Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/Odbdm6cKt4WDOHN_XBHawpwl1Es.roa
File: Odbdm6cKt4WDOHN_XBHawpwl1Es.roa (raw, json)
Hash identifier: Bkz9cTBI4HMn2Xl/2SrHu4Q2QKOVxBc3yaUrG0BVNnU=
Subject key identifier: 39:D6:DD:9B:A7:0A:B7:85:83:38:73:7F:5C:11:DA:C2:9C:25:D4:4B
Certificate issuer: /CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Certificate serial: 019D5E235119713B20097905D1A9C6FBCFF1
Authority key identifier: 55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/Odbdm6cKt4WDOHN_XBHawpwl1Es.roa
Signing time: Sun 05 Apr 2026 14:54:26 +0000
ROA not before: Sun 05 Apr 2026 14:54:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 83.147.248.0/22 maxlen: 22
91.186.200.0/23 maxlen: 24
91.186.202.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Apr 2026 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:5e:23:51:19:71:3b:20:09:79:05:d1:a9:c6:fb:cf:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Validity
Not Before: Apr 5 14:54:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=39d6dd9ba70ab7858338737f5c11dac29c25d44b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:9c:e2:c0:23:bd:60:47:5d:b0:24:ff:e0:56:
4e:15:af:20:c4:9d:82:4c:b9:6e:c5:b3:ad:a6:7c:
56:e5:a7:26:26:ab:35:36:00:ef:39:74:f8:1b:9f:
4b:3c:94:b8:4a:45:4f:30:f1:a9:ac:28:48:de:d6:
7a:af:1f:23:20:d4:8d:a8:35:0f:25:c7:d0:b3:3d:
47:e0:03:86:1c:27:51:c7:b9:e7:76:e4:c4:de:19:
57:d4:d0:c9:07:27:fc:00:83:9a:aa:82:aa:2f:b9:
f1:f2:01:c4:92:05:3d:9f:13:6c:b2:97:be:f5:2a:
77:52:b1:66:64:af:82:ca:a6:ab:e0:88:0a:a1:78:
e7:ea:7f:76:b8:e8:b3:26:f5:d5:a0:4e:d5:c1:ce:
47:5c:6b:25:dd:1d:01:79:ce:e2:c4:62:c2:8c:26:
1b:9d:8f:86:39:a4:60:30:ee:68:b6:41:53:15:bb:
55:70:c7:71:8f:25:36:4a:07:6a:20:e6:a0:90:a8:
4f:72:5a:58:7c:3c:da:7e:bb:49:78:30:c7:0d:74:
a7:1a:65:4e:7d:ae:89:40:74:de:cd:cf:01:5c:b9:
42:61:20:31:93:9c:1d:e4:7e:93:58:a0:23:d7:7a:
75:e6:95:08:0f:78:0c:07:5f:7e:06:32:60:20:41:
00:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:D6:DD:9B:A7:0A:B7:85:83:38:73:7F:5C:11:DA:C2:9C:25:D4:4B
X509v3 Authority Key Identifier:
keyid:55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/Odbdm6cKt4WDOHN_XBHawpwl1Es.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.248.0/22
91.186.200.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:fb:6d:75:43:d5:c7:d2:67:fd:3c:a9:3f:92:23:81:6f:a4:
25:f9:ce:bf:92:b2:5f:60:0a:7e:df:1e:87:61:c1:c2:86:0c:
5c:49:fb:4d:7a:b0:51:18:73:51:3e:c0:88:4d:86:9a:9a:80:
06:9f:6c:17:ec:c1:5b:b1:32:88:91:6f:47:99:29:73:e7:bf:
8f:97:d1:65:46:d5:26:15:24:fb:66:ca:4e:f5:a2:25:5b:af:
bf:9a:0c:3d:01:56:be:c8:b6:db:98:a0:1b:fd:49:d7:20:f0:
4e:34:a4:da:37:d1:1d:bb:3c:73:73:2c:b8:7d:bc:03:04:17:
7f:16:a1:18:4e:ae:39:8f:ba:fa:6d:cc:78:c8:ad:3b:d5:36:
1c:07:7f:24:7b:ae:85:74:d0:73:6b:8f:f9:72:cb:02:d5:f0:
4f:60:07:6c:4a:20:67:c0:7a:e2:cf:96:86:8c:b4:86:b9:a2:
e6:81:d1:36:99:65:d5:08:3b:81:4f:40:dc:28:ff:08:80:01:
a0:67:58:6b:ba:d0:ca:d1:b7:70:7b:7f:91:49:f4:b8:83:67:
cc:ad:e1:65:1f:51:48:5a:6d:06:92:8b:1f:4c:b8:1b:e2:0c:
62:d8:57:3d:38:45:d5:be:0c:7f:e5:74:2c:97:f4:87:23:c4:
e0:6a:96:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 10:30:57 2026 by rpki-client