Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/55lTuhAI20BHIf-zeSdkeAFaMAg.roa
File: 55lTuhAI20BHIf-zeSdkeAFaMAg.roa (raw, json)
Hash identifier: 6WOjfM5Zbb9/cs9Lu29lst5KqtNeJQ6bLtoEOKJiPTQ=
Subject key identifier: E7:99:53:BA:10:08:DB:40:47:21:FF:B3:79:27:64:78:01:5A:30:08
Certificate issuer: /CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Certificate serial: 019FD2F7AA680EE2AF65F7BF614C14C73E73
Authority key identifier: 6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/55lTuhAI20BHIf-zeSdkeAFaMAg.roa
Signing time: Wed 05 Aug 2026 17:27:54 +0000
ROA not before: Wed 05 Aug 2026 17:27:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200019
IP address blocks: 5.181.0.0/24 maxlen: 24
5.252.20.0/24 maxlen: 24
45.150.110.0/24 maxlen: 24
91.199.133.0/24 maxlen: 24
91.229.239.0/24 maxlen: 24
146.19.213.0/24 maxlen: 24
159.253.120.0/24 maxlen: 24
194.110.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 11:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d2:f7:aa:68:0e:e2:af:65:f7:bf:61:4c:14:c7:3e:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Validity
Not Before: Aug 5 17:27:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e79953ba1008db404721ffb379276478015a3008
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e7:ee:ca:9f:28:8b:fd:f8:15:46:20:4c:e7:
06:73:18:aa:33:85:c4:29:1b:e5:40:c5:3d:41:22:
14:4f:ed:03:0f:d0:65:f8:b1:4b:d7:0e:f2:90:f6:
5f:0f:fd:09:87:c0:9f:7b:ea:ea:3d:ad:e1:91:f8:
f4:99:41:59:ac:1d:36:fc:ac:92:e9:99:34:6a:bf:
eb:d1:c6:2d:74:41:dc:cb:f4:f3:a0:d8:04:6d:c8:
ca:2c:aa:1c:0a:be:ec:7e:20:21:5c:6d:1c:ea:9a:
5c:0e:59:70:00:8c:c5:11:53:1c:fa:98:38:da:e3:
b9:88:c1:f9:86:dc:33:13:1e:34:f3:e6:95:aa:80:
c1:45:0d:81:f8:e3:41:41:50:c6:2b:56:4d:99:40:
3e:aa:af:21:ac:80:42:f8:a2:b7:f9:d3:a9:78:9f:
4b:fd:0f:0b:98:4b:af:77:b8:2e:e8:89:4e:7a:b7:
56:04:ef:f2:10:68:07:7e:1b:0d:f2:bc:ca:8f:b0:
a1:d0:ee:7b:36:a1:eb:aa:c0:2e:4e:8a:f7:b3:21:
3d:73:82:e1:94:9d:14:1b:59:c8:ed:79:9a:06:01:
d4:f0:22:56:fd:d5:9c:63:9c:6f:63:2d:33:96:da:
ab:a9:e5:79:b5:e0:1b:34:0f:4f:ef:e0:8e:63:5c:
96:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:99:53:BA:10:08:DB:40:47:21:FF:B3:79:27:64:78:01:5A:30:08
X509v3 Authority Key Identifier:
keyid:6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/55lTuhAI20BHIf-zeSdkeAFaMAg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.0.0/24
5.252.20.0/24
45.150.110.0/24
91.199.133.0/24
91.229.239.0/24
146.19.213.0/24
159.253.120.0/24
194.110.247.0/24
Signature Algorithm: sha256WithRSAEncryption
63:80:a3:71:d6:31:22:eb:2c:c6:69:44:d1:0e:c3:c7:50:72:
69:95:d4:47:ff:43:e3:90:d4:f0:e8:31:0b:99:40:6c:28:33:
be:2a:a3:5d:80:33:78:8a:86:82:e3:6b:39:5e:ed:c7:d3:0c:
77:9f:9a:3b:b7:b3:05:12:f3:d8:ca:85:2d:bd:23:15:87:74:
bb:8b:6e:13:52:b5:46:13:ca:ed:70:8e:f9:c2:63:fb:20:5e:
1b:7b:a0:21:f7:b9:8e:42:2d:21:b4:fe:2b:96:99:c6:83:df:
b8:98:2f:93:3b:14:c4:e8:8e:90:c9:d6:48:85:c9:9c:4c:c8:
88:a3:d2:ea:eb:62:1c:93:8b:d7:72:71:d0:a9:b5:72:c6:3d:
7e:b2:5f:48:4e:8d:6d:e0:cc:a8:2f:21:3d:f3:42:73:1b:fe:
23:6c:e7:c0:1e:5c:b7:28:ba:c0:56:35:40:6c:b7:1d:5d:e6:
56:10:32:be:e7:12:32:ff:89:1e:07:ee:7c:82:fe:2e:69:e1:
20:7f:15:a8:68:09:7c:9a:0c:ce:2b:e0:d2:b5:67:56:18:f6:
fb:e9:e1:de:df:80:86:1b:fd:58:44:ec:78:0b:0b:f8:69:8e:
35:f5:26:5a:51:03:62:0a:e4:8b:e8:71:97:f4:c7:e3:89:61:
ed:10:d5:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:16:57 2026 by rpki-client