Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/55PSt35JxdrK0cZJITAKlz5nVfo.roa
File: 55PSt35JxdrK0cZJITAKlz5nVfo.roa (raw, json)
Hash identifier: cmD74cSyztJ9O2BDRJfWcxx0ACJOgkyILpoQDxi7jQA=
Subject key identifier: E7:93:D2:B7:7E:49:C5:DA:CA:D1:C6:49:21:30:0A:97:3E:67:55:FA
Certificate issuer: /CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Certificate serial: 01A1748F8899FE102FCC55BA347402C1F095
Authority key identifier: 55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/55PSt35JxdrK0cZJITAKlz5nVfo.roa
Signing time: Sun 25 Oct 2026 19:35:26 +0000
ROA not before: Sun 25 Oct 2026 19:35:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199685
IP address blocks: 83.147.240.0/22 maxlen: 24
83.147.242.0/23 maxlen: 24
91.186.214.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:74:8f:88:99:fe:10:2f:cc:55:ba:34:74:02:c1:f0:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Validity
Not Before: Oct 25 19:35:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e793d2b77e49c5dacad1c64921300a973e6755fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6c:c6:8b:63:7e:e8:a2:8a:c4:41:9d:30:fd:
44:8f:f5:e4:14:79:07:39:36:91:b2:a7:1f:03:fb:
2e:dd:78:f4:be:1a:d7:e1:38:a3:75:b7:47:74:8c:
b1:63:1a:e2:c8:82:4e:56:c3:ad:1f:e8:f0:37:24:
df:00:40:71:51:cc:cb:85:0a:b0:ce:12:7d:2a:06:
57:07:ed:ab:9d:12:d4:93:08:07:e1:ee:b0:b1:15:
7c:5b:d2:17:6b:e2:d7:e4:44:86:67:9a:5f:fc:bf:
99:8b:fe:ca:96:3b:15:ff:f1:6e:9b:cf:e1:ea:eb:
84:eb:de:da:8b:f5:15:4c:be:32:2e:55:e7:a3:d5:
0d:a9:fd:59:8a:9a:2d:b3:39:63:08:db:b6:f6:99:
5c:d5:c0:5a:6a:e8:40:34:b0:44:81:da:7c:17:b0:
4f:40:d7:63:9d:4b:24:23:2d:fe:07:ee:19:56:91:
d5:c6:a8:09:7a:d4:36:20:46:fe:61:7b:42:1e:d7:
32:38:c6:21:48:51:b7:f1:4d:b1:99:97:09:96:c9:
6b:8b:3c:70:9e:79:53:c3:52:74:53:7d:81:19:28:
1a:00:41:8e:45:eb:58:20:5c:37:62:ca:9a:6a:fa:
27:c7:08:cf:8f:c1:cf:ad:3d:4a:ac:cf:0c:39:03:
a1:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:93:D2:B7:7E:49:C5:DA:CA:D1:C6:49:21:30:0A:97:3E:67:55:FA
X509v3 Authority Key Identifier:
keyid:55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/55PSt35JxdrK0cZJITAKlz5nVfo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.240.0/22
91.186.214.0/23
Signature Algorithm: sha256WithRSAEncryption
72:a8:00:94:97:c2:1b:81:32:1a:a0:6a:0e:2c:6b:f2:61:7a:
25:5f:17:c7:89:85:05:4c:b3:00:7d:aa:76:d3:33:46:83:91:
94:34:be:7b:26:35:89:7f:04:68:e7:df:1c:0a:05:c5:78:4f:
b2:a0:1a:00:9b:1d:17:35:af:79:c6:b3:65:38:fc:8f:33:50:
da:55:55:40:68:55:74:a6:5e:05:14:13:bc:ec:e7:e0:bf:a6:
4e:60:30:a8:fd:7a:3c:3f:72:6a:58:b1:a4:d6:16:55:71:cd:
3e:cc:09:1d:94:bc:3a:57:22:54:30:b4:77:7d:8d:bc:fa:ae:
fd:48:7a:45:a7:bb:f5:f9:ab:90:55:58:31:63:67:1f:f1:94:
37:31:7e:3d:66:09:10:7d:08:3b:0b:ab:6e:a1:9c:5a:64:ff:
ed:63:a8:c9:36:74:02:81:5a:e1:d2:18:85:48:53:ed:40:ce:
dd:82:41:de:45:f8:ad:1d:36:9c:61:94:6d:fb:6f:3a:fd:bf:
3f:4f:93:16:2a:1a:b3:cb:1e:7a:97:23:39:03:76:f9:40:fb:
28:a8:7d:4c:ce:46:d0:2e:2f:85:9f:00:79:0f:8f:a8:0d:7f:
9e:6d:76:b2:9d:6f:40:26:45:15:b4:3c:2d:83:6c:63:e8:44:
f2:8f:8e:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 03:44:39 2026 by rpki-client