Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/1-stHiFG5ZJA2mFzyfwwy5QNNsDM.roa
File: 1-stHiFG5ZJA2mFzyfwwy5QNNsDM.roa (raw, json)
Hash identifier: Lb2pUc7C5pGRhFwMsbtZNxQa9QnU9Kd72Auny3MOmpY=
Subject key identifier: FA:CB:47:88:51:B9:64:90:36:98:5C:F2:7F:0C:32:E5:03:4D:B0:33
Certificate issuer: /CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Certificate serial: 019C8B6D6194D5944A850A5E95BB94DCBB2F
Authority key identifier: 55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/1-stHiFG5ZJA2mFzyfwwy5QNNsDM.roa
Signing time: Mon 23 Feb 2026 16:55:27 +0000
ROA not before: Mon 23 Feb 2026 16:55:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 83.147.194.0/24 maxlen: 24
83.147.217.0/24 maxlen: 24
83.147.222.0/24 maxlen: 24
83.147.240.0/23 maxlen: 24
83.147.242.0/23 maxlen: 24
91.186.208.0/23 maxlen: 24
91.186.210.0/23 maxlen: 24
178.253.38.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:8b:6d:61:94:d5:94:4a:85:0a:5e:95:bb:94:dc:bb:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Validity
Not Before: Feb 23 16:55:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=facb478851b9649036985cf27f0c32e5034db033
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:5a:24:20:14:12:48:2e:bc:d5:d6:37:a6:c1:
ca:f8:01:4d:93:9b:3f:7f:99:5f:8e:fe:1a:87:eb:
d5:e6:ca:90:c6:eb:6a:fb:73:c6:65:73:d6:c0:18:
c2:87:91:4a:11:ea:76:0e:b4:ef:b3:a5:82:28:4c:
00:68:d0:3b:49:1e:ba:20:95:f2:d1:23:97:f9:b5:
da:59:e0:31:91:32:ec:26:23:e4:9b:53:0c:c3:29:
29:ea:53:e7:12:c3:04:0b:29:fb:5a:af:3d:7d:0c:
85:9b:ac:bb:e9:1c:9a:3b:78:c9:4c:69:50:f8:65:
34:34:26:f7:22:c5:58:08:3a:c5:64:8e:17:c8:e3:
de:08:4f:78:b8:44:bd:f0:eb:91:e3:30:f0:74:d6:
34:62:40:dc:3b:8a:95:de:f5:eb:98:a9:01:89:cf:
c1:56:c0:53:85:2f:69:3d:88:71:e8:73:c7:09:e9:
10:7a:64:cc:a1:d0:5d:b0:9b:a5:fe:de:58:e5:a0:
b0:83:29:e5:a3:32:6e:97:e8:09:fa:f3:4e:9e:da:
c5:08:3d:58:d2:63:5b:b6:ad:23:6b:ca:c8:46:77:
c2:55:30:7f:90:06:e0:fd:25:7d:9a:e7:8d:6f:c9:
34:d5:74:5e:d4:5e:6c:03:f1:99:ad:dd:04:8a:d5:
72:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:CB:47:88:51:B9:64:90:36:98:5C:F2:7F:0C:32:E5:03:4D:B0:33
X509v3 Authority Key Identifier:
keyid:55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/1-stHiFG5ZJA2mFzyfwwy5QNNsDM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.194.0/24
83.147.217.0/24
83.147.222.0/24
83.147.240.0/22
91.186.208.0/22
178.253.38.0/23
Signature Algorithm: sha256WithRSAEncryption
1e:d8:9f:77:27:19:6d:bf:e0:44:1d:c6:02:88:e4:95:e7:54:
99:3f:af:cf:41:f3:67:92:fb:17:8e:4e:22:34:49:fe:27:f8:
1b:ca:78:c6:37:b0:29:5d:b8:90:3e:7c:fb:4a:a5:dd:2c:1c:
9f:e5:b0:a3:03:66:9f:04:b0:d3:73:b8:b5:b8:92:bc:09:8e:
9c:b1:1b:e5:89:17:e1:34:3d:31:8a:57:01:c0:49:7d:f2:04:
25:cf:14:42:50:a5:54:0d:73:26:e8:5c:cd:2b:7e:02:d3:70:
1d:32:50:88:35:76:bd:a1:ab:00:0b:12:ce:97:0d:0e:24:c0:
1c:74:07:42:00:64:78:1c:b1:5f:0a:cd:62:d5:12:4c:25:88:
7f:03:52:74:27:8c:36:50:76:92:ec:2c:b9:b4:52:97:28:8c:
2c:25:8e:46:28:d1:38:85:63:3f:3b:59:e5:6e:99:1a:25:ad:
a7:82:be:64:37:50:9f:44:42:28:f8:26:bd:bd:40:36:d3:16:
ad:ec:4d:c3:cc:38:da:5e:7f:a5:79:60:8a:5c:9b:78:c4:58:
c5:43:a2:58:d6:72:bf:85:ed:e8:71:86:67:ca:1f:df:54:0b:
a2:a3:03:17:8c:2b:4e:b7:4e:e8:cf:f0:fb:5c:5c:b9:00:36:
b7:4e:08:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:06:32 2026 by rpki-client