Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UvkchOlf8k5gf0Jd4S3LaiUQp24.roa
File: UvkchOlf8k5gf0Jd4S3LaiUQp24.roa (raw, json)
Hash identifier: bOM90kiakeCMvJKkLnEePDredxuMm7f3j0ru01BV2rg=
Subject key identifier: 52:F9:1C:84:E9:5F:F2:4E:60:7F:42:5D:E1:2D:CB:6A:25:10:A7:6E
Certificate issuer: /CN=4459120809c23bf3033e3f573995276f0c7a2533
Certificate serial: 01A0F749F4FFEE30438AD81AAAA01980A7BE
Authority key identifier: 44:59:12:08:09:C2:3B:F3:03:3E:3F:57:39:95:27:6F:0C:7A:25:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFkSCAnCO_MDPj9XOZUnbwx6JTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UvkchOlf8k5gf0Jd4S3LaiUQp24.roa
Signing time: Thu 01 Oct 2026 11:46:54 +0000
ROA not before: Thu 01 Oct 2026 11:46:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218852
IP address blocks: 178.175.168.0/24 maxlen: 24
178.175.169.0/24 maxlen: 24
178.175.170.0/24 maxlen: 24
178.175.171.0/24 maxlen: 24
178.175.172.0/24 maxlen: 24
178.175.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/RFkSCAnCO_MDPj9XOZUnbwx6JTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/RFkSCAnCO_MDPj9XOZUnbwx6JTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/RFkSCAnCO_MDPj9XOZUnbwx6JTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 11:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f7:49:f4:ff:ee:30:43:8a:d8:1a:aa:a0:19:80:a7:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459120809c23bf3033e3f573995276f0c7a2533
Validity
Not Before: Oct 1 11:46:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=52f91c84e95ff24e607f425de12dcb6a2510a76e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:1f:57:77:a6:75:e7:9e:86:ee:eb:b5:03:73:
2d:93:0f:0e:ce:77:c4:8c:e5:18:ee:46:ee:55:58:
09:96:ab:7a:2d:74:42:56:0e:db:e6:a6:71:c9:d6:
65:eb:78:d2:7c:83:ed:fd:53:15:4d:01:c2:ad:b2:
57:59:40:50:8e:8f:ea:5b:ad:43:92:fc:46:51:89:
9a:40:63:48:3a:1e:23:bf:36:35:23:15:54:82:94:
b3:2e:60:78:03:4a:a7:5b:8b:96:e8:31:d9:47:fa:
b3:54:04:64:2e:f7:31:85:6b:91:aa:fc:00:e3:8c:
34:3d:51:df:ac:f3:db:20:69:d7:6d:2c:20:07:51:
21:54:cd:dc:3e:e2:69:fd:5e:a0:d1:7f:47:bb:19:
5a:dd:bd:31:f6:7e:bc:fd:14:f8:e7:cb:77:9a:9c:
0d:04:7f:57:1c:18:b0:e3:08:86:50:f3:cc:5d:41:
8f:e7:82:ad:c0:c1:17:06:dc:08:75:b4:81:5b:d6:
e5:83:cc:90:f7:a3:62:de:b8:0b:33:01:d5:a7:5b:
35:a7:b9:03:5d:ab:b1:13:75:0f:7a:c5:04:d0:a1:
94:e9:65:da:f2:be:2e:a0:24:79:d3:49:fb:57:5a:
eb:34:d8:60:aa:50:1e:9b:cd:4f:35:b4:5e:7d:6f:
57:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:F9:1C:84:E9:5F:F2:4E:60:7F:42:5D:E1:2D:CB:6A:25:10:A7:6E
X509v3 Authority Key Identifier:
keyid:44:59:12:08:09:C2:3B:F3:03:3E:3F:57:39:95:27:6F:0C:7A:25:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFkSCAnCO_MDPj9XOZUnbwx6JTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UvkchOlf8k5gf0Jd4S3LaiUQp24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/RFkSCAnCO_MDPj9XOZUnbwx6JTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.175.168.0-178.175.173.255
Signature Algorithm: sha256WithRSAEncryption
97:4b:fb:68:a5:1f:b2:48:bf:6e:49:c4:10:9b:09:57:7d:91:
95:5e:d1:3e:60:5d:d0:74:b2:65:76:42:84:2a:6e:9c:17:46:
96:70:a2:08:3d:26:98:d4:e4:5b:21:d3:24:6d:ea:3f:c8:07:
2e:e0:ba:61:c7:7a:de:37:c7:aa:1e:3b:3c:c6:5d:56:58:d5:
16:05:ed:81:b2:6b:63:89:3c:b4:fd:e6:8c:29:73:3b:28:e2:
33:66:88:cc:86:bb:dd:80:5c:67:94:4c:8d:c1:f5:33:27:69:
18:0d:80:f3:66:98:66:96:09:f4:10:f6:93:38:a6:09:1d:8f:
ed:f9:ad:e1:cc:83:fc:19:01:b1:ab:d8:42:29:5e:52:5d:4d:
77:84:59:3e:5c:9b:aa:2a:60:26:e2:f6:b8:cf:61:f0:44:dc:
23:19:4f:fb:ad:1e:3b:9c:b2:2e:82:8f:92:44:d8:55:88:5c:
0e:17:2e:c1:a0:55:34:fe:36:0f:62:62:e3:0f:f1:ab:6c:97:
3b:61:8d:06:77:e5:3b:08:7e:78:21:2c:e5:59:b8:f0:8c:fd:
1c:0e:0a:d1:6a:44:28:ce:30:1f:9b:48:bf:31:99:e6:f9:a1:
6e:d9:95:86:79:f1:51:b8:a8:5b:cb:3a:11:80:61:71:1c:1a:
64:87:00:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 18:03:04 2026 by rpki-client