Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/0SWMflMJJlOILq6C9nu-h1OKJN8.roa
File: 0SWMflMJJlOILq6C9nu-h1OKJN8.roa (raw, json)
Hash identifier: kcK4B39yPXgK0nHshs5JakDk15PknxxnhcLimNeC6n8=
Subject key identifier: D1:25:8C:7E:53:09:26:53:88:2E:AE:82:F6:7B:BE:87:53:8A:24:DF
Certificate issuer: /CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Certificate serial: 019D2C03170CD1355FF22C2EB7FAD2322EB6
Authority key identifier: 55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/0SWMflMJJlOILq6C9nu-h1OKJN8.roa
Signing time: Thu 26 Mar 2026 21:18:12 +0000
ROA not before: Thu 26 Mar 2026 21:18:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204997
IP address blocks: 178.253.38.0/23 maxlen: 24
178.253.44.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2c:03:17:0c:d1:35:5f:f2:2c:2e:b7:fa:d2:32:2e:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Validity
Not Before: Mar 26 21:18:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d1258c7e53092653882eae82f67bbe87538a24df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:88:dc:69:43:b5:6b:a8:18:fd:fb:0f:fa:61:
21:cc:82:cc:47:32:89:47:a1:ef:62:e2:5b:67:39:
29:d9:16:c3:9d:9c:fc:a9:9c:70:f8:e7:0f:8f:b3:
8d:ee:bf:ca:48:12:cc:1c:6e:10:fa:4d:3d:6a:26:
af:5e:a8:b6:be:42:09:8d:a2:c5:7b:55:ad:fe:9f:
26:05:74:44:11:81:2f:37:2d:8d:b5:77:bc:ed:c0:
bf:54:24:ac:96:c1:2b:37:67:8c:2c:62:0a:16:25:
c1:af:e4:a0:72:18:7f:49:14:25:98:eb:35:c1:d9:
e7:7c:36:ca:fc:49:94:72:dc:ba:ce:23:c5:c6:2b:
d1:7e:4a:4c:4f:7b:88:9f:bb:19:77:81:76:b5:18:
69:31:51:76:3f:b5:d3:68:9b:a8:61:85:0b:51:f1:
e2:03:b2:3e:5c:10:3f:83:a4:f6:f0:0e:5f:0d:02:
58:dd:e4:56:5e:db:81:c4:bc:65:14:57:ee:f1:39:
f8:01:0a:5f:2a:37:d2:30:31:e2:e9:a5:f2:1d:4d:
b7:f9:28:dd:bc:fb:9f:dd:e5:45:ab:6d:07:80:d2:
ad:ae:ba:83:f9:e6:8e:95:6c:3d:fd:83:d1:df:d8:
12:ca:80:3c:03:c1:78:48:6e:f1:97:17:a8:80:0e:
69:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:25:8C:7E:53:09:26:53:88:2E:AE:82:F6:7B:BE:87:53:8A:24:DF
X509v3 Authority Key Identifier:
keyid:55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/0SWMflMJJlOILq6C9nu-h1OKJN8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.253.38.0/23
178.253.44.0/23
Signature Algorithm: sha256WithRSAEncryption
6a:4b:59:8c:13:f5:72:24:04:bb:8a:5b:60:71:69:00:42:bd:
93:e2:60:75:08:6a:00:89:29:49:2b:8c:99:b7:72:e6:d6:ce:
b8:3c:f6:06:bc:0a:a7:7f:b8:00:9f:0f:ba:99:1a:18:60:d8:
27:de:ed:17:6b:f7:c3:45:3e:6d:07:c8:67:ee:1e:c9:6a:67:
e0:58:14:a6:82:63:5a:b8:cb:35:10:ae:37:a1:6c:85:53:17:
99:f1:19:e0:f6:fd:9f:74:8a:3b:d4:9c:52:f1:46:d4:76:06:
e7:75:7e:8c:49:ca:b0:ae:b9:3c:73:b6:b1:a7:ef:d3:54:f5:
b4:2e:14:35:31:73:23:2e:35:9c:00:f4:66:cc:11:bf:68:6e:
bf:2e:4c:e2:90:ba:93:18:12:0c:d1:5e:9d:c9:9e:31:46:d1:
32:ba:88:ef:80:76:06:6c:dd:de:cf:6c:af:4f:c8:fa:f4:57:
23:21:3e:46:38:69:9a:43:20:14:3d:32:bd:5d:da:93:ae:07:
bc:07:3b:b7:6a:05:99:a6:13:ab:1c:79:18:00:2e:95:9b:32:
94:b3:39:34:51:68:9a:53:9a:80:74:b8:8d:3b:af:4e:cf:11:
cf:64:5f:b2:a2:3a:d3:a7:82:0b:10:bc:71:28:c6:81:3f:35:
30:59:aa:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:06:16 2026 by rpki-client