Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/5dUccTjOeXcH3PFxvpgXM81-0uk.roa
File: 5dUccTjOeXcH3PFxvpgXM81-0uk.roa (raw, json)
Hash identifier: 7RrrJVqzPlIAsA/Vb+L/2hzt7ubyCiLJfQ+Wwlb716w=
Subject key identifier: E5:D5:1C:71:38:CE:79:77:07:DC:F1:71:BE:98:17:33:CD:7E:D2:E9
Certificate issuer: /CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Certificate serial: 019C2F364AF95339FB5CC5264F727A29BB66
Authority key identifier: 55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/5dUccTjOeXcH3PFxvpgXM81-0uk.roa
Signing time: Thu 05 Feb 2026 19:10:13 +0000
ROA not before: Thu 05 Feb 2026 19:10:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 83.147.248.0/22 maxlen: 22
91.186.200.0/23 maxlen: 24
91.186.202.0/23 maxlen: 24
91.186.220.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Feb 2026 22:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:2f:36:4a:f9:53:39:fb:5c:c5:26:4f:72:7a:29:bb:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Validity
Not Before: Feb 5 19:10:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e5d51c7138ce797707dcf171be981733cd7ed2e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:32:52:a3:3b:0c:c0:35:92:49:a3:6a:09:28:
54:a0:2c:9a:aa:9e:60:aa:68:53:66:9e:5a:4d:c9:
c5:a5:63:3e:6b:4e:87:3c:7c:7e:55:cf:3f:39:b1:
13:a9:56:cd:f2:7c:1b:19:7e:1a:f6:c0:b2:f3:29:
cb:21:9b:f2:45:09:cd:96:17:bf:5c:9d:27:fe:64:
53:5e:63:72:42:4b:06:25:2f:bd:21:81:e7:e0:ac:
c6:b5:b4:be:29:78:67:3f:75:c4:38:7e:6c:62:89:
dd:b8:93:72:bc:e2:46:23:48:ad:a4:ec:5c:1c:bb:
04:f5:e2:cf:ee:b3:3c:b6:fc:f6:60:c9:c1:a4:52:
a6:cd:1e:60:19:56:43:11:69:28:00:75:d7:18:f5:
11:1c:28:0f:c8:8f:cc:73:50:d9:6e:e5:cf:d9:ab:
0b:ec:3b:66:d3:cf:f7:f6:ac:2d:35:8c:b9:36:63:
2b:92:8c:2b:2f:dd:ea:18:df:17:92:4f:99:55:88:
d3:17:8b:6c:cc:de:a4:0c:27:36:1a:1c:31:2c:84:
d9:f8:cb:e7:eb:fe:db:7f:39:0c:2b:d3:b2:6b:f4:
6c:71:51:e1:5b:d6:2c:ef:7e:ad:4c:d1:41:61:0e:
f5:fb:d9:d0:bd:d8:9c:5d:69:72:57:72:2f:38:ff:
de:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:D5:1C:71:38:CE:79:77:07:DC:F1:71:BE:98:17:33:CD:7E:D2:E9
X509v3 Authority Key Identifier:
keyid:55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/5dUccTjOeXcH3PFxvpgXM81-0uk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.248.0/22
91.186.200.0/22
91.186.220.0/22
Signature Algorithm: sha256WithRSAEncryption
ae:af:6c:f2:3e:85:b9:f3:dd:be:f2:3e:ed:6d:64:8f:2c:a4:
fc:36:42:b5:85:12:eb:dc:83:d8:63:17:57:27:35:c4:47:06:
fe:df:15:3e:26:86:61:79:71:c7:e5:0e:aa:44:83:b4:41:34:
41:4d:b8:2e:34:0b:0d:2f:ab:d3:9b:58:4f:2f:03:f7:a5:37:
89:15:b0:32:1c:76:da:f7:87:46:71:5d:49:8b:31:b9:c8:9d:
59:f8:3c:b1:e7:98:62:c0:b9:e7:bb:65:1e:c6:51:71:4a:a8:
ef:cc:a7:3c:30:53:e3:b6:b4:da:84:a3:d4:ee:61:20:f8:64:
84:b0:a9:f9:9a:9d:fe:5e:66:fc:0f:5c:5d:92:f7:be:f1:27:
53:04:de:01:d4:8a:de:c2:a8:1e:69:58:40:5a:1b:ac:74:b0:
37:97:27:6b:05:98:20:a0:2d:16:9a:2f:de:e3:e1:d5:ce:bc:
13:4a:c7:c8:ab:be:a7:32:37:22:ab:a0:e2:17:34:c3:a3:0b:
d5:04:5d:cc:ad:e8:59:7a:56:d6:9d:69:11:04:c6:ac:ad:59:
02:56:6c:df:8d:b8:7b:5c:93:53:2f:9b:39:a1:ac:34:76:77:
1b:06:db:c2:12:6a:37:24:4a:29:fe:a2:1a:db:12:fb:60:c5:
87:8f:f9:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 04:50:51 2026 by rpki-client