Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/2O55PiQv5Q4HwtENk46gVrpPWO4.roa
File: 2O55PiQv5Q4HwtENk46gVrpPWO4.roa (raw, json)
Hash identifier: aFf+saKnK70NTVthv4QqUasF6Fyqm5AFLNx6UTigCvQ=
Subject key identifier: D8:EE:79:3E:24:2F:E5:0E:07:C2:D1:0D:93:8E:A0:56:BA:4F:58:EE
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01A090EB8084FB1916D713FA84DEDF983FA9
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/2O55PiQv5Q4HwtENk46gVrpPWO4.roa
Signing time: Fri 11 Sep 2026 14:42:28 +0000
ROA not before: Fri 11 Sep 2026 14:42:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34304
IP address blocks: 80.96.99.0/24 maxlen: 24
80.96.106.0/24 maxlen: 24
81.180.252.0/23 maxlen: 23
217.156.20.0/23 maxlen: 23
217.156.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:90:eb:80:84:fb:19:16:d7:13:fa:84:de:df:98:3f:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Sep 11 14:42:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d8ee793e242fe50e07c2d10d938ea056ba4f58ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:cd:d2:cb:5e:80:26:a0:18:2b:a8:e2:29:b0:
48:95:db:f4:6a:fa:3b:c5:d4:55:19:86:96:c7:40:
f5:0d:e8:f4:3c:ef:71:8b:66:b9:af:df:a1:d1:82:
8e:78:94:48:91:32:af:64:8a:e1:27:9b:19:9c:89:
01:1c:22:09:6c:f3:8c:d1:95:36:06:b3:a3:8d:69:
37:ed:ed:2d:61:f6:45:a3:0b:d3:21:0e:28:2f:6f:
9c:c1:25:47:cf:49:2c:b2:e2:76:0b:ff:90:1e:11:
f7:51:7a:ab:66:b4:24:21:6d:5b:dd:bb:94:98:39:
82:a8:a1:b9:55:d1:1d:ef:b4:46:3e:c5:b7:f7:85:
e4:28:f8:36:4e:03:b0:25:87:1d:5a:61:7d:9d:c2:
5f:03:b9:9f:d8:67:c2:e3:99:e8:e2:b2:8e:98:39:
42:e6:d2:27:87:77:35:a6:a4:d6:3b:57:1a:d4:b2:
1b:d9:5f:30:95:aa:01:ae:04:c5:d9:30:31:5d:c3:
b9:e2:13:95:27:f3:61:25:21:c0:b1:c5:5b:a6:bc:
e3:87:3c:ad:16:dd:00:da:6e:47:d6:87:f6:92:f1:
38:5d:25:3b:73:6c:d6:68:a3:98:f2:cf:1a:f8:6a:
58:dd:1f:59:55:70:54:9e:18:f3:7e:1a:6f:c3:19:
6e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:EE:79:3E:24:2F:E5:0E:07:C2:D1:0D:93:8E:A0:56:BA:4F:58:EE
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/2O55PiQv5Q4HwtENk46gVrpPWO4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.99.0/24
80.96.106.0/24
81.180.252.0/23
217.156.20.0/23
217.156.56.0/24
Signature Algorithm: sha256WithRSAEncryption
09:e4:11:0c:25:13:41:04:31:b6:ee:12:4d:d2:50:33:33:e2:
ee:32:5e:ce:ed:18:1c:54:87:59:78:0d:4f:60:a8:d9:de:25:
11:0a:34:66:b6:9e:d2:32:3c:b0:d1:ea:1b:66:a6:0b:b4:53:
a2:7e:c7:fa:b8:7d:5f:3f:bc:61:37:99:a9:d1:07:c9:b9:82:
2a:d2:f8:d8:b6:35:27:1e:a7:e6:a6:b6:9a:a9:e0:74:92:f2:
b7:5c:12:bf:a3:22:63:21:a6:7d:15:2a:f8:6f:a5:16:47:93:
21:63:bd:bd:38:ee:5e:7a:70:50:a5:de:c4:f1:49:f5:51:c8:
40:30:96:00:e9:87:0d:1e:49:dd:5c:9d:7c:52:10:f0:f8:85:
f3:95:5b:ae:da:5e:2a:36:f5:7e:a8:b3:5e:20:7d:68:10:2b:
05:32:99:56:79:29:59:c7:f8:41:8c:5f:55:c4:4e:c9:fa:66:
e8:cb:f1:55:5e:8d:ee:ea:68:3f:58:4f:e9:0c:57:64:6b:2d:
f9:bd:c1:f1:d3:3b:4e:50:41:63:87:7d:3f:ee:9d:3a:cf:36:
2b:37:04:12:2a:3a:ab:e2:9e:f0:a2:b6:ac:aa:6f:f9:51:7b:
f8:59:35:67:f1:81:f5:ca:d3:0b:c4:d0:cf:4e:e0:e8:1a:1a:
2b:e0:a3:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:48:44 2026 by rpki-client