Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/wDHVRyiXk2I4-k7HUXz_LzhGBZo.roa
File: wDHVRyiXk2I4-k7HUXz_LzhGBZo.roa (raw, json)
Hash identifier: sKE5RBSFf6BudPt+ZHQSwfT4/JWlGBWhI6UYZEHC8oU=
Subject key identifier: C0:31:D5:47:28:97:93:62:38:FA:4E:C7:51:7C:FF:2F:38:46:05:9A
Certificate issuer: /CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Certificate serial: 019A37E1E7B21553237361FA0D32ECAFEE63
Authority key identifier: 55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/wDHVRyiXk2I4-k7HUXz_LzhGBZo.roa
Signing time: Fri 31 Oct 2025 01:29:03 +0000
ROA not before: Fri 31 Oct 2025 01:29:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 83.147.194.0/24 maxlen: 24
94.241.160.0/23 maxlen: 24
178.253.38.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:37:e1:e7:b2:15:53:23:73:61:fa:0d:32:ec:af:ee:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Validity
Not Before: Oct 31 01:29:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c031d5472897936238fa4ec7517cff2f3846059a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:da:e8:b6:48:a9:18:68:7b:a6:82:aa:28:7b:
ea:d7:1f:5b:41:ac:64:e9:df:40:6f:e2:ef:9f:c6:
eb:01:d2:5c:15:fd:96:ff:0f:c6:26:a9:a2:ed:25:
4b:b3:ba:60:82:0b:73:8e:4b:90:f4:27:bf:5d:6a:
c2:d2:93:74:8b:bc:70:66:83:d0:35:7f:14:63:70:
0d:60:03:48:46:a5:f0:29:63:17:46:4e:78:ed:95:
89:f7:3f:dc:de:80:4a:fa:4a:d7:38:45:41:d1:34:
e7:57:4b:5f:de:5b:bf:51:31:59:20:e8:24:92:cb:
c2:21:6f:92:2d:8b:98:8e:03:c1:4e:f1:eb:86:b1:
48:ec:d4:c9:c5:93:3c:c8:e9:94:15:e2:df:e8:b5:
19:c3:2b:56:bf:45:a1:f1:43:cf:e4:97:bb:05:c1:
60:c9:db:62:da:85:95:e5:3b:72:05:1c:3a:ae:70:
a6:66:ce:da:5f:67:83:d6:e4:70:40:61:20:65:d1:
cd:6c:77:c0:a6:97:ea:fe:65:3f:c5:cd:9a:b2:7b:
af:9b:50:df:db:92:a0:15:b2:7a:27:2e:80:8f:31:
b1:e6:f1:ac:23:45:5e:8d:de:19:5f:18:89:06:19:
80:74:d4:16:18:c4:ae:72:83:7c:39:8c:1d:b8:35:
f7:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:31:D5:47:28:97:93:62:38:FA:4E:C7:51:7C:FF:2F:38:46:05:9A
X509v3 Authority Key Identifier:
keyid:55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/wDHVRyiXk2I4-k7HUXz_LzhGBZo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.194.0/24
94.241.160.0/23
178.253.38.0/23
Signature Algorithm: sha256WithRSAEncryption
b0:97:1f:ca:5d:54:10:c6:e0:22:99:a9:ef:51:6a:93:45:93:
ad:96:dc:f2:5a:0f:a3:8f:fa:f1:46:1c:50:c6:51:35:0d:56:
cb:cf:c2:8f:34:c4:9f:bd:4a:d3:db:88:5c:5d:20:be:15:43:
bb:b5:0d:b4:43:33:57:e0:cb:47:cf:5b:ec:85:d0:44:d6:24:
fb:8f:ab:c4:04:96:2c:ae:a8:0c:f9:a1:a0:58:e0:c6:f6:f2:
b0:a3:8a:ca:60:6b:59:72:58:fa:41:0e:dc:ef:1a:c3:76:a2:
b2:6c:09:6b:87:17:eb:af:5b:73:6c:80:bf:84:24:e5:b5:37:
86:01:51:e0:24:6d:32:ca:4a:de:ff:22:b4:ac:2d:b1:1f:09:
39:c8:39:fc:d8:3f:dd:2b:b5:81:e3:b6:54:b8:dd:51:c0:57:
a6:3e:24:94:35:e7:0e:93:88:08:32:23:f0:76:e8:47:2d:6b:
05:47:00:3a:bd:7b:e5:75:4c:de:9e:7f:b4:8b:a8:27:00:60:
0e:51:a2:d7:fa:de:7b:99:eb:ab:fa:e5:38:fb:cb:a3:91:0c:
65:86:2a:bc:bc:58:a4:8d:83:f4:10:a1:67:e5:a2:eb:bf:39:
d3:7a:b2:1b:4f:2a:ee:44:2c:e1:f0:95:f2:5d:1e:21:1e:a2:
97:19:fa:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:03:45 2025 by rpki-client