Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/7id4rlXpKhqEgoklo_n3TPOh2_w.roa
File: 7id4rlXpKhqEgoklo_n3TPOh2_w.roa (raw, json)
Hash identifier: 9Ebf5x7jwBaHozUQJp+V5eIJIfXdcY7VPlSLOLpK8uU=
Subject key identifier: EE:27:78:AE:55:E9:2A:1A:84:82:89:25:A3:F9:F7:4C:F3:A1:DB:FC
Certificate issuer: /CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Certificate serial: 019D3EC51A0D403438D26EA1AA2BA75D53F0
Authority key identifier: 55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/7id4rlXpKhqEgoklo_n3TPOh2_w.roa
Signing time: Mon 30 Mar 2026 12:43:17 +0000
ROA not before: Mon 30 Mar 2026 12:43:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198250
IP address blocks: 178.253.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3e:c5:1a:0d:40:34:38:d2:6e:a1:aa:2b:a7:5d:53:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Validity
Not Before: Mar 30 12:43:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ee2778ae55e92a1a84828925a3f9f74cf3a1dbfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:a5:d2:ba:f6:9c:97:24:df:48:e0:08:cc:2f:
c3:70:a8:26:0a:4c:2c:68:3d:25:a3:1b:67:87:eb:
23:5f:9d:4b:21:38:a4:6b:82:b6:b9:3e:3a:84:77:
63:a3:07:85:10:f5:4a:d1:03:25:b9:5f:c3:22:2c:
15:30:f9:f8:48:11:07:6f:8b:0c:d3:cb:94:07:c1:
79:06:a4:0b:fc:d6:56:b9:d3:0c:83:59:fe:38:dc:
e1:44:ff:0d:16:1a:cd:49:8c:98:1f:7a:fd:b8:e6:
dd:6e:80:fb:68:4e:68:eb:e5:e8:91:25:71:76:4e:
12:ee:c6:e4:0a:fc:ed:fc:ef:9b:d6:df:37:11:db:
4f:76:a6:60:a5:46:03:dd:2e:d2:39:a9:4b:c7:7e:
e8:8a:f9:95:c4:29:33:0e:4c:5f:46:e3:db:06:f3:
d1:e0:a6:77:bd:e1:21:85:c6:c5:82:84:57:31:54:
4f:e6:4a:df:7d:3e:77:39:ff:13:3c:d9:4f:f6:2c:
67:24:49:32:fd:61:d4:6f:38:5f:fb:45:66:2d:ba:
85:a3:23:a5:32:22:e0:e0:38:62:8e:12:83:e6:47:
01:77:bc:7e:95:70:c3:8f:04:72:41:4f:4a:5d:f9:
b8:45:f5:32:14:24:9a:a5:88:87:64:f4:fd:f4:56:
f3:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:27:78:AE:55:E9:2A:1A:84:82:89:25:A3:F9:F7:4C:F3:A1:DB:FC
X509v3 Authority Key Identifier:
keyid:55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/7id4rlXpKhqEgoklo_n3TPOh2_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.253.31.0/24
Signature Algorithm: sha256WithRSAEncryption
14:ce:fc:5a:4d:18:2c:79:0e:e9:1d:8d:5e:24:33:63:de:3e:
fb:5a:0f:a5:17:36:84:e0:0d:e6:fe:16:87:8f:ab:ad:f0:43:
51:f7:17:ed:c0:35:2c:f3:3b:e0:c1:2d:90:c8:b3:ff:f0:dd:
84:27:36:69:52:21:5c:87:ed:6a:c6:dc:fc:50:ba:f4:6b:68:
d8:a2:e0:bf:5b:ca:13:c4:f8:10:46:61:79:d9:f8:29:68:91:
d7:bc:b9:b3:97:62:e6:60:80:4a:fa:c1:94:11:50:f5:f6:75:
31:94:b4:59:a6:30:6c:ab:f1:67:e4:b8:f1:06:41:d3:62:17:
a6:08:10:a8:08:db:02:86:c3:4f:27:6b:30:df:1b:ed:f6:d9:
45:a0:71:7e:17:19:86:4d:f1:93:15:18:58:11:18:9a:81:b9:
bf:ab:d0:83:8d:9e:c0:d7:a4:38:8a:17:c3:cd:6d:0d:83:7d:
82:0d:24:21:46:8b:c0:51:10:11:5f:46:d7:9f:04:50:0d:08:
54:e8:0b:e8:2c:08:66:7f:67:54:fd:21:f0:e4:6f:04:9e:ce:
f9:47:c8:ae:4e:0b:b1:dd:96:cb:01:a0:e2:6b:85:dc:ab:a8:
5d:f6:42:32:e7:d4:a2:98:2f:c3:49:e0:5f:74:8d:b0:d2:ab:
5e:3a:2a:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:52:27 2026 by rpki-client