Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/K_5UWL5IkQbpsAsxidIs-a910tQ.roa
File: K_5UWL5IkQbpsAsxidIs-a910tQ.roa (raw, json)
Hash identifier: jfQdjzJB+uzffMoi8GywFxVevTRWSqD6hEzeDuvNmb4=
Subject key identifier: 2B:FE:54:58:BE:48:91:06:E9:B0:0B:31:89:D2:2C:F9:AF:75:D2:D4
Certificate issuer: /CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Certificate serial: 019E94276678479DB7A93F3A9530FE53CC9D
Authority key identifier: 55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/K_5UWL5IkQbpsAsxidIs-a910tQ.roa
Signing time: Thu 04 Jun 2026 19:41:10 +0000
ROA not before: Thu 04 Jun 2026 19:41:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204339
IP address blocks: 83.147.194.0/24 maxlen: 24
91.186.208.0/22 maxlen: 24
91.186.220.0/22 maxlen: 24
178.253.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:94:27:66:78:47:9d:b7:a9:3f:3a:95:30:fe:53:cc:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Validity
Not Before: Jun 4 19:41:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2bfe5458be489106e9b00b3189d22cf9af75d2d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:84:0f:77:e1:8f:59:aa:69:b5:9b:2b:81:de:
98:5e:5c:49:af:72:0f:a5:f2:f3:66:28:e7:2b:20:
7c:fa:0d:1d:a8:aa:c3:75:bf:bb:2f:10:3a:f2:16:
52:21:c5:ac:aa:c0:e2:04:8f:d0:9f:65:f6:80:2b:
89:06:18:5d:83:58:25:20:cc:fb:7b:cb:58:05:41:
b3:12:94:62:9a:f3:cd:f7:4f:b2:64:9d:a8:ca:78:
36:86:a8:03:c1:a5:c6:8a:06:d3:a4:a8:60:3f:02:
75:ca:31:c7:13:ec:1b:25:ab:47:e4:17:76:79:ba:
54:d6:2a:fa:c7:02:28:64:e0:fc:c1:7a:52:50:7e:
86:68:3a:1f:3a:d7:2a:98:3d:ef:1a:f0:6a:1d:42:
a4:ee:d2:2e:af:26:cd:7b:8b:df:8b:2d:f7:59:77:
66:4e:cd:55:07:56:2a:cf:0e:9e:a4:97:50:ee:23:
b1:df:55:7a:da:8a:dc:e9:d0:44:6d:3a:be:68:e2:
a3:5e:55:20:3b:a2:65:2d:41:6e:81:5d:33:4d:2b:
4f:04:85:6e:1c:32:3d:d5:c6:50:c6:ec:05:30:a2:
4e:d8:72:4f:06:d5:1f:d1:72:17:49:42:5d:34:54:
3e:c2:9b:9e:7d:82:1a:d5:74:17:62:1f:2a:a4:18:
8e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:FE:54:58:BE:48:91:06:E9:B0:0B:31:89:D2:2C:F9:AF:75:D2:D4
X509v3 Authority Key Identifier:
keyid:55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/K_5UWL5IkQbpsAsxidIs-a910tQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.194.0/24
91.186.208.0/22
91.186.220.0/22
178.253.31.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:2c:d7:a4:03:05:d7:ea:f9:58:fd:cb:c1:c4:b6:c8:aa:c9:
3d:e5:a7:cc:58:d7:84:db:82:38:80:a9:b5:4e:be:ef:ea:47:
96:1c:e2:83:87:1d:3f:1c:af:75:53:34:25:ce:4f:b9:a6:29:
80:c9:b9:53:d7:7d:ac:0c:f9:ba:7a:c6:83:5b:06:10:d3:5e:
e9:0e:2f:e6:7b:b7:07:bf:15:eb:b9:bd:f1:6b:ca:e1:a0:06:
e9:30:71:d0:ff:66:95:2c:44:66:57:45:54:81:21:4a:57:8c:
03:01:93:b3:de:7a:8b:87:24:42:ef:6b:61:0b:f7:27:eb:0a:
ef:87:8b:28:ca:c0:26:33:ad:5f:5e:b8:14:3c:04:7f:3c:fd:
d2:96:cb:85:86:12:bf:11:59:e0:d2:dc:2b:23:b6:8d:50:1c:
df:b2:6a:0b:70:49:4b:c3:ae:e4:02:7a:1e:bc:c9:f5:fc:17:
e5:78:e0:ff:82:1f:a3:53:24:13:73:7b:cf:67:e6:5f:e7:0a:
c9:fa:e8:93:44:eb:b7:f8:52:a1:2e:ed:39:12:e5:57:53:7a:
ac:cd:9d:c3:74:42:9e:74:89:76:51:1a:8c:1c:8b:37:17:31:
24:b1:af:8e:e9:31:10:af:df:e5:7b:5c:f9:ce:cd:93:ab:34:
29:99:6d:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:23:28 2026 by rpki-client