Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/UWSPscndFGTS22rrfdXjXjmUZGo.roa
File: UWSPscndFGTS22rrfdXjXjmUZGo.roa (raw, json)
Hash identifier: 8jvHYNnuZiFEdx1Q03ylnQb6HTKed6pcPkOBGR/7lKc=
Subject key identifier: 51:64:8F:B1:C9:DD:14:64:D2:DB:6A:EB:7D:D5:E3:5E:39:94:64:6A
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 019C535ECB9AB8482C4551E21E1D75C266B0
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/UWSPscndFGTS22rrfdXjXjmUZGo.roa
Signing time: Thu 12 Feb 2026 19:40:47 +0000
ROA not before: Thu 12 Feb 2026 19:40:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35487
IP address blocks: 45.134.168.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:53:5e:cb:9a:b8:48:2c:45:51:e2:1e:1d:75:c2:66:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Feb 12 19:40:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=51648fb1c9dd1464d2db6aeb7dd5e35e3994646a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:fd:a4:7f:65:d8:43:06:8e:6c:6e:1e:e5:b5:
b1:31:5f:2b:c4:c4:74:fb:87:52:c3:0f:28:0f:fe:
bb:46:84:ce:d3:85:29:72:c8:24:77:39:23:70:29:
77:ff:da:85:ed:98:8e:61:ef:37:07:4d:42:1f:50:
fc:4c:f1:12:ff:84:81:54:bf:a8:2e:b5:a9:15:90:
5e:e8:d1:34:d3:ec:5a:fa:d7:7f:69:3f:9e:c9:fb:
f9:57:d6:f4:d2:0d:5b:0e:9f:e0:60:66:8e:41:1b:
1a:32:5a:16:5d:0f:c9:56:69:eb:8d:91:9b:f5:48:
45:38:a1:14:5d:e4:74:63:dd:3b:ae:c2:72:5c:69:
fd:e0:86:54:95:e5:0e:72:e9:96:48:39:45:72:c4:
e5:b4:45:0c:ce:b6:62:ec:bb:dc:77:6c:0e:a4:9d:
17:d0:63:a4:a4:5d:07:56:27:22:b0:5a:5f:9a:83:
0e:9b:47:1d:8a:78:23:d9:f8:dd:4e:20:0e:b6:8e:
50:f8:cf:68:d9:f7:c6:7d:7c:4a:78:39:a2:a3:d1:
d2:90:d9:f2:ee:1e:46:9b:c2:7c:20:a6:a1:ec:20:
a7:d0:3d:ce:21:a9:f0:61:4d:69:2e:90:1a:5d:de:
fa:45:a9:55:78:aa:70:f9:df:1b:53:08:f6:5c:48:
a5:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:64:8F:B1:C9:DD:14:64:D2:DB:6A:EB:7D:D5:E3:5E:39:94:64:6A
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/UWSPscndFGTS22rrfdXjXjmUZGo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.168.0/23
Signature Algorithm: sha256WithRSAEncryption
7e:cb:9d:36:a6:be:21:be:24:c5:f1:60:20:1b:0b:3f:46:9a:
21:d1:87:a0:58:bc:87:09:ae:f3:77:b8:4c:c6:67:21:22:ae:
5c:4a:1d:d7:d2:b1:22:43:ba:18:a1:15:33:03:1b:8c:62:ac:
cb:71:9d:00:1e:75:65:26:a9:55:8c:fb:10:a8:9e:5a:a1:7d:
3c:1b:89:0a:62:15:6c:b9:4b:ca:f1:9e:01:c3:33:c1:84:83:
2a:cd:dd:8d:02:7a:1d:1b:b2:bb:04:43:79:23:2f:6e:38:f8:
27:cb:59:89:ce:3a:31:fa:67:4f:10:8b:16:0d:1b:ea:ae:70:
af:d7:02:56:58:a6:59:b7:e5:51:5f:99:5b:63:9d:ca:e1:e1:
aa:40:5d:a1:05:77:2b:b3:94:6a:7d:e9:14:c4:86:fe:92:ef:
5e:d3:94:98:d9:cb:0f:f9:85:37:84:13:5b:cb:df:09:f7:32:
f4:21:e0:47:de:c0:08:8d:ba:07:b9:1d:77:46:e4:b2:74:9a:
57:83:fc:83:dd:58:02:b5:4f:8f:a7:ab:98:a1:d0:0c:47:90:
5c:2d:8a:5b:4f:df:82:2d:90:ab:f1:bd:e5:70:35:72:f0:c0:
f1:5b:b8:b0:58:21:59:2b:06:5f:7c:91:bf:07:c7:b8:ec:eb:
51:37:ea:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:20:07 2026 by rpki-client