Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/UXaPSWD1-LHjvoWrUgbWOZ15vVU.roa
File: UXaPSWD1-LHjvoWrUgbWOZ15vVU.roa (raw, json)
Hash identifier: ia6MI55n2seReQTPt3pLfFGNq3jnl+CKSwg8WkP0fWU=
Subject key identifier: 51:76:8F:49:60:F5:F8:B1:E3:BE:85:AB:52:06:D6:39:9D:79:BD:55
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 019C3C5BC4E034AEA1BFB9DFA7610D80E4D7
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/UXaPSWD1-LHjvoWrUgbWOZ15vVU.roa
Signing time: Sun 08 Feb 2026 08:26:13 +0000
ROA not before: Sun 08 Feb 2026 08:26:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42337
IP address blocks: 178.239.157.0/24 maxlen: 24
185.215.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:3c:5b:c4:e0:34:ae:a1:bf:b9:df:a7:61:0d:80:e4:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Feb 8 08:26:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=51768f4960f5f8b1e3be85ab5206d6399d79bd55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:cf:b6:5a:be:3c:80:1a:71:f5:90:fd:1d:f9:
2e:13:27:9f:11:70:da:a9:d9:23:df:93:25:99:ef:
ea:d5:07:de:87:b5:7f:96:af:94:3b:34:39:fe:1b:
23:2f:3d:f3:05:2b:fc:fd:2e:0f:fb:a3:a0:d7:54:
58:09:cd:f2:6b:62:7f:d8:af:81:5c:be:11:da:4a:
9a:97:f9:ec:73:f0:4d:2b:2e:f6:78:ec:64:5c:96:
79:d6:7d:02:60:70:19:94:14:ea:35:8f:2d:15:be:
be:56:79:ae:2b:d0:30:33:4b:25:26:4f:32:f2:95:
42:05:e8:0a:4d:13:3b:70:44:76:96:eb:4c:fc:2c:
6d:36:9a:19:9a:51:4f:7d:91:94:51:06:f5:62:f8:
b6:18:4b:24:ac:5d:3f:26:40:6b:8a:8c:30:4f:85:
01:fe:bc:51:c0:ea:e6:bf:2a:41:5f:ca:72:df:f7:
15:ba:22:6a:6b:db:39:65:04:11:09:1e:b6:6e:79:
fb:74:35:a7:97:ad:fe:3c:f8:a5:3a:de:a4:a2:c0:
e1:35:2b:bb:b4:bd:91:b2:1b:80:19:89:dc:a8:fb:
6d:6e:7a:33:d2:97:af:60:26:b0:e3:93:97:84:c2:
61:45:fd:a5:25:a8:66:fd:15:2b:4e:c1:89:b1:c2:
90:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:76:8F:49:60:F5:F8:B1:E3:BE:85:AB:52:06:D6:39:9D:79:BD:55
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/UXaPSWD1-LHjvoWrUgbWOZ15vVU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.157.0/24
185.215.228.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:39:c9:76:15:63:1e:88:d2:68:3c:0a:11:a3:60:06:55:e0:
56:da:5e:2d:20:36:63:78:26:d6:5c:40:95:6e:5a:5c:cd:c5:
7f:58:f0:f0:58:7f:63:94:69:38:78:55:fe:cf:42:69:08:aa:
6d:9a:b9:40:e0:98:fd:25:93:7a:3f:93:c3:1d:75:67:bc:80:
a2:e8:e8:22:13:91:f4:9c:86:20:2a:85:c0:f9:9f:4f:2b:39:
b4:6b:92:aa:bf:1e:0d:29:a9:9d:0f:e8:67:46:45:f5:ee:44:
c8:10:ee:1c:7e:44:32:06:89:68:a7:ff:61:c8:f8:4c:45:22:
af:48:96:84:39:e3:4d:7b:c3:35:36:69:01:62:62:96:94:30:
34:30:37:49:6a:7b:93:c1:88:36:98:11:c9:2a:19:c4:3c:41:
d7:7f:42:5e:70:a7:d8:1c:33:a3:32:c5:f2:ff:ea:3c:43:64:
e5:5c:03:56:86:59:24:d7:cb:a4:37:06:53:b4:9e:bf:17:8d:
b5:65:e7:41:fc:93:11:1e:53:40:dd:08:69:81:13:8b:7f:a7:
a7:2a:7e:77:98:0c:de:66:37:27:ba:37:05:96:90:76:36:a1:
76:a5:19:98:96:5f:31:75:b8:5d:a2:ce:a0:9b:44:25:e5:5b:
9a:5a:3e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:54:46 2026 by rpki-client