Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/96/a46349-1bc0-4a0b-b67f-b217a68ceaf4/1/k22uloocdesKVdwUSeLYjJVaVTQ.roa
File: k22uloocdesKVdwUSeLYjJVaVTQ.roa (raw, json)
Hash identifier: ggBFGirVIPu5fDAUXS24P854zrSqr5R5rDyGRVa96UA=
Subject key identifier: 93:6D:AE:96:8A:1C:75:EB:0A:55:DC:14:49:E2:D8:8C:95:5A:55:34
Certificate issuer: /CN=5906325e34418a57ce566efc0c3e8b38a0efa5db
Certificate serial: 01A15D5091A96EFA070AAE2F3FE88D2C31F1
Authority key identifier: 59:06:32:5E:34:41:8A:57:CE:56:6E:FC:0C:3E:8B:38:A0:EF:A5:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WQYyXjRBilfOVm78DD6LOKDvpds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/a46349-1bc0-4a0b-b67f-b217a68ceaf4/1/k22uloocdesKVdwUSeLYjJVaVTQ.roa
Signing time: Wed 21 Oct 2026 07:15:23 +0000
ROA not before: Wed 21 Oct 2026 07:15:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8075
IP address blocks: 155.55.192.0/22 maxlen: 22
155.55.200.0/22 maxlen: 22
2001:678:2a4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/a46349-1bc0-4a0b-b67f-b217a68ceaf4/1/WQYyXjRBilfOVm78DD6LOKDvpds.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/a46349-1bc0-4a0b-b67f-b217a68ceaf4/1/WQYyXjRBilfOVm78DD6LOKDvpds.mft
rsync://rpki.ripe.net/repository/DEFAULT/WQYyXjRBilfOVm78DD6LOKDvpds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5d:50:91:a9:6e:fa:07:0a:ae:2f:3f:e8:8d:2c:31:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5906325e34418a57ce566efc0c3e8b38a0efa5db
Validity
Not Before: Oct 21 07:15:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=936dae968a1c75eb0a55dc1449e2d88c955a5534
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9d:5a:11:d4:36:75:d5:88:03:ec:5b:07:d1:
70:b5:df:6c:b7:74:dd:82:c7:81:6b:1e:aa:34:80:
1b:06:d0:25:9e:b5:84:2b:07:5a:57:e6:0a:2d:95:
fd:e9:fa:72:e5:be:b0:24:bc:76:28:32:27:32:17:
e2:0a:b4:31:b5:9a:ef:19:8f:cc:65:fe:b8:12:a3:
0d:0b:86:4b:02:73:80:90:1c:21:4f:b1:5d:9b:ae:
3b:2e:ca:f2:bd:56:0b:7f:89:fe:80:8d:d3:24:69:
7b:09:d9:a0:30:2f:f5:1f:01:98:46:d6:a5:da:b0:
cd:73:d9:e3:fc:b8:f4:82:41:ff:f7:6d:47:31:f3:
a3:b6:41:05:cd:35:e2:73:d8:e9:f3:e4:0f:2f:d6:
c3:f5:d6:bc:0f:3b:3f:00:91:b6:08:61:40:85:44:
a4:8f:0d:c1:f9:59:ec:a4:bf:a9:22:6d:99:70:e5:
b1:82:75:e6:d9:6e:4e:b1:6c:3a:8e:ec:c9:87:35:
39:39:9b:7a:7b:7a:23:46:6e:3a:f7:b6:49:fc:d9:
2d:fd:dd:92:40:b9:fe:a1:b0:91:0c:c4:02:37:ed:
42:6f:c7:e6:1f:58:70:55:bb:43:1b:55:a6:8c:3f:
12:a8:27:e3:8d:ab:d0:f9:c7:3b:24:14:d6:a7:97:
f8:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:6D:AE:96:8A:1C:75:EB:0A:55:DC:14:49:E2:D8:8C:95:5A:55:34
X509v3 Authority Key Identifier:
keyid:59:06:32:5E:34:41:8A:57:CE:56:6E:FC:0C:3E:8B:38:A0:EF:A5:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WQYyXjRBilfOVm78DD6LOKDvpds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/a46349-1bc0-4a0b-b67f-b217a68ceaf4/1/k22uloocdesKVdwUSeLYjJVaVTQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/a46349-1bc0-4a0b-b67f-b217a68ceaf4/1/WQYyXjRBilfOVm78DD6LOKDvpds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.55.192.0/22
155.55.200.0/22
IPv6:
2001:678:2a4::/48
Signature Algorithm: sha256WithRSAEncryption
87:0c:ba:3d:40:71:87:2a:4b:19:c6:9f:37:f6:d6:3c:2f:5e:
11:f8:6e:a7:75:44:ed:d1:87:0d:03:51:73:a7:ab:94:09:76:
75:38:bc:e5:e3:8f:b9:60:e0:f5:dc:6e:1d:43:42:24:29:88:
ea:7b:8e:f5:fd:aa:c2:fa:7b:83:af:7c:fc:33:69:d3:41:69:
9d:1f:17:4a:da:aa:a9:42:9b:2a:5d:9a:68:f9:2f:28:5c:db:
95:36:a3:d1:81:8d:14:74:6d:cd:56:a4:8d:43:7c:6c:e0:7f:
28:56:64:0f:9c:73:ed:7d:d6:8b:7e:1c:94:43:db:98:b4:6a:
88:86:91:5f:3b:85:11:26:1f:2c:cc:a7:e9:a0:8b:83:0e:03:
d2:41:ab:57:74:03:65:cb:6c:fe:82:8e:3f:6a:1e:c7:b1:02:
b2:cb:82:59:86:24:d4:c7:d4:df:83:f7:12:12:09:9a:e0:a1:
c5:ea:1d:2d:df:72:9d:2f:46:47:58:a9:38:a0:f9:bf:5b:96:
f1:27:c6:e9:04:4a:fe:e7:af:22:d4:64:28:1e:0d:d1:ef:62:
46:10:e5:5f:f3:e8:a6:6c:9c:67:72:80:1f:f2:27:5b:90:1d:
31:4b:c1:18:bc:c6:2d:78:60:17:07:6b:1f:e1:df:b4:1c:74:
05:a0:4a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 19:51:31 2026 by rpki-client