Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/3-Q2O8n8MtHCsBjFCINxeBCa274.roa
File: 3-Q2O8n8MtHCsBjFCINxeBCa274.roa (raw, json)
Hash identifier: u7IBZo9GQpzsOLdip4CXpah+A0lRzXrTr/IcG21JJEA=
Subject key identifier: DF:E4:36:3B:C9:FC:32:D1:C2:B0:18:C5:08:83:71:78:10:9A:DB:BE
Certificate issuer: /CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Certificate serial: 019D5E235175F4BAF520C55B720499892844
Authority key identifier: 55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/3-Q2O8n8MtHCsBjFCINxeBCa274.roa
Signing time: Sun 05 Apr 2026 14:54:26 +0000
ROA not before: Sun 05 Apr 2026 14:54:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 83.147.248.0/22 maxlen: 22
91.186.200.0/23 maxlen: 24
91.186.202.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:5e:23:51:75:f4:ba:f5:20:c5:5b:72:04:99:89:28:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Validity
Not Before: Apr 5 14:54:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dfe4363bc9fc32d1c2b018c508837178109adbbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e6:2d:88:7a:81:47:0f:47:ef:e5:ce:ec:6d:
18:78:78:3e:12:bb:be:08:e0:f9:84:81:0b:7f:0d:
13:1b:62:d5:d9:e0:f7:70:c7:d2:a7:51:39:07:d0:
5b:3a:36:47:38:a5:0a:cf:7c:93:6f:8f:ab:8d:c5:
cf:47:79:4e:98:0c:8b:41:ac:b3:31:32:fd:49:95:
d9:55:7a:23:5b:31:a9:a7:af:e3:fe:ab:1a:8e:cb:
46:f5:f7:c2:3f:37:38:1d:89:99:f2:31:1f:b0:1c:
6e:ae:9c:a8:93:64:d0:8a:18:99:f8:8a:f7:c1:9d:
13:d6:9a:16:e4:6d:68:70:66:62:1f:50:f7:93:6a:
8f:37:6a:d6:03:c7:50:61:6a:a6:cc:a6:a6:47:39:
a1:9c:67:c4:92:c7:be:dc:a6:30:e9:f2:71:4b:28:
bb:f1:37:e6:91:5a:91:d2:ba:0e:87:74:2a:41:af:
c9:12:a0:9e:93:11:7b:ba:75:ec:30:e3:bf:1e:e8:
b0:5f:c7:24:12:26:cd:75:88:aa:b9:fc:41:5d:e2:
77:65:2f:15:ec:1b:1a:16:52:be:32:15:09:48:23:
40:62:3d:2d:44:2b:57:b9:44:bd:59:2d:0e:b8:a1:
ad:74:cf:54:cf:ee:1a:d8:41:c9:0d:e1:e7:ce:66:
0b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:E4:36:3B:C9:FC:32:D1:C2:B0:18:C5:08:83:71:78:10:9A:DB:BE
X509v3 Authority Key Identifier:
keyid:55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/3-Q2O8n8MtHCsBjFCINxeBCa274.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.248.0/22
91.186.200.0/22
Signature Algorithm: sha256WithRSAEncryption
49:e2:b9:93:9e:d8:f2:c7:22:94:37:3f:f5:8e:15:cd:6e:52:
a9:ee:dd:82:f8:2d:fd:6f:cf:d0:a2:bd:86:e4:7f:a4:4d:79:
8e:82:7a:2f:82:ad:ac:2e:ec:c8:6c:5a:a6:2c:e0:a4:33:a6:
