Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/uskFNA4yUI1op4-Y2CH7mgX8_ko.roa
File: uskFNA4yUI1op4-Y2CH7mgX8_ko.roa (raw, json)
Hash identifier: j+sFm7AYwvnni+mNOJY6erpwPFw4aiYTqZI+0FYycb8=
Subject key identifier: BA:C9:05:34:0E:32:50:8D:68:A7:8F:98:D8:21:FB:9A:05:FC:FE:4A
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 01A06BF03E535BDDE1170A242BA56987D964
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/uskFNA4yUI1op4-Y2CH7mgX8_ko.roa
Signing time: Fri 04 Sep 2026 10:21:41 +0000
ROA not before: Fri 04 Sep 2026 10:21:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204408
IP address blocks: 31.148.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 21:04:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6b:f0:3e:53:5b:dd:e1:17:0a:24:2b:a5:69:87:d9:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Sep 4 10:21:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bac905340e32508d68a78f98d821fb9a05fcfe4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:77:a5:3f:b8:aa:59:d3:ff:f3:2a:24:ed:f2:
8e:a2:0b:09:23:2a:a1:49:eb:48:0e:85:7a:e0:cc:
ef:ac:93:26:bd:e0:ce:99:11:cc:40:85:b5:4f:46:
ff:f0:ef:5a:d8:12:8b:27:ef:1d:93:f8:b0:ae:a0:
fe:95:76:ba:e5:76:98:72:02:a4:21:7b:c8:b6:04:
bd:78:5d:5a:bf:55:97:b8:75:bf:1d:ce:f6:7d:70:
6a:d0:fe:ff:07:c3:bc:24:98:a0:87:cf:0a:8b:6c:
d3:76:21:f5:3a:81:2d:84:8d:03:71:4b:21:85:f3:
1f:8f:90:ac:33:cc:e1:13:d9:34:fd:f9:b8:2b:3f:
79:db:aa:6c:98:37:20:92:33:29:1c:99:13:9a:a0:
8b:16:40:fb:83:d2:8d:32:29:c7:35:a4:ee:5b:cb:
2a:bd:ba:ce:85:cf:b9:3c:07:70:9a:f9:b5:99:78:
b6:63:d9:19:ec:41:6e:51:05:b5:e3:53:7d:44:9b:
79:24:69:3d:1a:fa:26:18:79:98:9d:7f:f3:6b:d7:
6e:cc:95:0c:8f:4e:9d:73:59:6f:ac:6d:63:1b:6a:
4e:3b:e1:4f:ed:f1:df:e1:43:f5:27:d2:5e:47:85:
f4:6c:70:7a:a3:1d:50:91:d9:a9:5b:f1:61:c3:76:
13:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:C9:05:34:0E:32:50:8D:68:A7:8F:98:D8:21:FB:9A:05:FC:FE:4A
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/uskFNA4yUI1op4-Y2CH7mgX8_ko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.245.0/24
Signature Algorithm: sha256WithRSAEncryption
58:3c:5b:63:13:68:13:c0:bf:7b:36:e9:99:96:c8:4f:6f:5d:
50:ce:d6:e1:3f:3d:45:3e:ae:da:20:de:97:b9:6d:e0:41:62:
3b:4a:e4:20:7a:76:31:32:cd:2e:75:b0:22:84:93:cb:a2:64:
0c:21:d2:9f:2b:20:bb:fb:16:bb:06:7e:e2:18:4f:3f:cc:a9:
fc:97:6e:9e:b3:7a:5f:b7:9a:03:e9:c8:6a:2a:87:95:e9:4c:
70:fb:f3:8e:1c:ac:00:e3:bf:de:ae:40:87:f9:2c:24:cd:08:
37:1a:2f:6d:05:58:3d:0f:34:b1:d9:fb:9b:9b:61:bf:b7:c8:
b1:ec:ad:2e:c6:ff:b6:04:19:82:5d:eb:3d:f1:75:0d:1c:db:
19:97:d4:ef:df:bc:c4:c5:98:39:2e:5c:90:d6:b2:89:a3:f1:
dc:c4:90:17:1e:4c:15:8f:22:85:e4:af:ea:6f:50:94:f8:2a:
a3:d2:f3:e0:d6:7b:01:7a:ee:86:5f:c1:6c:23:9c:1a:58:76:
65:7b:29:f1:15:c8:e2:01:cd:c5:ff:55:73:dc:85:78:07:77:
0a:9d:25:aa:15:ff:08:c9:9b:e2:4d:55:b8:ab:34:0e:fc:a3:
91:45:c4:3b:4e:c0:c3:28:7d:aa:d8:56:c9:30:c0:f8:85:45:
19:31:3f:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 06:01:11 2026 by rpki-client