Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/uSwXIB-zEQ_5NTO0PbfaOyTJ8SM.roa
File: uSwXIB-zEQ_5NTO0PbfaOyTJ8SM.roa (raw, json)
Hash identifier: 9zBQDmiGT8eNndXotSqB1YUQYlhkujrAdNrxauJxeYI=
Subject key identifier: B9:2C:17:20:1F:B3:11:0F:F9:35:33:B4:3D:B7:DA:3B:24:C9:F1:23
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 019DDF57D92186FE2583A67D958F6291A873
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/uSwXIB-zEQ_5NTO0PbfaOyTJ8SM.roa
Signing time: Thu 30 Apr 2026 17:02:49 +0000
ROA not before: Thu 30 Apr 2026 17:02:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213727
IP address blocks: 178.239.156.0/24 maxlen: 24
178.239.159.0/24 maxlen: 24
185.26.34.0/24 maxlen: 24
185.26.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:df:57:d9:21:86:fe:25:83:a6:7d:95:8f:62:91:a8:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Apr 30 17:02:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b92c17201fb3110ff93533b43db7da3b24c9f123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:69:1c:48:04:94:04:f1:ca:02:f2:4e:28:7b:
a7:d9:13:9c:ee:f8:bb:7b:51:9a:e3:76:89:a0:72:
88:df:d6:3c:77:c2:42:7b:23:68:1c:6c:86:9d:4d:
cd:08:df:64:d1:91:18:2d:47:d5:15:b5:a7:9d:3c:
a2:88:e8:60:6d:57:20:af:8d:7e:c7:19:0e:74:84:
73:6d:c9:c2:65:43:f3:5d:60:00:a5:a5:99:8d:c0:
b2:47:03:7f:80:0d:cb:b0:6c:52:d2:09:75:af:be:
24:1a:88:77:40:96:c1:0b:aa:76:61:2d:de:c8:74:
cd:74:9b:65:85:43:d7:52:7b:8d:28:84:7d:11:4f:
a7:e2:e0:8b:a3:94:65:8a:a3:cb:f8:8b:60:52:7b:
c3:59:73:93:7d:c1:66:27:a9:b2:13:d5:d7:af:29:
f1:49:0b:f4:a2:5f:b5:a0:40:90:74:a5:ad:ee:82:
ee:4a:34:ae:7e:8b:f1:f0:aa:41:5f:b3:7d:b3:86:
15:d6:64:0c:36:77:40:75:98:02:ca:33:73:78:57:
89:c3:a2:e1:f0:3c:67:7a:d4:21:9f:a7:83:be:32:
f0:93:32:b3:6c:9d:1b:17:1c:80:7b:9d:a7:98:66:
8b:ce:cf:bd:3a:97:31:71:9b:93:08:01:72:63:fd:
3f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:2C:17:20:1F:B3:11:0F:F9:35:33:B4:3D:B7:DA:3B:24:C9:F1:23
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/uSwXIB-zEQ_5NTO0PbfaOyTJ8SM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.156.0/24
178.239.159.0/24
185.26.34.0/23
Signature Algorithm: sha256WithRSAEncryption
4d:7d:68:9d:fb:43:19:04:7f:cd:76:90:3c:f7:a0:ea:f2:59:
23:8d:6c:4a:df:c2:12:ec:fa:8e:9e:c0:50:a8:31:58:7d:4d:
5f:07:0c:74:c0:0e:ab:f0:7b:2c:88:8d:4c:35:7b:45:f3:39:
30:03:49:f7:00:7f:f3:fc:89:61:d9:24:56:69:76:89:bc:e0:
1b:fe:43:13:10:fd:fb:a5:2b:62:26:e7:51:26:21:e6:71:8d:
cf:ff:6e:04:c8:d0:83:91:fc:50:9c:8b:68:f6:49:3b:e8:a2:
ee:13:cb:c6:ee:e7:a8:73:79:52:c7:6b:5f:4f:2a:e4:ab:b0:
1b:32:b2:ed:01:8a:b5:d3:17:3d:42:4c:61:30:a1:20:76:31:
42:b2:37:00:d3:7b:cc:3c:d8:a2:dc:49:8f:2c:ec:b7:1d:1e:
df:dc:d1:aa:b7:86:cb:c8:96:df:a9:06:41:c9:ac:1a:52:21:
9e:cc:06:83:f5:b6:51:d3:6b:fe:85:f1:c3:fd:78:01:94:2d:
30:be:f9:55:61:a5:0f:d8:cb:7f:ad:25:4e:ef:03:c8:bd:da:
52:f6:eb:5d:fb:a0:be:e0:f6:10:64:2a:07:c4:9f:1f:d3:22:
2e:30:dd:5a:84:63:4f:12:b8:85:fa:94:aa:b8:97:d5:29:d2:
06:1b:da:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:24:39 2026 by rpki-client