Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/ahOBtrYhmRunqecYEU1ZWXuVovs.roa
File: ahOBtrYhmRunqecYEU1ZWXuVovs.roa (raw, json)
Hash identifier: 6mLblxHv8sz/ui7lbUzb+nfqv0WmrUDxl+RoD+Q+z/I=
Subject key identifier: 6A:13:81:B6:B6:21:99:1B:A7:A9:E7:18:11:4D:59:59:7B:95:A2:FB
Certificate issuer: /CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Certificate serial: 01A0C43FFA12945A6012F1B1CA4FEA79E842
Authority key identifier: 55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/ahOBtrYhmRunqecYEU1ZWXuVovs.roa
Signing time: Mon 21 Sep 2026 13:55:22 +0000
ROA not before: Mon 21 Sep 2026 13:55:22 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214432
IP address blocks: 94.241.164.0/23 maxlen: 24
94.241.166.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:3f:fa:12:94:5a:60:12:f1:b1:ca:4f:ea:79:e8:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Validity
Not Before: Sep 21 13:55:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a1381b6b621991ba7a9e718114d59597b95a2fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a8:4d:6a:1e:5a:3e:74:b2:17:9b:03:54:96:
2d:f2:26:9b:3f:d6:19:91:95:9a:37:8f:7a:b2:7a:
7f:f5:83:1b:8c:ce:07:fe:7f:e1:ef:b5:65:98:a5:
01:05:19:2e:81:23:0b:c8:cc:14:5a:ae:5b:87:ed:
10:10:2f:01:f3:eb:41:4b:81:a4:13:5e:c0:de:ef:
16:78:ae:43:42:31:c3:be:54:84:55:8c:46:09:84:
b7:e9:61:6b:27:2b:1b:8b:b4:c7:61:88:f7:1b:29:
cc:25:b7:fa:23:f8:4a:0f:2a:98:f9:a3:9d:c9:d3:
c1:b3:16:47:ed:ed:b1:00:e2:9c:92:73:d9:54:d2:
b7:2e:5f:ad:04:2d:1f:24:f1:dc:37:e8:c8:1f:b0:
3b:2a:d0:b5:d4:c9:b6:60:e3:25:42:2d:1e:55:3b:
e4:3d:c9:e4:d3:59:6e:49:6c:73:e7:fb:05:d7:f5:
9b:0b:df:d5:46:5f:53:c9:bf:de:3e:d1:6a:83:9a:
d0:c3:cc:60:f3:1b:c7:c9:8c:f6:bd:5f:d0:7b:d3:
ed:30:6f:67:46:e2:26:b0:4a:9c:56:3c:3c:8c:ac:
a3:13:a3:26:e1:d0:1c:73:46:62:bc:5b:fe:92:27:
46:6e:5e:8e:e0:99:fe:ed:a0:61:22:dd:39:14:52:
d9:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:13:81:B6:B6:21:99:1B:A7:A9:E7:18:11:4D:59:59:7B:95:A2:FB
X509v3 Authority Key Identifier:
keyid:55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/ahOBtrYhmRunqecYEU1ZWXuVovs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.241.164.0/22
Signature Algorithm: sha256WithRSAEncryption
3e:e1:6b:6a:b3:3d:d8:55:8f:e4:97:5f:10:97:fc:56:75:76:
28:df:c7:f9:53:3d:ad:87:ba:87:98:a5:ef:57:97:d7:5b:e3:
3d:73:db:5f:74:2d:e2:bc:dd:32:89:33:57:9c:42:33:33:ac:
70:29:2c:16:96:5a:46:90:eb:f8:ae:1e:80:a5:1a:97:21:57:
3f:07:2f:1c:9d:6d:9c:9b:b9:d2:69:f5:b5:d2:01:8e:c0:90:
4e:d7:0c:2f:f2:ef:13:b2:35:5a:a7:b3:2b:a8:52:37:48:4c:
9f:7f:e4:22:b9:9e:7e:4d:f5:cb:e2:9b:9e:a1:6c:ca:ac:a0:
ca:13:2c:8f:ba:11:1e:ea:bf:0e:03:26:25:07:2b:de:44:5f:
8b:df:96:0e:d8:ca:29:b2:ce:2b:78:a4:02:e8:2f:40:0c:a7:
eb:88:d3:8b:73:85:da:6a:62:22:2d:2d:a8:1b:d5:ae:21:15:
87:e0:a6:89:78:43:02:dd:44:83:60:75:f4:e6:9b:72:34:e3:
ba:ba:21:9a:bc:2c:1e:13:74:d1:4a:34:69:a3:90:8b:60:f2:
54:dc:76:0e:99:4b:3d:30:ca:19:ef:bc:c9:f1:90:90:7e:fd:
51:0c:fd:0a:56:ed:aa:fc:b9:8c:2d:9b:ce:d9:cd:a9:c3:3b:
6d:3a:60:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:18:31 2026 by rpki-client