Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/557414-d993-4cbf-8181-48671fb7d380/1/uySycfiPIwl3qkdAFm_UQY27DIw.roa
File: uySycfiPIwl3qkdAFm_UQY27DIw.roa (raw, json)
Hash identifier: ecxPUeUZMRc0M4fLg3pXfQaDZQ4xLa/JpCwaots4UTE=
Subject key identifier: BB:24:B2:71:F8:8F:23:09:77:AA:47:40:16:6F:D4:41:8D:BB:0C:8C
Certificate issuer: /CN=1ddc53d1de7a2ef7eb2b90c80915544140042488
Certificate serial: 019FD3090F6AF0D0D0DF65A3F685E0399F4C
Authority key identifier: 1D:DC:53:D1:DE:7A:2E:F7:EB:2B:90:C8:09:15:54:41:40:04:24:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HdxT0d56LvfrK5DICRVUQUAEJIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/557414-d993-4cbf-8181-48671fb7d380/1/uySycfiPIwl3qkdAFm_UQY27DIw.roa
Signing time: Wed 05 Aug 2026 17:46:54 +0000
ROA not before: Wed 05 Aug 2026 17:46:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12389
IP address blocks: 45.93.81.0/24 maxlen: 24
45.148.167.0/24 maxlen: 24
2a01:ba80:2100::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/557414-d993-4cbf-8181-48671fb7d380/1/HdxT0d56LvfrK5DICRVUQUAEJIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/557414-d993-4cbf-8181-48671fb7d380/1/HdxT0d56LvfrK5DICRVUQUAEJIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/HdxT0d56LvfrK5DICRVUQUAEJIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d3:09:0f:6a:f0:d0:d0:df:65:a3:f6:85:e0:39:9f:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ddc53d1de7a2ef7eb2b90c80915544140042488
Validity
Not Before: Aug 5 17:46:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bb24b271f88f230977aa4740166fd4418dbb0c8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a7:5a:e2:ea:90:29:7e:59:57:29:13:1d:99:
6f:f3:d9:5e:ef:c1:69:9d:9c:25:76:60:33:9d:d2:
72:13:bd:b2:0c:80:79:ab:fb:5d:f0:9b:2e:e2:d4:
80:67:da:2e:47:f9:25:01:1f:fe:77:2f:be:2a:39:
30:ab:23:18:37:ac:e7:93:ce:7a:22:d2:8f:cb:93:
cc:1d:54:05:6f:13:2e:a9:b4:ec:41:06:a3:72:7e:
c3:93:12:15:02:e1:bf:8f:dd:96:89:50:b4:79:a4:
cd:79:e7:a9:a9:e0:02:5a:0b:ae:02:7b:c4:ae:dd:
1c:5c:0a:9d:ef:1a:03:63:63:b4:5c:d1:33:8c:ca:
b5:ef:0b:dc:e7:bc:75:06:a8:81:12:85:62:27:33:
5e:d7:c1:41:85:43:14:98:c6:61:d7:32:4d:6d:1b:
ff:a4:23:ae:a2:3f:79:9d:db:54:0b:b9:6b:d5:36:
68:8c:1e:f2:5e:f7:37:51:0f:82:98:62:c3:92:e5:
d2:3e:7b:db:ed:6b:07:dc:db:81:1d:fe:3c:ca:77:
92:ee:da:73:de:25:99:7c:a1:f0:1d:ea:ae:bc:84:
66:41:03:70:c8:f6:35:45:cc:81:c9:2a:83:53:6a:
96:e3:34:2e:b9:ee:eb:ca:4e:cc:71:8a:eb:68:96:
a1:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:24:B2:71:F8:8F:23:09:77:AA:47:40:16:6F:D4:41:8D:BB:0C:8C
X509v3 Authority Key Identifier:
keyid:1D:DC:53:D1:DE:7A:2E:F7:EB:2B:90:C8:09:15:54:41:40:04:24:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HdxT0d56LvfrK5DICRVUQUAEJIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/557414-d993-4cbf-8181-48671fb7d380/1/uySycfiPIwl3qkdAFm_UQY27DIw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/557414-d993-4cbf-8181-48671fb7d380/1/HdxT0d56LvfrK5DICRVUQUAEJIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.81.0/24
45.148.167.0/24
IPv6:
2a01:ba80:2100::/40
Signature Algorithm: sha256WithRSAEncryption
26:52:f0:e0:cd:78:12:93:dc:35:59:ba:61:9f:d8:29:57:b9:
02:61:62:0d:5a:92:6a:d8:6b:97:d2:e4:90:37:45:dd:49:d4:
7e:e1:1f:09:81:ea:e9:ee:39:39:cb:b8:d9:65:2c:4b:da:61:
7e:4d:4c:a9:b4:33:12:c5:de:18:0b:5b:ad:c2:7b:7a:47:1c:
75:4f:c0:fc:8a:94:7d:84:42:e8:d5:6a:71:a9:8a:64:20:a8:
e9:58:c4:dd:4c:96:56:52:65:51:0a:95:cb:fe:29:8b:31:e5:
d0:aa:60:ad:d5:f0:42:18:31:c2:c9:c7:e0:d9:70:0d:13:3d:
62:10:f1:75:87:8a:fa:2a:db:7d:54:2a:c9:fe:aa:12:19:a9:
75:4b:b8:c1:b4:d8:a5:28:bf:77:4c:c5:f3:c1:18:d5:2f:32:
f0:81:26:85:61:a6:38:df:be:c5:c0:60:c9:cc:cf:6c:4e:5e:
17:62:db:23:8d:0f:38:8b:b9:e5:8e:83:f4:3e:ee:41:11:b8:
40:5b:5d:20:7f:3e:b4:ae:46:e4:64:b9:a4:6d:d9:82:0f:e1:
f7:40:a8:40:39:84:48:ce:f8:5a:8c:ab:c2:9c:fa:4b:3c:8c:
65:49:7a:bf:47:0d:fe:8b:ba:12:1a:33:60:25:6f:ff:2a:ae:
4e:07:eb:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:40:09 2026 by rpki-client