Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/UasIXg8PycY_uWJ4KzFrfbbnfD0.roa
File: UasIXg8PycY_uWJ4KzFrfbbnfD0.roa (raw, json)
Hash identifier: /aFOXWhMnIaaE5AT6oZxWT0Q/OwkMZ+fesslape79Rk=
Subject key identifier: 51:AB:08:5E:0F:0F:C9:C6:3F:B9:62:78:2B:31:6B:7D:B6:E7:7C:3D
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 01A0E17B12DE6D63BA60E9C9145089BAB876
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/UasIXg8PycY_uWJ4KzFrfbbnfD0.roa
Signing time: Sun 27 Sep 2026 06:08:54 +0000
ROA not before: Sun 27 Sep 2026 06:08:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213727
IP address blocks: 178.239.144.0/24 maxlen: 24
178.239.156.0/24 maxlen: 24
178.239.159.0/24 maxlen: 24
185.26.34.0/24 maxlen: 24
185.26.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 16:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:7b:12:de:6d:63:ba:60:e9:c9:14:50:89:ba:b8:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Sep 27 06:08:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=51ab085e0f0fc9c63fb962782b316b7db6e77c3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9c:2f:db:8a:53:0d:e4:75:e9:4e:ac:f7:b5:
6b:71:c7:3d:46:1a:2d:10:20:4d:37:15:61:1b:ae:
24:cf:34:a4:39:97:1b:06:75:f9:dc:c2:4f:65:cc:
0a:de:39:e6:8d:76:2d:73:01:aa:94:cf:3d:e8:fa:
63:81:3f:81:90:92:c8:51:79:30:a1:8d:1e:1a:15:
a6:1d:5b:4f:01:8e:50:81:57:d6:12:0c:6f:e3:f2:
08:43:bf:da:b9:d6:e1:74:ad:19:2f:d1:14:08:6e:
95:af:af:9b:51:3c:4a:55:5c:8a:f9:3b:48:60:54:
63:3f:b9:00:45:b6:59:c6:ad:88:55:ec:03:11:19:
95:cf:27:ec:ff:5f:0d:7d:5f:6d:2a:3f:0d:d5:00:
fb:b2:8e:d3:94:ac:af:3f:70:43:c0:ea:75:5a:8e:
7d:59:a4:a6:f8:e7:89:66:25:35:14:ca:e0:5c:0f:
2b:2b:24:63:8d:94:20:37:b2:bb:a1:b7:b8:cd:32:
fb:79:62:35:3c:ed:d1:65:a9:e9:c9:7e:8e:16:c2:
dc:3f:6d:8a:ff:11:73:99:42:5a:b3:72:01:d3:0b:
1d:39:3b:05:ec:ec:05:d1:95:ac:05:7e:d5:0b:76:
88:b0:86:98:51:f4:5c:10:c2:f0:5e:0f:61:db:55:
24:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:AB:08:5E:0F:0F:C9:C6:3F:B9:62:78:2B:31:6B:7D:B6:E7:7C:3D
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/UasIXg8PycY_uWJ4KzFrfbbnfD0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.144.0/24
178.239.156.0/24
178.239.159.0/24
185.26.34.0/23
Signature Algorithm: sha256WithRSAEncryption
2d:63:c3:c9:ca:d6:37:d0:91:a2:00:ec:a5:ce:17:d1:84:16:
7a:4b:aa:59:3d:1e:12:d8:51:59:38:aa:39:c5:0a:57:7f:91:
9f:22:82:af:6d:c2:ca:2b:05:03:dd:c2:5d:97:ec:bb:6d:f7:
40:fd:de:b5:3a:4f:c1:8b:7c:6d:68:82:08:e6:dc:49:bf:6e:
0f:fa:01:da:5e:a6:88:24:e9:ca:99:c3:0b:ff:6a:22:59:a9:
9e:9e:e9:fb:50:73:6b:54:70:d3:94:da:6a:00:a7:2b:a8:1f:
2e:89:37:07:cc:29:f2:82:52:44:96:86:1e:24:fe:be:2b:00:
43:5b:8f:20:f2:3c:1e:ab:2e:93:a5:b9:46:2d:c4:19:db:d3:
de:3f:c7:d6:5f:98:d6:77:5e:7f:e0:5d:c2:8f:25:d1:2b:04:
a7:b9:95:1d:44:71:6b:2a:9d:e1:81:ab:ac:40:38:72:8a:a5:
16:f8:8f:50:a0:09:62:31:05:8e:00:da:d6:69:69:7c:ea:16:
31:42:ef:d0:e4:56:57:1f:18:db:23:3f:65:6a:e3:c8:c1:f5:
29:c3:a8:48:a0:ea:04:ac:27:fb:06:fe:11:8d:59:ef:aa:09:
b7:8d:b9:a1:32:ea:6a:5e:d6:08:96:ac:f9:ca:a8:60:8e:cb:
c5:6f:07:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 02:09:41 2026 by rpki-client