Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8c/c0b53a-eeec-4038-9238-f81ac56cc3dc/1/J2kkb7XLED3zxjPpxFrGmU-yXEc.roa
File: J2kkb7XLED3zxjPpxFrGmU-yXEc.roa (raw, json)
Hash identifier: MYQXPTM2ueGMMS+LNZz5Ky7ssKkl2Y0QmYca8fuqX8I=
Subject key identifier: 27:69:24:6F:B5:CB:10:3D:F3:C6:33:E9:C4:5A:C6:99:4F:B2:5C:47
Certificate issuer: /CN=55e30ba0ecc6e69189463561d4ea54c23d138f3c
Certificate serial: 01A07C799F27ADF36019C3B5272066C16591
Authority key identifier: 55:E3:0B:A0:EC:C6:E6:91:89:46:35:61:D4:EA:54:C2:3D:13:8F:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VeMLoOzG5pGJRjVh1OpUwj0Tjzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/c0b53a-eeec-4038-9238-f81ac56cc3dc/1/J2kkb7XLED3zxjPpxFrGmU-yXEc.roa
Signing time: Mon 07 Sep 2026 15:25:40 +0000
ROA not before: Mon 07 Sep 2026 15:25:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205891
IP address blocks: 5.182.68.0/22 maxlen: 22
5.182.68.0/24 maxlen: 24
5.182.69.0/24 maxlen: 24
5.182.70.0/24 maxlen: 24
5.182.71.0/24 maxlen: 24
185.55.212.0/22 maxlen: 22
185.55.212.0/24 maxlen: 24
185.55.213.0/24 maxlen: 24
185.55.214.0/24 maxlen: 24
185.55.215.0/24 maxlen: 24
2a02:4e20::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/c0b53a-eeec-4038-9238-f81ac56cc3dc/1/VeMLoOzG5pGJRjVh1OpUwj0Tjzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/c0b53a-eeec-4038-9238-f81ac56cc3dc/1/VeMLoOzG5pGJRjVh1OpUwj0Tjzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VeMLoOzG5pGJRjVh1OpUwj0Tjzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 14:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7c:79:9f:27:ad:f3:60:19:c3:b5:27:20:66:c1:65:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55e30ba0ecc6e69189463561d4ea54c23d138f3c
Validity
Not Before: Sep 7 15:25:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2769246fb5cb103df3c633e9c45ac6994fb25c47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c3:31:35:f3:53:ee:03:fd:78:5d:c2:bc:55:
88:e6:8c:e9:c1:6d:c4:27:20:19:ac:90:5b:ac:64:
ec:96:81:8d:93:84:c8:e9:a3:ae:26:60:b1:a5:1e:
3d:9f:5a:9a:8d:35:63:70:a6:2b:7d:9b:c6:8e:b3:
5c:0f:f0:37:3a:52:78:a0:00:d1:66:8d:de:50:eb:
9b:07:35:fa:4b:d3:45:8d:05:95:8f:2c:2e:f6:4b:
08:08:cf:78:a1:1a:66:3c:68:7a:80:55:54:55:50:
21:14:a5:7e:da:4f:92:e4:0b:c9:d0:75:80:2e:6d:
3d:c9:6b:c4:d8:87:f2:ca:fe:bb:6b:74:c7:80:88:
e7:1a:ce:a9:0a:49:2c:8b:bc:27:a8:f8:ab:9e:cd:
16:a7:9e:49:84:a8:ab:87:21:23:69:70:37:20:2b:
9b:b2:58:b3:72:8e:93:35:c2:dc:88:ac:a5:46:1a:
5e:28:62:89:98:7a:f3:28:3d:a7:a7:f3:e4:e4:87:
76:a6:8a:d4:0e:f8:0f:6d:61:ae:18:8b:0a:83:26:
c5:fb:e0:99:23:f2:bd:cf:39:5d:c4:db:4d:0d:59:
80:ad:4c:f0:26:4a:fb:0a:cf:c5:5c:84:37:93:e5:
4b:fa:e4:d3:d9:35:9c:a2:08:39:e0:a8:2c:cd:b6:
77:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:69:24:6F:B5:CB:10:3D:F3:C6:33:E9:C4:5A:C6:99:4F:B2:5C:47
X509v3 Authority Key Identifier:
keyid:55:E3:0B:A0:EC:C6:E6:91:89:46:35:61:D4:EA:54:C2:3D:13:8F:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VeMLoOzG5pGJRjVh1OpUwj0Tjzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/c0b53a-eeec-4038-9238-f81ac56cc3dc/1/J2kkb7XLED3zxjPpxFrGmU-yXEc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/c0b53a-eeec-4038-9238-f81ac56cc3dc/1/VeMLoOzG5pGJRjVh1OpUwj0Tjzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.68.0/22
185.55.212.0/22
IPv6:
2a02:4e20::/32
Signature Algorithm: sha256WithRSAEncryption
78:74:9d:bf:fb:ea:cc:90:4c:6d:1a:55:11:70:ad:b5:70:e9:
d9:1e:f1:07:ba:fb:71:cb:5e:df:cb:5f:fc:db:3a:f8:66:7c:
43:23:bc:b3:b4:6b:6b:85:e2:c3:64:9b:6b:5e:84:91:29:1a:
1b:00:3b:ba:50:bc:2e:20:52:45:80:5f:0d:d4:84:60:9e:4d:
3b:75:02:60:96:93:f7:48:11:f6:21:76:b8:12:e7:d2:8b:a5:
6c:02:68:52:25:1b:cc:f7:4d:1d:86:3b:8b:43:16:26:ff:50:
4b:9a:fc:0d:e1:73:0d:da:19:a9:9a:34:7b:99:fc:91:88:05:
da:dc:66:15:55:c8:fa:45:b2:d4:c4:c9:6c:c2:20:80:0b:a7:
92:07:c4:29:f9:46:73:53:56:b1:51:a1:a0:4b:39:87:29:fe:
bb:25:e7:d0:37:d3:0c:35:45:0f:96:65:60:eb:c2:a4:1f:df:
9c:91:ec:ff:fe:7b:f7:a4:ff:6a:a0:c5:c4:93:5c:e4:68:fc:
37:ee:b2:46:10:b6:6f:11:1b:40:1e:af:74:c9:67:a1:4e:0f:
cc:34:1c:37:fa:26:f1:d9:a8:a3:c2:49:3e:a5:9c:83:ee:19:
d2:3b:bb:50:3e:7d:5e:aa:d0:2a:58:c2:d7:d8:e4:7c:22:bb:
15:03:80:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 19:24:37 2026 by rpki-client