02:2e:a1:b4:1b:2a:cd:ac:c6:7d:65:de:da:a1:67:93:07:98:
e7:a7:a8:88:69:3c:85:86:7b:b0:b1:85:69:0d:84:a7:3a:d7:
ad:12:88:b8:ef:e8:1a:a7:b0:51:f5:d9:ba:3f:80:9c:00:3a:
11:cc:60:d5:bb:3f:8a:99:19:20:b8:9c:0a:98:d2:57:ef:3f:
5e:23:24:5c:06:55:36:b8:0e:52:e8:37:c3:80:d9:46:d8:17:
35:3a:cb:85:9f:d3:d1:00:3c:ce:0f:58:bd:48:95:f3:1e:7d:
47:c2:77:36:cd:05:c0:21:be:a9:64:42:55:ec:bd:c1:1b:e2:
97:91:d9:2c:b4:81:70:51:43:56:a1:19:ad:8f:1e:b6:c1:89:
4e:64:06:10:d3:e7:ac:a5:4e:e2:9f:65:28:85:a2:42:55:43:
65:3a:49:63:8c:45:f3:f4:6f:a1:ae:06:64:b7:a1:a7:68:c9:
a7:19:34:42:24:34:5b:ee:4d:22:ee:f7:df:f3:37:9f:a8:40:
33:ab:c8:06
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ1eI1F19Lr1IMVbcgSZiShEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1YmFmMjY5Njc1MTBiM2M1MmU0NmQxZGM1OTM5NjdjZGYy
OWY5YzkwHhcNMjYwNDA1MTQ1NDI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZmU0MzYzYmM5ZmMzMmQxYzJiMDE4YzUwODgzNzE3ODEwOWFkYmJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqeYtiHqBRw9H7+XO7G0YeHg+Eru+
COD5hIELfw0TG2LV2eD3cMfSp1E5B9BbOjZHOKUKz3yTb4+rjcXPR3lOmAyLQayz
MTL9SZXZVXojWzGpp6/j/qsajstG9ffCPzc4HYmZ8jEfsBxurpyok2TQihiZ+Ir3
wZ0T1poW5G1ocGZiH1D3k2qPN2rWA8dQYWqmzKamRzmhnGfEkse+3KYw6fJxSyi7
8TfmkVqR0roOh3QqQa/JEqCekxF7unXsMOO/HuiwX8ckEibNdYiqufxBXeJ3ZS8V
7BsaFlK+MhUJSCNAYj0tRCtXuUS9WS0OuKGtdM9Uz+4a2EHJDeHnzmYLHQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFN/kNjvJ/DLRwrAYxQiDcXgQmtu+MB8GA1UdIwQY
MBaAFFW68mlnUQs8UuRtHcWTlnzfKfnJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmJyeWFXZFJDenhTNUcwZHhaT1dmTjhwLWNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS81YWE0ZGMtZDE4NC00ZGI0LTllMTAt
NDlmOTgxZWU1OTgxLzEvMy1RMk84bjhNdEhDc0JqRkNJTnhlQkNhMjc0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS81YWE0ZGMtZDE4NC00ZGI0LTllMTAtNDlmOTgxZWU1OTgx
LzEvVmJyeWFXZFJDenhTNUcwZHhaT1dmTjhwLWNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCU5P4AwQC
W7rIMA0GCSqGSIb3DQEBCwUAA4IBAQBJ4rmTntjyxyKUNz/1jhXNblKp7t2C+C39
b8/Qor2G5H+kTXmOgnovgq2sLuzIbFqmLOCkM6YCLqG0GyrNrMZ9Zd7aoWeTB5jn
p6iIaTyFhnuwsYVpDYSnOtetEoi47+gap7BR9dm6P4CcADoRzGDVuz+KmRkguJwK
mNJX7z9eIyRcBlU2uA5S6DfDgNlG2Bc1OsuFn9PRADzOD1i9SJXzHn1Hwnc2zQXA
Ib6pZEJV7L3BG+KXkdkstIFwUUNWoRmtjx62wYlOZAYQ0+espU7in2UohaJCVUNl
OkljjEXz9G+hrgZkt6GnaMmnGTRCJDRb7k0i7vff8zefqEAzq8gG
-----END CERTIFICATE-----
Generated at Fri Apr 17 08:14:25 2026 by rpki-client