Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/41jVer0R2hy_TkUFPZ3Ub2EIi9c.roa
File: 41jVer0R2hy_TkUFPZ3Ub2EIi9c.roa (raw, json)
Hash identifier: Zq0Yp//arwb77iKcDQqYghts6j4Jmt1D28AQqMcGijw=
Subject key identifier: E3:58:D5:7A:BD:11:DA:1C:BF:4E:45:05:3D:9D:D4:6F:61:08:8B:D7
Certificate issuer: /CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Certificate serial: 01A1991A646A86CEE0326906B428E379306B
Authority key identifier: 55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/41jVer0R2hy_TkUFPZ3Ub2EIi9c.roa
Signing time: Sun 01 Nov 2026 21:53:25 +0000
ROA not before: Sun 01 Nov 2026 21:53:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 91.186.210.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:99:1a:64:6a:86:ce:e0:32:69:06:b4:28:e3:79:30:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Validity
Not Before: Nov 1 21:53:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e358d57abd11da1cbf4e45053d9dd46f61088bd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a5:b8:06:95:e9:72:c7:0f:4b:ba:c8:6b:a4:
70:f7:91:c8:a6:e9:dd:07:62:ee:15:c3:f3:a0:bc:
32:e0:55:1a:2c:11:46:7a:6f:f6:52:db:ab:35:a9:
e4:0a:8c:e6:a1:56:db:80:52:ae:e5:27:76:03:60:
6f:2e:3d:42:e6:a6:4e:1f:56:71:ee:eb:ef:30:34:
aa:ec:3b:0a:77:5e:85:d0:89:6e:31:85:15:37:e4:
ab:54:9c:d7:42:db:1d:35:2c:40:50:83:3c:fb:c1:
03:5c:be:8b:91:da:47:22:05:a9:29:fc:0e:80:70:
48:2a:52:06:91:3c:05:b6:f4:85:64:a5:4e:57:6e:
06:9e:5b:55:95:91:38:9c:85:ca:ca:8b:18:8a:6b:
dc:ca:f5:ba:33:59:a9:20:56:31:f4:0e:b4:96:b1:
a5:a3:0e:cc:23:1c:ef:a1:e1:ba:0e:33:c1:83:59:
44:0c:72:0b:e8:83:02:d3:fa:04:ff:dd:d9:fd:80:
da:66:b2:0b:28:c4:ee:f6:70:b9:25:68:ee:53:32:
5f:08:99:12:8c:5e:58:54:28:31:1c:8f:f3:1f:c5:
e5:4e:07:86:04:f0:87:7d:9a:43:fa:dc:ce:ea:45:
4e:06:b6:43:9b:74:ac:b3:f8:fe:0c:29:ae:2d:5b:
75:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:58:D5:7A:BD:11:DA:1C:BF:4E:45:05:3D:9D:D4:6F:61:08:8B:D7
X509v3 Authority Key Identifier:
keyid:55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/41jVer0R2hy_TkUFPZ3Ub2EIi9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.186.210.0/23
Signature Algorithm: sha256WithRSAEncryption
21:93:4d:a3:9e:9d:26:73:3d:08:c5:36:55:e0:a3:cd:c2:1c:
79:4e:3a:70:c9:fb:2f:1d:a9:d8:35:2d:9d:53:cc:01:3a:c4:
a3:26:fc:ee:93:31:a4:31:17:c4:a7:ff:e1:0a:a2:6f:e9:2e:
c0:d0:be:65:93:18:8c:e1:bc:ff:48:a1:52:9a:5c:5f:7b:b8:
b0:a9:0e:eb:d3:d4:23:6a:fa:2f:c9:2e:a4:4a:ef:79:d7:60:
1c:f7:20:d3:72:09:62:ff:17:0b:94:9b:73:9d:8f:5e:d5:5a:
9f:b5:d4:ac:6c:47:a0:cf:19:7b:3e:99:b9:ab:a7:7b:30:bb:
29:df:c8:0f:7d:c1:27:59:92:90:94:0b:c5:c7:d8:d2:64:b8:
9d:6a:c9:7c:ec:ec:60:5d:00:04:03:2e:a3:9a:3c:11:6b:b7:
6a:ff:95:c7:5b:58:91:c4:d1:94:98:86:6c:6f:ad:3b:95:4c:
9d:c0:a4:5a:0f:d9:70:64:e5:12:23:d3:06:4f:24:b1:5a:73:
d3:27:5d:5a:ff:9b:3a:2e:97:0d:c6:60:79:e6:f0:a4:a8:d4:
77:ae:5b:a4:d1:42:a5:6c:38:97:94:af:81:6d:51:44:ad:cd:
06:87:55:ab:a2:97:8d:f1:10:7e:9e:8c:b5:1e:63:ee:fc:f0:
48:37:e5:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 04:25:29 2026 by rpki-client