Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/uSJkLCSB99f7HhRGP38eZDaF0Zo.roa
File: uSJkLCSB99f7HhRGP38eZDaF0Zo.roa (raw, json)
Hash identifier: SVtVPvYDErb2Ohp2T3Cd+2NHscnLsdmFtZtaB0b+aMI=
Subject key identifier: B9:22:64:2C:24:81:F7:D7:FB:1E:14:46:3F:7F:1E:64:36:85:D1:9A
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019FCCD0FF421F1170B70CA96E4136E65E3B
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/uSJkLCSB99f7HhRGP38eZDaF0Zo.roa
Signing time: Tue 04 Aug 2026 12:47:56 +0000
ROA not before: Tue 04 Aug 2026 12:47:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 133153
IP address blocks: 45.151.104.0/24 maxlen: 24
193.254.244.0/24 maxlen: 24
193.254.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Aug 2026 14:17:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cc:d0:ff:42:1f:11:70:b7:0c:a9:6e:41:36:e6:5e:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Aug 4 12:47:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b922642c2481f7d7fb1e14463f7f1e643685d19a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:55:18:4d:35:0c:5f:e4:02:51:6a:24:36:d8:
59:a8:e9:00:cf:e1:a2:2e:ed:fe:02:7e:51:52:60:
b5:63:36:a6:f5:d8:65:12:6e:82:1c:07:81:93:24:
36:3f:c8:05:6f:b4:b1:cc:bd:7e:0e:98:8a:a5:1f:
a6:da:63:77:1f:1a:58:37:07:4d:ff:20:0a:42:70:
70:9a:b0:d2:67:bf:23:9f:85:92:e3:d3:17:b1:b8:
73:1b:83:a6:ea:64:d0:85:f9:7d:c1:35:3d:cf:21:
a2:c4:4a:4c:ff:38:4a:46:a3:d1:36:29:4d:67:98:
3a:e1:4d:10:8c:00:93:d0:f4:0b:a6:02:b6:dc:8b:
d9:8b:76:fb:34:3e:d4:43:28:ca:23:db:7f:64:85:
66:a6:30:ce:1c:a2:5c:e0:d2:0f:9a:be:87:1f:94:
60:7d:93:5f:03:68:0e:8a:6d:9a:49:c1:c7:68:5e:
d3:67:8b:4e:d8:62:3f:cc:93:2a:6e:2e:f3:f6:58:
bb:20:ce:77:bd:76:66:1c:06:31:d7:5f:2f:1e:ed:
13:2b:a1:44:f8:1e:a8:6d:ab:04:6d:b9:cd:2c:50:
22:92:25:b6:49:75:e8:d8:d6:5c:5c:bc:40:33:fe:
e0:3e:61:a2:3d:ce:82:16:8c:e3:a3:ef:2a:53:cd:
a5:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:22:64:2C:24:81:F7:D7:FB:1E:14:46:3F:7F:1E:64:36:85:D1:9A
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/uSJkLCSB99f7HhRGP38eZDaF0Zo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.104.0/24
193.254.244.0/23
Signature Algorithm: sha256WithRSAEncryption
14:d1:c9:43:0f:25:5c:57:04:83:5c:66:6b:4d:61:d5:7f:91:
88:c0:9a:4e:e1:3f:37:db:b8:58:28:da:8e:7b:23:1f:95:3d:
ba:6b:88:b5:27:73:05:55:c1:c3:bd:fc:d8:11:8b:45:fe:86:
c5:bb:f5:5c:ce:27:64:8b:10:a8:c0:5a:dd:70:26:e3:87:c6:
be:81:43:90:ee:33:45:8d:62:46:5c:33:a0:50:bc:1f:86:66:
7c:2b:f1:19:eb:1c:71:7b:ce:47:8d:fa:ea:8c:46:f1:09:12:
76:de:24:91:72:53:5f:cc:74:8b:f6:60:39:38:04:83:fb:33:
82:64:3e:4b:f3:3e:45:3c:e6:6f:4e:0c:8e:f6:54:e1:de:9d:
de:72:66:85:8e:5e:ce:a6:71:5f:c8:f1:79:6d:c7:be:40:c1:
19:64:2e:03:13:55:0a:ef:48:85:9b:c9:5b:de:04:cc:ed:1e:
b7:2e:4c:78:f2:4f:0f:d7:dc:ee:4c:3e:30:f3:4c:51:70:e6:
74:b8:34:85:5a:ad:c4:a5:a6:39:d5:bd:c0:e6:89:56:fc:ca:
0a:34:a1:85:27:7b:d5:2e:66:da:52:3a:57:1d:88:a6:61:9c:
92:c8:8f:61:a2:d1:4e:2c:86:65:cb:4d:6e:4c:f8:08:f4:70:
79:bc:52:72
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ/M0P9CHxFwtwypbkE25l47MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjYwODA0MTI0NzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOTIyNjQyYzI0ODFmN2Q3ZmIxZTE0NDYzZjdmMWU2NDM2ODVkMTlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulUYTTUMX+QCUWokNthZqOkAz+Gi
Lu3+An5RUmC1Yzam9dhlEm6CHAeBkyQ2P8gFb7SxzL1+DpiKpR+m2mN3HxpYNwdN
/yAKQnBwmrDSZ78jn4WS49MXsbhzG4Om6mTQhfl9wTU9zyGixEpM/zhKRqPRNilN
Z5g64U0QjACT0PQLpgK23IvZi3b7ND7UQyjKI9t/ZIVmpjDOHKJc4NIPmr6HH5Rg
fZNfA2gOim2aScHHaF7TZ4tO2GI/zJMqbi7z9li7IM53vXZmHAYx118vHu0TK6FE
+B6obasEbbnNLFAikiW2SXXo2NZcXLxAM/7gPmGiPc6CFozjo+8qU82l/wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLkiZCwkgffX+x4URj9/HmQ2hdGaMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvdVNKa0xDU0I5OWY3SGhSR1AzOGVaRGFGMFpvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALZdoAwQB
wf70MA0GCSqGSIb3DQEBCwUAA4IBAQAU0clDDyVcVwSDXGZrTWHVf5GIwJpO4T83
27hYKNqOeyMflT26a4i1J3MFVcHDvfzYEYtF/obFu/VczidkixCowFrdcCbjh8a+
gUOQ7jNFjWJGXDOgULwfhmZ8K/EZ6xxxe85HjfrqjEbxCRJ23iSRclNfzHSL9mA5
OASD+zOCZD5L8z5FPOZvTgyO9lTh3p3ecmaFjl7OpnFfyPF5bce+QMEZZC4DE1UK
70iFm8lb3gTM7R63Lkx48k8P19zuTD4w80xRcOZ0uDSFWq3EpaY51b3A5olW/MoK
NKGFJ3vVLmbaUjpXHYimYZySyI9hotFOLIZly01uTPgI9HB5vFJy
-----END CERTIFICATE-----
Generated at Tue Aug 18 00:07:18 2026 by rpki-client