Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/uSSKGqOBXnTR7MVUEQlQOSZ9RT0.roa
File: uSSKGqOBXnTR7MVUEQlQOSZ9RT0.roa (raw, json)
Hash identifier: NX7M1wXUZXHf/C4RkIE/pAqdDJdNXJnIC49rcaGZIgQ=
Subject key identifier: B9:24:8A:1A:A3:81:5E:74:D1:EC:C5:54:11:09:50:39:26:7D:45:3D
Certificate issuer: /CN=131881732a3e245a959bc679e0458c39f893e46b
Certificate serial: 01A06DA08F659D61CDD2175EACEBD46D34C1
Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/uSSKGqOBXnTR7MVUEQlQOSZ9RT0.roa
Signing time: Fri 04 Sep 2026 18:13:54 +0000
ROA not before: Fri 04 Sep 2026 18:13:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210980
IP address blocks: 5.178.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Sep 2026 22:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:a0:8f:65:9d:61:cd:d2:17:5e:ac:eb:d4:6d:34:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b
Validity
Not Before: Sep 4 18:13:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b9248a1aa3815e74d1ecc55411095039267d453d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6f:0e:5c:88:d5:ad:b8:60:d7:a0:a6:d8:19:
b8:0d:98:ed:c2:36:d1:06:b2:45:f6:59:a5:14:0d:
68:62:b7:fe:2f:68:6a:1f:c2:49:d1:d1:a9:73:89:
35:f5:ea:82:c4:80:d8:c1:8f:0c:ae:df:6b:6c:d3:
7f:1c:8f:72:05:bc:9c:c8:e3:76:4b:de:70:9a:e6:
ec:c4:d6:10:7c:a5:c5:36:ad:a9:31:95:88:24:5a:
c5:c7:de:50:15:6f:91:95:72:f9:46:de:46:2d:86:
c0:ba:4f:ef:37:3b:d3:64:e6:38:b3:5c:e1:86:05:
64:e4:ef:30:34:9c:fc:2c:bc:ad:6b:c4:16:5f:1d:
cf:43:54:09:c4:05:86:90:d6:fb:ce:50:e5:ae:74:
5d:42:e4:28:76:68:85:41:d3:73:3d:bb:9c:f7:48:
c2:07:ad:65:f8:85:dd:c1:de:48:63:2c:f1:2b:6e:
70:5a:76:4c:a3:27:6c:fc:7d:19:79:b4:d0:77:00:
6a:4d:56:a9:8f:98:a3:f7:96:7d:46:1a:a1:90:4c:
75:9b:d1:a0:c7:53:2a:04:82:59:56:95:9b:ec:63:
2b:e0:49:8a:a8:1f:21:ca:32:ec:12:65:ce:47:6a:
b7:c0:fb:54:9e:c8:94:bc:75:cc:6e:88:3a:f7:59:
07:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:24:8A:1A:A3:81:5E:74:D1:EC:C5:54:11:09:50:39:26:7D:45:3D
X509v3 Authority Key Identifier:
keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/uSSKGqOBXnTR7MVUEQlQOSZ9RT0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.178.103.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:a3:9e:44:7d:84:7d:37:9d:36:66:52:cf:15:94:d2:71:17:
86:bb:a8:05:08:7e:b3:04:4f:a9:93:e7:40:54:33:cb:1c:e9:
e5:f8:ce:e2:15:77:7e:02:a4:01:7c:d9:28:39:8d:7f:88:af:
a1:c7:52:e5:05:17:a3:dd:b6:c0:9f:d7:f0:1a:79:58:76:2d:
e3:b6:c5:f4:1a:ba:7f:c4:f5:ab:89:f3:8d:85:5d:02:11:21:
c4:b0:53:b1:83:26:7a:77:d3:e3:d8:45:7e:8b:30:f7:eb:ac:
6e:e0:13:02:6f:0c:e5:77:6f:dc:1c:83:43:37:a3:3a:62:79:
c5:4b:8f:cf:67:fe:67:ec:8f:1d:a3:c7:31:2a:81:e6:38:47:
23:e9:38:0f:b4:70:e8:db:20:98:4f:27:18:ad:29:4e:36:c2:
97:23:a9:16:a3:6b:00:42:7f:02:31:37:e6:82:b4:5b:be:49:
84:12:c8:5a:eb:fc:e9:07:42:29:b1:a9:35:5c:35:ba:d6:2f:
95:57:2a:72:f6:2b:96:0a:df:9c:7c:a7:ef:5b:8a:46:c8:2c:
48:72:56:f2:48:ec:3d:5e:90:40:ac:5f:ff:5b:78:97:5f:bb:
61:a5:4d:0a:ef:81:f9:28:d8:53:94:3d:86:73:99:8f:5e:6f:
5b:53:ba:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 02:10:03 2026 by rpki-client