Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/8syWpbRZFmsvwdyqtWxsX0pKmeY.roa
File: 8syWpbRZFmsvwdyqtWxsX0pKmeY.roa (raw, json)
Hash identifier: Kum9fHu7WniF5m9wYLUYIqpdhJGb4LoqC5LKXjXu8bI=
Subject key identifier: F2:CC:96:A5:B4:59:16:6B:2F:C1:DC:AA:B5:6C:6C:5F:4A:4A:99:E6
Certificate issuer: /CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Certificate serial: 01A03E7718EBD4E5878D55E705C50F6861E1
Authority key identifier: 55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/8syWpbRZFmsvwdyqtWxsX0pKmeY.roa
Signing time: Wed 26 Aug 2026 14:26:27 +0000
ROA not before: Wed 26 Aug 2026 14:26:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 37963
IP address blocks: 94.241.160.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3e:77:18:eb:d4:e5:87:8d:55:e7:05:c5:0f:68:61:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Validity
Not Before: Aug 26 14:26:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f2cc96a5b459166b2fc1dcaab56c6c5f4a4a99e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0a:6b:72:c6:fe:3e:1e:6d:ba:78:67:3e:ef:
89:6c:3d:b5:7d:4a:c4:a9:ea:4a:5c:42:92:2c:54:
0b:d0:e8:e8:91:f6:64:06:d2:9f:c6:61:b3:7d:ea:
50:43:9d:d0:ce:f6:80:7a:e9:28:38:f7:34:2c:60:
35:d1:d0:22:54:32:94:8f:a2:ed:f0:90:7b:18:82:
6e:76:68:6b:af:2f:b0:d3:c6:8f:17:c7:af:49:40:
2e:6a:f6:59:ca:7f:59:dc:5a:37:f1:bf:f6:da:88:
06:f6:3f:ec:ea:66:fc:6a:ce:1b:a6:8b:76:97:f5:
40:c8:b8:25:be:02:42:5d:f1:eb:33:af:eb:1f:65:
d9:99:f9:3d:a3:d3:61:e8:b2:0c:3a:5b:64:8a:cd:
a2:42:66:00:c3:5d:2e:ad:45:3e:3d:4c:dc:7d:a6:
b2:ab:9a:dd:ac:85:5c:88:13:87:53:bb:7e:0a:54:
17:14:a8:91:d4:70:34:32:aa:40:1b:15:ef:c2:f4:
42:4d:67:c5:8c:1f:f0:06:01:91:0a:56:ca:ee:4e:
76:08:04:70:8c:29:61:78:fc:01:3c:69:a5:5f:c5:
45:ce:aa:05:8f:dd:3a:8f:d5:38:9a:37:0e:6b:79:
a2:44:b6:bb:7e:be:68:f6:a4:f8:3b:82:c2:ba:82:
09:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:CC:96:A5:B4:59:16:6B:2F:C1:DC:AA:B5:6C:6C:5F:4A:4A:99:E6
X509v3 Authority Key Identifier:
keyid:55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/8syWpbRZFmsvwdyqtWxsX0pKmeY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.241.160.0/23
Signature Algorithm: sha256WithRSAEncryption
29:3d:74:64:4e:27:58:74:f7:41:e5:d7:76:bc:a8:ec:43:27:
78:44:ec:8d:1b:a5:23:c3:77:61:35:93:2c:4d:0a:71:45:92:
6f:27:77:42:9f:61:c4:b4:69:d1:49:b5:cc:2c:f3:74:75:18:
cb:9f:a3:9f:06:e2:9a:27:33:6a:a3:ee:10:18:22:7b:4a:96:
93:1a:07:02:3d:f3:0c:a6:04:23:16:b2:f9:2a:fd:66:21:80:
10:d1:0e:81:ed:60:ac:eb:c8:81:56:82:a8:77:31:d5:3c:99:
a3:7a:5c:40:29:2b:15:33:b7:d3:3e:26:1c:a5:c5:11:38:a6:
38:da:3e:32:4e:d1:7f:a5:13:48:bc:ab:e3:27:72:7c:b6:07:
7c:48:28:c4:07:b9:70:c9:b1:04:24:ae:68:c9:04:e5:eb:58:
76:8f:bc:0e:ce:c7:6c:de:5f:e1:99:6b:79:09:27:ca:f8:0f:
1d:79:ab:52:d6:b5:35:5e:1b:cb:ee:e0:91:61:6e:07:37:62:
5b:92:58:ee:48:9a:a0:29:21:54:11:0f:99:f3:6c:42:3a:89:
1c:d8:da:58:83:f8:7f:ab:0b:20:9c:0d:af:a7:b1:88:d9:07:
b8:1f:2f:26:cd:56:b1:8d:ff:dd:af:0a:c9:15:3d:e2:e9:8f:
eb:dc:57:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:44:14 2026 by rpki-client