Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/UyKoiOCXLP1mIGn3ZDTU9GRHSY8.roa
File: UyKoiOCXLP1mIGn3ZDTU9GRHSY8.roa (raw, json)
Hash identifier: LAhakO/ce12cg009uN/uT0NAXqKsY6gawlDig8YxeOw=
Subject key identifier: 53:22:A8:88:E0:97:2C:FD:66:20:69:F7:64:34:D4:F4:64:47:49:8F
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 01A0CD2B6311CFE4611B2A8D16A79053406F
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/UyKoiOCXLP1mIGn3ZDTU9GRHSY8.roa
Signing time: Wed 23 Sep 2026 07:29:27 +0000
ROA not before: Wed 23 Sep 2026 07:29:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209178
IP address blocks: 103.100.168.0/24 maxlen: 24
172.110.216.0/24 maxlen: 24
185.233.19.0/24 maxlen: 24
185.235.165.0/24 maxlen: 24
2a06:da40::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 10:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:2b:63:11:cf:e4:61:1b:2a:8d:16:a7:90:53:40:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Sep 23 07:29:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5322a888e0972cfd662069f76434d4f46447498f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:79:9e:cc:c4:2f:7c:00:9a:90:ed:97:b8:1f:
e6:9a:b2:5d:0c:d0:a8:3b:1b:06:f7:9b:85:aa:fd:
cc:b9:1c:31:73:93:13:13:a5:d1:e1:b7:7a:ef:b0:
b5:6c:b0:e6:23:73:c3:c7:c7:e1:4a:76:90:25:42:
28:e7:c2:b3:3b:28:63:4f:d7:bb:06:ea:3c:f8:9c:
e9:5f:66:fb:6d:bb:26:8d:b7:16:94:26:ae:20:cf:
fc:11:db:bb:02:92:fd:29:34:a2:2f:ca:a8:04:f2:
8b:f4:e3:1c:d3:e8:6b:94:25:01:be:eb:2d:69:ec:
01:92:52:c3:b0:83:2d:c0:94:fc:05:e9:4a:3d:43:
21:ac:f2:0b:94:b1:81:75:c9:fc:8b:c9:42:4e:08:
79:7a:19:89:39:d7:e3:f3:b5:89:80:01:f0:6c:2d:
20:3d:04:21:aa:20:18:4a:0f:36:10:a8:c0:46:41:
5f:e0:b5:ae:ad:14:05:17:a1:a2:fc:e4:d5:a9:9e:
f7:73:3c:bd:7a:fe:fb:af:23:b5:92:cd:fc:b4:b3:
a0:89:fb:91:31:b6:f4:42:d0:14:f0:79:15:e4:44:
b4:e2:ed:bb:d6:bb:20:42:36:69:01:9d:b5:0f:e4:
d4:48:36:04:05:bb:0e:99:c3:de:a3:64:00:f7:84:
fd:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:22:A8:88:E0:97:2C:FD:66:20:69:F7:64:34:D4:F4:64:47:49:8F
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/UyKoiOCXLP1mIGn3ZDTU9GRHSY8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.100.168.0/24
172.110.216.0/24
185.233.19.0/24
185.235.165.0/24
IPv6:
2a06:da40::/40
Signature Algorithm: sha256WithRSAEncryption
48:f6:6b:eb:10:b9:65:70:1e:c4:64:a4:07:4c:6e:73:1e:55:
55:f1:52:b0:98:42:1b:d4:68:9b:91:33:c1:08:8e:9b:de:84:
c5:e6:83:42:40:bb:7a:fa:33:1a:6e:38:01:ee:17:a2:52:96:
48:73:42:30:a1:98:01:92:76:de:0f:f1:32:98:36:3a:e8:87:
0b:5a:e8:2f:18:c4:d3:61:73:26:31:5e:fc:82:09:bc:ae:ec:
84:01:93:e6:96:5f:a6:68:99:b8:77:cd:34:ca:3a:c8:dc:65:
06:b7:57:a4:09:45:96:cc:01:de:14:bd:d1:b8:6c:b9:6b:13:
6d:1f:67:e7:98:aa:83:d4:2f:eb:09:31:03:3c:9f:9d:81:39:
b9:e5:8e:76:66:96:a3:fa:77:3f:af:b2:84:2e:93:d8:a9:ed:
f3:03:c5:d7:16:d8:99:c2:15:bb:03:f0:20:3b:fc:db:da:8a:
fc:ee:64:d6:a9:67:e8:a4:d9:5b:31:f0:12:53:dd:c8:26:49:
77:f4:04:0b:75:d5:97:15:5a:cc:6b:57:c1:c9:04:45:18:1b:
dc:8e:da:8e:e8:9d:f8:30:db:c6:85:07:21:2b:98:1d:07:d6:
9c:46:46:2c:94:ec:94:c6:62:55:c1:87:af:84:05:3a:7f:bb:
8b:76:91:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:47:07 2026 by rpki-client