Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/7l1lpGV4ptT8nml-DHhj2477v7w.roa
File: 7l1lpGV4ptT8nml-DHhj2477v7w.roa (raw, json)
Hash identifier: WRbHwiD/xFwzAYS55X0p7yc8DSBKcmaVY7wgLqrnwZM=
Subject key identifier: EE:5D:65:A4:65:78:A6:D4:FC:9E:69:7E:0C:78:63:DB:8E:FB:BF:BC
Certificate issuer: /CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Certificate serial: 019F27B77B82EE79B3EB39DEDDEE5E3FA4B7
Authority key identifier: 55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/7l1lpGV4ptT8nml-DHhj2477v7w.roa
Signing time: Fri 03 Jul 2026 11:22:43 +0000
ROA not before: Fri 03 Jul 2026 11:22:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 83.147.248.0/22 maxlen: 22
91.186.200.0/23 maxlen: 24
91.186.202.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:27:b7:7b:82:ee:79:b3:eb:39:de:dd:ee:5e:3f:a4:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Validity
Not Before: Jul 3 11:22:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ee5d65a46578a6d4fc9e697e0c7863db8efbbfbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:eb:55:0b:28:90:d3:7d:87:2c:c5:58:6d:53:
c5:54:9d:03:42:ee:7e:fc:b5:e2:88:cb:f0:94:18:
ca:ce:e1:ae:45:ce:3d:5d:69:6f:df:32:11:c5:57:
35:1a:34:cc:e7:e9:16:a1:c5:3d:33:7f:53:c4:47:
13:5a:bc:7d:5f:63:e0:79:ea:97:88:de:95:6e:21:
52:89:f1:d2:ff:5a:be:6e:fc:0f:3b:03:e6:a5:67:
21:97:92:f1:48:ed:ca:ad:14:b6:b3:d2:03:64:48:
38:3c:f3:45:99:ff:a0:96:31:4b:9f:63:e2:c4:bd:
97:fc:3c:95:a3:e5:f3:62:de:da:9f:29:ea:07:95:
47:8b:c2:74:00:04:d4:3b:b3:db:50:9a:3a:c2:b2:
58:64:2a:c9:66:ee:d3:2f:59:6c:5a:7e:e3:15:fd:
3e:57:da:f7:fe:59:28:89:a5:84:e3:cb:6f:70:2a:
fd:ce:c4:5a:b8:84:da:92:2d:65:21:1d:a9:a8:e6:
bc:80:81:25:4e:5d:d7:2e:f5:cb:20:49:60:86:d5:
6a:52:8b:f1:3d:55:9a:16:18:10:91:73:ae:e0:09:
90:ab:c1:bc:15:98:7f:b6:61:1d:3a:da:7d:42:b5:
e7:e8:8f:bb:18:e1:8c:56:5e:27:83:1c:cd:1a:69:
ad:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:5D:65:A4:65:78:A6:D4:FC:9E:69:7E:0C:78:63:DB:8E:FB:BF:BC
X509v3 Authority Key Identifier:
keyid:55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/7l1lpGV4ptT8nml-DHhj2477v7w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.248.0/22
91.186.200.0/22
Signature Algorithm: sha256WithRSAEncryption
06:64:44:f8:62:69:42:6d:93:0d:95:c4:69:b4:23:df:15:c9:
f7:1f:b8:46:a4:d6:ff:0d:95:e6:d0:e8:b0:c4:c2:c3:2e:ef:
1a:29:69:db:7d:f0:e8:9a:5d:5b:5a:c5:4a:90:81:0f:d8:82:
12:b0:33:8c:f0:d6:a4:f8:95:89:4a:e3:c7:f1:b9:2f:a9:94:
61:b1:46:66:c3:0a:8f:52:8a:15:86:9d:08:db:40:60:0c:32:
7d:5c:71:6f:27:45:ac:0b:ba:89:1b:b2:7c:35:c4:bf:34:f2:
52:9c:33:04:86:b9:2f:99:02:e9:e9:53:8b:4f:e0:7f:89:3d:
a2:ea:96:a2:17:f0:09:a0:bc:89:db:d2:b1:d4:2d:0a:41:7f:
62:be:4e:c3:a1:bb:bd:2f:1f:d5:16:51:68:7c:83:77:ec:76:
ff:b4:77:3d:be:ca:6a:50:09:51:1f:e5:79:41:2c:ca:10:03:
ee:df:e3:c3:58:e9:14:21:11:8f:dd:1f:54:a7:c9:48:ef:b7:
c3:10:b8:fe:85:5e:ef:b3:d7:2f:53:b6:32:55:17:5c:e5:f3:
f2:bd:65:d8:b1:60:d9:f5:1d:d9:ef:07:f1:a0:8f:5a:99:2f:
0b:1e:1b:4a:93:05:30:99:6b:7f:d7:75:e3:16:31:59:3f:cf:
c5:3c:a8:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:01:57 2026 by rpki-client