Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/1-kUcSo0TEpKw_YLYby0R4DVb4yg.roa
File: 1-kUcSo0TEpKw_YLYby0R4DVb4yg.roa (raw, json)
Hash identifier: FnVQZ/f6EWlkoWkdWzbkkjdOeMD2B5h8cDHMDm/NyV4=
Subject key identifier: FA:45:1C:4A:8D:13:12:92:B0:FD:82:D8:6F:2D:11:E0:35:5B:E3:28
Certificate issuer: /CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Certificate serial: 019D7C61DA080AA594C2F7E28F057519FA09
Authority key identifier: 55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/1-kUcSo0TEpKw_YLYby0R4DVb4yg.roa
Signing time: Sat 11 Apr 2026 11:51:20 +0000
ROA not before: Sat 11 Apr 2026 11:51:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207569
IP address blocks: 83.147.222.0/24 maxlen: 24
178.253.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:7c:61:da:08:0a:a5:94:c2:f7:e2:8f:05:75:19:fa:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Validity
Not Before: Apr 11 11:51:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fa451c4a8d131292b0fd82d86f2d11e0355be328
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:18:9e:b0:a0:27:a6:de:66:39:26:ea:eb:be:
15:c1:41:df:91:4a:1b:83:29:0d:2f:a1:2a:af:b8:
e1:6f:b0:13:66:e4:f2:cf:8e:48:47:d2:26:c9:3d:
37:9d:60:31:34:c0:85:cf:c2:88:36:9e:cd:ec:57:
06:ab:7c:4f:d3:1d:2a:88:1b:e3:c5:29:c1:76:9a:
f9:65:f0:09:ca:0c:b9:64:81:3b:be:65:35:e3:38:
ea:56:bc:1c:6f:f2:5d:75:49:50:67:f7:88:70:8e:
92:f6:11:a4:d6:d2:ff:3e:3f:4a:ff:55:27:1c:98:
91:e8:03:a8:fe:2b:de:8f:1d:42:02:2b:fc:ae:af:
c9:69:1f:b5:0e:1e:96:e5:3f:df:71:33:8c:02:a2:
34:78:ac:4e:49:11:d4:68:b6:27:ed:e0:8e:c6:2d:
25:8e:94:df:b4:81:1c:3f:16:b4:0c:5a:36:35:bc:
ec:e0:07:ba:15:e9:e5:e2:fd:a3:8f:a9:3f:cf:3e:
9c:d3:d7:2a:d8:03:3d:1c:b7:57:ce:ed:ec:40:0f:
8d:cc:f5:f7:18:9f:de:97:d6:31:34:f3:19:aa:b4:
48:f0:7a:ec:f7:cd:61:58:ec:75:d7:58:99:7b:42:
e9:3b:c9:40:e0:b9:98:ec:42:0e:11:fe:24:44:58:
5d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:45:1C:4A:8D:13:12:92:B0:FD:82:D8:6F:2D:11:E0:35:5B:E3:28
X509v3 Authority Key Identifier:
keyid:55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/1-kUcSo0TEpKw_YLYby0R4DVb4yg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.222.0/24
178.253.16.0/24
Signature Algorithm: sha256WithRSAEncryption
12:a7:ca:79:76:55:88:5c:d7:aa:26:34:e7:de:f1:0a:60:e3:
3a:79:0e:57:e1:5f:bb:8a:84:3b:5c:f7:23:ca:00:df:62:0e:
36:ee:ca:5e:01:84:4f:72:cc:d4:cb:a7:ea:8b:e9:4b:6d:7e:
d2:b7:ed:30:e8:d7:ba:b8:6e:f8:ef:73:54:7f:37:2d:cb:29:
71:7f:8f:75:fc:30:8f:96:05:e4:07:72:1e:78:e0:6a:51:82:
64:ca:01:90:95:94:00:c8:33:7a:13:20:c0:22:d6:a7:e9:c0:
df:46:8c:b9:0f:eb:5a:b6:5f:71:25:3e:61:ae:8c:58:ed:2c:
b5:01:c9:b6:a6:09:8c:4f:d5:ab:53:a1:5d:67:41:0d:55:72:
ef:8a:71:02:f9:44:87:2f:93:47:5e:e5:12:56:7d:b0:a6:f6:
13:da:3e:9a:65:96:ec:40:29:33:f5:a8:65:36:16:9a:3e:52:
c0:1f:54:8b:b4:40:15:ce:2d:d6:0e:c6:95:3e:82:fd:0d:e3:
8b:4a:49:f3:bd:40:cb:c2:fb:56:b1:8c:03:18:e4:fb:f9:17:
85:e9:46:29:1b:b5:3a:1a:05:37:d6:5b:e5:be:49:db:a9:76:
73:eb:46:9a:81:d6:b8:48:98:f9:06:9d:c9:1c:0e:e5:07:a4:
1a:06:00:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:54:20 2026 by rpki-client