Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/UTOb4-f09XHl6Pk5agaVquGXszo.roa
File: UTOb4-f09XHl6Pk5agaVquGXszo.roa (raw, json)
Hash identifier: bQmABvXyichv92sPSG8W8wQDzRAXdtIXBwm8IMdKld8=
Subject key identifier: 51:33:9B:E3:E7:F4:F5:71:E5:E8:F9:39:6A:06:95:AA:E1:97:B3:3A
Certificate issuer: /CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Certificate serial: 01A1309DA09CB6A35AD18CE79389303A4D67
Authority key identifier: A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/UTOb4-f09XHl6Pk5agaVquGXszo.roa
Signing time: Mon 12 Oct 2026 14:56:38 +0000
ROA not before: Mon 12 Oct 2026 14:56:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215224
IP address blocks: 188.208.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:30:9d:a0:9c:b6:a3:5a:d1:8c:e7:93:89:30:3a:4d:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Validity
Not Before: Oct 12 14:56:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=51339be3e7f4f571e5e8f9396a0695aae197b33a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b5:6a:b3:48:6f:27:f1:e1:e0:f9:aa:f0:16:
4d:8a:7f:42:b9:75:d6:a1:ac:6b:86:31:e1:e1:7a:
e0:51:b5:57:61:07:86:1a:82:9b:6c:fb:10:ab:e3:
12:b0:34:fe:ca:71:7c:c6:f9:e3:ec:8c:23:39:e9:
94:35:65:67:83:a6:28:3e:57:11:10:73:41:45:0e:
fb:d0:de:e1:ff:cc:79:ae:1e:0f:7a:6e:50:20:35:
f7:cd:4a:13:f0:65:42:68:ce:b0:1d:1b:b9:75:da:
67:a1:60:ab:b5:70:17:82:21:e9:1f:54:95:b4:2e:
b8:59:ce:39:ce:e7:6f:cd:72:51:41:9c:9f:ca:78:
29:d2:26:c8:de:c2:f7:df:a9:82:7b:88:05:a9:48:
d8:0b:79:b1:f9:3d:3e:9b:a7:c2:d0:e9:5e:a7:e6:
1d:03:af:2f:55:2b:91:ec:41:b2:fd:93:a4:9c:a1:
54:b2:bd:b2:05:69:f3:85:f6:19:fb:18:a5:f7:fd:
61:ce:9d:3c:fb:71:93:ce:f6:91:3a:56:22:88:e1:
41:aa:16:78:4c:c0:9b:0b:19:5c:7e:3d:a6:04:27:
d3:89:33:e4:d2:13:26:4b:cd:8e:49:38:ce:4c:60:
33:1a:86:dd:37:1a:13:05:b2:0d:74:34:5d:f7:11:
b0:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:33:9B:E3:E7:F4:F5:71:E5:E8:F9:39:6A:06:95:AA:E1:97:B3:3A
X509v3 Authority Key Identifier:
keyid:A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/UTOb4-f09XHl6Pk5agaVquGXszo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.208.125.0/24
Signature Algorithm: sha256WithRSAEncryption
56:0e:08:b1:e6:15:70:90:f3:7b:81:8e:9a:68:d6:27:5a:ac:
43:b8:c4:c1:01:95:76:2f:a7:a9:1e:af:ea:fb:85:a1:97:aa:
1b:b2:34:4d:81:8a:83:78:9f:d9:0b:d9:18:2f:eb:f0:d6:ee:
9c:83:2d:c6:af:b4:e8:38:55:fa:64:d1:72:46:a3:df:65:e8:
19:54:d9:5c:cb:5b:36:b5:50:ab:b9:e9:26:b6:93:fd:14:5c:
54:59:d2:bb:c2:00:2a:b7:ac:88:4b:63:66:ec:12:27:92:ac:
d5:66:58:64:ea:e6:e7:4a:e0:1a:3e:7d:44:48:1a:17:bd:92:
a3:79:02:a7:43:74:d8:c4:29:bd:e7:05:9c:0d:be:5c:4c:ef:
f5:fa:5d:6e:15:31:4c:b5:94:0c:1c:d9:54:90:75:fa:49:ec:
33:0c:41:85:b7:cb:ea:2b:87:e6:4b:1b:66:c5:4b:6b:19:c3:
81:1f:08:cb:ee:5f:06:d8:6e:f6:e6:37:91:25:30:53:23:7d:
91:82:d2:4a:30:26:3b:00:79:3c:cb:6a:cb:40:21:ac:a9:f1:
d1:ae:87:16:f6:0a:c0:7d:ea:64:ea:94:d9:d9:eb:9b:5c:d7:
81:4c:66:b6:7b:78:43:91:33:d9:2a:7b:20:a8:12:b5:31:ea:
d5:c2:88:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 14:28:54 2026 by rpki-client