Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/223d8f-58ac-4df7-bf1e-442010b579ef/1/uvHSWAI-yPchOFqjOVqKQlz8aVo.roa
File: uvHSWAI-yPchOFqjOVqKQlz8aVo.roa (raw, json)
Hash identifier: cnbvGF8AmLyRmJzV1rqVqz51KAWpBPpAaC9YvKK6e5M=
Subject key identifier: BA:F1:D2:58:02:3E:C8:F7:21:38:5A:A3:39:5A:8A:42:5C:FC:69:5A
Certificate issuer: /CN=5d0a0d396f769369365f2b983c531afeca9710a7
Certificate serial: 019B7CEE282E33384E1690DA8BC643E9C2F7
Authority key identifier: 5D:0A:0D:39:6F:76:93:69:36:5F:2B:98:3C:53:1A:FE:CA:97:10:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XQoNOW92k2k2XyuYPFMa_sqXEKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/223d8f-58ac-4df7-bf1e-442010b579ef/1/uvHSWAI-yPchOFqjOVqKQlz8aVo.roa
Signing time: Fri 02 Jan 2026 04:19:01 +0000
ROA not before: Fri 02 Jan 2026 04:19:01 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214204
IP address blocks: 45.148.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/223d8f-58ac-4df7-bf1e-442010b579ef/1/XQoNOW92k2k2XyuYPFMa_sqXEKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/223d8f-58ac-4df7-bf1e-442010b579ef/1/XQoNOW92k2k2XyuYPFMa_sqXEKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XQoNOW92k2k2XyuYPFMa_sqXEKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:ee:28:2e:33:38:4e:16:90:da:8b:c6:43:e9:c2:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d0a0d396f769369365f2b983c531afeca9710a7
Validity
Not Before: Jan 2 04:19:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=baf1d258023ec8f721385aa3395a8a425cfc695a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:2f:4a:e5:53:94:e0:fb:2b:3a:c0:98:ad:7a:
c1:07:63:d9:ec:b2:64:0d:1e:f3:0d:3e:39:50:f5:
f2:ef:3d:e3:1b:f3:e1:de:be:01:de:7c:6a:09:97:
49:f7:7f:14:0b:10:f3:7a:57:c0:ee:ec:be:3b:cf:
7a:a7:66:3d:52:e4:54:93:f5:de:cf:b9:06:05:3e:
87:5b:4e:ed:d4:0d:df:83:42:11:e7:a9:3e:a8:78:
ce:1c:3b:c9:50:4d:33:d7:7a:8b:c1:5a:7f:9e:78:
88:f4:2c:45:66:08:6a:40:1e:cf:5d:bd:f1:83:cc:
06:eb:71:a8:74:3e:b4:3d:98:37:c2:93:a4:f4:8a:
70:6c:c1:21:e3:80:1e:14:9b:1f:49:1f:65:4c:c5:
a0:f3:b7:64:7f:e7:63:7b:c1:97:2a:42:36:63:37:
56:9b:72:95:a7:b5:8e:d9:3e:54:c9:80:5c:15:2b:
5b:4b:95:c6:0d:eb:86:f1:b4:94:06:53:23:49:e0:
cf:c6:45:6b:fd:ff:d2:da:da:9a:55:9f:ae:0a:61:
ad:18:31:93:92:25:0b:e8:88:b9:06:39:d1:92:0f:
7f:23:17:db:73:cb:9c:c9:12:29:78:6d:4c:9f:62:
91:ee:df:bf:67:f4:aa:75:b0:02:c1:f1:49:70:fc:
1c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:F1:D2:58:02:3E:C8:F7:21:38:5A:A3:39:5A:8A:42:5C:FC:69:5A
X509v3 Authority Key Identifier:
keyid:5D:0A:0D:39:6F:76:93:69:36:5F:2B:98:3C:53:1A:FE:CA:97:10:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XQoNOW92k2k2XyuYPFMa_sqXEKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/223d8f-58ac-4df7-bf1e-442010b579ef/1/uvHSWAI-yPchOFqjOVqKQlz8aVo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/223d8f-58ac-4df7-bf1e-442010b579ef/1/XQoNOW92k2k2XyuYPFMa_sqXEKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.239.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:c4:1e:43:d8:ca:ba:8d:e1:e0:32:77:b8:66:98:c9:7b:86:
ab:e5:f9:a3:3e:4a:3d:71:f8:bc:13:b8:9f:9d:bb:82:70:df:
88:76:6b:48:8d:ce:92:01:0e:60:95:87:e5:01:76:ea:41:aa:
1b:39:ba:f2:29:dc:0e:0f:a2:6c:2d:1f:8a:d5:c4:52:08:17:
81:d3:0e:2d:59:14:c8:f0:20:40:3d:ea:c3:6b:be:7c:a4:57:
6c:3f:9b:21:83:c8:1b:ce:50:4d:44:65:f8:bd:fd:b0:37:77:
29:41:4f:5f:97:ac:0d:05:3f:1a:36:d9:1d:0e:dd:e8:9a:f3:
a3:7f:47:c1:4a:30:74:04:a6:ab:bf:3c:5c:5e:4e:e3:bd:0f:
b5:4f:27:b7:09:b0:72:9a:0d:9b:2a:40:3f:23:98:18:ba:7e:
3f:70:e5:8c:bc:8d:e5:ad:4b:6c:33:97:8f:61:11:e8:7a:d4:
3b:e4:fa:59:56:67:4a:7a:cc:bb:30:dd:c4:bb:68:e1:71:a6:
e8:de:7d:ec:23:44:d9:a2:1d:ee:93:a2:f3:82:dd:10:fc:f9:
96:5e:53:dc:f1:56:9d:9d:34:d7:1d:a2:59:a0:63:90:ab:d6:
72:a8:8a:e1:1d:02:08:61:7a:2e:16:33:95:4a:2a:fb:78:c7:
a6:c1:f3:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:45:15 2026 by rpki-client