb:76:1a:bd:0e:8f:4c:07:ae:3c:1f:21:60:27:
04:01:1b:01:13:01:2a:1f:49:07:16:c7:09:13:8c:2c:6a:0f:
26:f1:01:0f:12:2a:da:54:f0:53:09:52:d8:26:f3:fb:4f:e1:
cf:8f:78:7b:7d:c1:dd:46:ea:9a:14:74:d8:82:7b:21:21:2c:
3b:08:9b:f8:d8:1c:3a:14:32:69:e4:c8:a9:66:77:63:da:d3:
64:f8:39:83:a7:8c:a8:16:f9:9b:a9:62:f7:6f:04:f5:10:bd:
68:3d:d8:79:77:65:22:76:b1:54:54:42:f8:ae:b8:38:6a:7b:
a7:0c:27:4b:fd:3e:af:45:bb:e6:d7:ed:49:76:e4:8f:46:ee:
74:c5:e1:dd:98:d2:4a:a1:dc:f1:4e:56:71:b5:16:eb:7e:8b:
04:4e:ac:91:c0:e4:f0:1d:78:bd:63:80:06:37:4b:f4:b9:e0:
83:49:21:5a:f5:fe:4b:77:10:13:a5:37:13:d1:01:12:63:66:
34:2a:85:93:7e:04:09:b6:ff:9b:9d:22:46:5c:b8:8d:e5:f8:
a6:83:62:04:2c:5c:78:85:aa:bb:63:e2:85:09:2a:2e:2d:44:
8e:05:c8:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:12:12 2026 by rpki-client