Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/2TmY0g8gB64H2cUDmudKTyEWTTw.roa
File: 2TmY0g8gB64H2cUDmudKTyEWTTw.roa (raw, json)
Hash identifier: P/lHrEQ16jkioRGuSCVLZ+vhNAFJOV2t3x1c9/ndq+A=
Subject key identifier: D9:39:98:D2:0F:20:07:AE:07:D9:C5:03:9A:E7:4A:4F:21:16:4D:3C
Certificate issuer: /CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Certificate serial: 01A0FB7CBBC1AAD974FEE2F6BE2770877DD5
Authority key identifier: 55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/2TmY0g8gB64H2cUDmudKTyEWTTw.roa
Signing time: Fri 02 Oct 2026 07:20:50 +0000
ROA not before: Fri 02 Oct 2026 07:20:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 83.147.248.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fb:7c:bb:c1:aa:d9:74:fe:e2:f6:be:27:70:87:7d:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Validity
Not Before: Oct 2 07:20:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d93998d20f2007ae07d9c5039ae74a4f21164d3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:29:86:6a:13:a3:74:b0:49:4e:e6:5a:30:d9:
53:ea:de:56:00:62:06:4d:16:25:2f:fe:f4:39:4a:
f4:fd:c2:e1:b3:0f:22:bd:76:ad:7c:d9:fe:09:d1:
2e:ff:43:41:b6:fc:93:39:6f:80:ce:a1:15:cc:cd:
99:77:7e:a4:6c:13:c0:ac:67:33:b6:70:70:bd:56:
b9:a2:60:87:67:80:84:68:11:c9:a1:91:82:84:49:
70:04:86:0f:44:e2:2b:d9:41:7e:84:a8:0f:38:d5:
2c:75:d1:33:5c:99:e3:d2:ad:1c:ae:31:d5:77:5e:
3f:a4:1e:62:00:c0:1e:72:83:c4:d1:42:f0:5a:36:
09:54:d2:c1:36:9f:9a:19:c1:5a:da:7f:d3:e5:91:
f3:33:91:6f:fd:bb:e6:1b:ec:89:4f:85:62:8d:6a:
78:e6:a6:89:19:21:d5:56:8c:33:81:7d:98:01:2a:
41:6c:af:80:9e:d7:53:65:a3:fc:22:f5:1b:d9:71:
4c:7d:83:75:47:3e:d7:25:52:dd:c4:fa:bd:fa:a7:
de:35:3b:47:ee:58:79:fa:b7:a4:32:aa:23:7b:74:
28:d7:b2:e5:e7:65:76:b8:3b:3e:43:84:1b:20:30:
c6:60:ed:7b:16:a1:d1:e1:a5:20:14:87:8c:93:0d:
7f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:39:98:D2:0F:20:07:AE:07:D9:C5:03:9A:E7:4A:4F:21:16:4D:3C
X509v3 Authority Key Identifier:
keyid:55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/2TmY0g8gB64H2cUDmudKTyEWTTw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.248.0/22
Signature Algorithm: sha256WithRSAEncryption
cb:73:b8:de:e8:e1:91:18:c4:5e:c6:e0:d4:22:64:73:58:2f:
53:65:17:70:d2:0b:fa:6f:b5:d5:11:f9:40:6f:be:42:9b:7c:
e3:b5:94:bd:dd:99:3a:96:ae:03:f0:27:f7:bf:67:de:1d:d0:
ec:d4:f7:47:f9:07:ae:72:81:cc:65:8b:1c:28:48:15:3c:f6:
ea:1f:5d:77:69:a3:55:a2:ac:d5:2c:8f:c2:e2:2f:8b:10:9b:
cd:67:40:06:49:71:bb:22:29:88:b2:73:ae:2c:b4:bd:29:69:
db:de:5a:d2:ce:8e:d3:2e:2c:f8:34:db:2e:57:4a:09:a2:78:
4d:3e:aa:44:24:f5:88:31:a7:d6:64:cb:4e:52:2f:d1:f2:1f:
63:60:ba:ae:b2:e3:26:83:96:aa:7c:85:dd:2d:b1:8c:d0:5f:
ad:2d:db:12:8b:4e:5a:2f:e7:3d:be:ea:da:15:c4:06:71:e2:
3a:d7:34:00:80:d5:1d:66:52:c0:ce:2f:8a:42:b0:a6:5a:34:
bb:6d:d4:0f:a6:b6:77:1b:7b:5b:06:4e:fd:91:43:ce:82:94:
84:b4:3e:74:43:24:19:22:29:35:fd:3d:c1:eb:f5:c4:d3:32:
3d:24:17:46:e1:a6:d1:e5:f7:b2:76:a1:d1:9c:0c:6c:7d:86:
d3:cb:c0:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 02:12:47 2026 by rpki-client