Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/G1wDUclE1xzoNnces2zgDLWjNyM.roa
File: G1wDUclE1xzoNnces2zgDLWjNyM.roa (raw, json)
Hash identifier: ofsczddP456429Zr2Sdx9Nt9p1JzwL3tscxJQXqCemQ=
Subject key identifier: 1B:5C:03:51:C9:44:D7:1C:E8:36:77:1E:B3:6C:E0:0C:B5:A3:37:23
Certificate issuer: /CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Certificate serial: 01A169AD669EA6180BAB49BD0C6EA19B6C23
Authority key identifier: 55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/G1wDUclE1xzoNnces2zgDLWjNyM.roa
Signing time: Fri 23 Oct 2026 16:52:14 +0000
ROA not before: Fri 23 Oct 2026 16:52:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 91.186.210.0/23 maxlen: 24
94.241.162.0/23 maxlen: 24
94.241.164.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 15:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:69:ad:66:9e:a6:18:0b:ab:49:bd:0c:6e:a1:9b:6c:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Validity
Not Before: Oct 23 16:52:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1b5c0351c944d71ce836771eb36ce00cb5a33723
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:46:3a:e0:94:da:dc:51:28:1e:95:ae:ad:87:
fb:98:5c:51:9d:5b:99:8d:ba:50:95:d8:6b:78:5a:
a0:29:39:4c:d8:f7:0b:34:84:e4:f7:46:8a:a8:b8:
08:0b:a3:25:9e:31:72:84:75:e6:67:31:28:21:4b:
b9:ab:74:48:42:4e:c3:72:f6:9e:1a:20:71:60:88:
61:c5:d6:b3:ea:eb:2c:53:34:0e:e6:09:cf:30:06:
d9:f4:b3:ea:c5:8c:9b:d9:ae:4e:c4:2c:ad:5e:9a:
8b:77:28:1e:9a:e4:53:a8:3b:ca:8e:7e:9e:66:47:
2c:72:9a:de:21:af:c7:70:c2:8a:b8:dc:c0:ba:60:
73:34:37:e3:04:f7:a9:af:af:d4:39:f1:21:59:3d:
c3:90:a8:3a:9c:22:e8:93:57:f7:d5:65:1e:38:8d:
96:45:ad:39:66:16:6a:d3:42:d1:1a:f3:e8:a5:2d:
09:68:09:f0:28:e6:33:71:08:c1:c5:2e:14:d8:24:
09:b9:29:1e:ec:36:1c:07:e1:9c:3d:1e:57:b5:fb:
2e:e9:2f:d2:7f:e0:99:00:de:81:95:b9:ce:e0:53:
73:f4:7c:80:1b:b3:23:a6:12:2f:dc:40:46:3f:08:
a3:cd:d7:cf:a2:58:83:39:ca:e2:2c:4c:ab:f7:53:
de:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:5C:03:51:C9:44:D7:1C:E8:36:77:1E:B3:6C:E0:0C:B5:A3:37:23
X509v3 Authority Key Identifier:
keyid:55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/G1wDUclE1xzoNnces2zgDLWjNyM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.186.210.0/23
94.241.162.0-94.241.165.255
Signature Algorithm: sha256WithRSAEncryption
7e:78:91:a5:c1:90:80:14:d4:58:72:74:51:1b:4f:a3:ec:07:
d4:14:6f:d8:64:77:e8:fd:97:da:b4:38:b3:45:9a:89:f8:ce:
a5:e9:9b:1f:3f:10:dd:3e:07:54:c3:f9:65:5b:b5:c6:f5:57:
28:ff:cd:23:3c:5e:14:48:ef:95:e6:7c:76:aa:54:cf:d6:53:
02:d0:25:6e:2f:49:2f:48:86:5a:c5:3d:0a:a2:70:9f:a9:1f:
6a:22:b4:5b:ac:cf:69:0c:c4:cb:bf:7c:8d:63:27:7c:c3:b0:
df:cd:36:3e:b1:3f:49:03:d8:bf:83:42:86:ab:8f:9a:8d:ed:
9a:66:4d:aa:f5:e0:23:09:1b:d1:67:b3:6e:33:03:ba:7a:01:
85:1a:97:9e:c5:f8:00:81:e2:5a:f2:a1:eb:bc:f4:a1:fd:12:
92:41:7e:8b:3d:f7:eb:a4:44:da:b7:16:d7:96:6d:ee:db:29:
6c:6e:8d:26:e6:d2:b1:01:c4:8c:d9:1f:6c:24:fa:6b:22:9d:
ef:ef:de:3c:91:3a:67:f4:d3:6b:a1:dc:ec:48:d4:af:de:19:
06:1b:46:1e:8f:a6:58:86:a8:9c:48:9b:8b:07:2e:1e:8a:4c:
0b:40:b2:dd:2c:a8:08:2a:1e:2f:c6:8c:f3:70:f3:76:8c:2c:
9c:f8:fa:86
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAaFprWaephgLq0m9DG6hm2wjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1YmFmMjY5Njc1MTBiM2M1MmU0NmQxZGM1OTM5NjdjZGYy
OWY5YzkwHhcNMjYxMDIzMTY1MjE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYjVjMDM1MWM5NDRkNzFjZTgzNjc3MWViMzZjZTAwY2I1YTMzNzIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+EY64JTa3FEoHpWurYf7mFxRnVuZ
jbpQldhreFqgKTlM2PcLNITk90aKqLgIC6MlnjFyhHXmZzEoIUu5q3RIQk7Dcvae
GiBxYIhhxdaz6ussUzQO5gnPMAbZ9LPqxYyb2a5OxCytXpqLdygemuRTqDvKjn6e
ZkcscpreIa/HcMKKuNzAumBzNDfjBPepr6/UOfEhWT3DkKg6nCLok1f31WUeOI2W
Ra05ZhZq00LRGvPopS0JaAnwKOYzcQjBxS4U2CQJuSke7DYcB+GcPR5Xtfsu6S/S
f+CZAN6BlbnO4FNz9HyAG7MjphIv3EBGPwijzdfPoliDOcriLEyr91PekQIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFBtcA1HJRNcc6DZ3HrNs4Ay1ozcjMB8GA1UdIwQY
MBaAFFW68mlnUQs8UuRtHcWTlnzfKfnJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmJyeWFXZFJDenhTNUcwZHhaT1dmTjhwLWNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS81YWE0ZGMtZDE4NC00ZGI0LTllMTAt
NDlmOTgxZWU1OTgxLzEvRzF3RFVjbEUxeHpvTm5jZXMyemdETFdqTnlNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS81YWE0ZGMtZDE4NC00ZGI0LTllMTAtNDlmOTgxZWU1OTgx
LzEvVmJyeWFXZFJDenhTNUcwZHhaT1dmTjhwLWNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQBW7rSMAwD
BAFe8aIDBAFe8aQwDQYJKoZIhvcNAQELBQADggEBAH54kaXBkIAU1FhydFEbT6Ps
B9QUb9hkd+j9l9q0OLNFmon4zqXpmx8/EN0+B1TD+WVbtcb1Vyj/zSM8XhRI75Xm
fHaqVM/WUwLQJW4vSS9IhlrFPQqicJ+pH2oitFusz2kMxMu/fI1jJ3zDsN/NNj6x
P0kD2L+DQoarj5qN7ZpmTar14CMJG9Fns24zA7p6AYUal57F+ACB4lryoeu89KH9
EpJBfos99+ukRNq3FteWbe7bKWxujSbm0rEBxIzZH2wk+msine/v3jyROmf002uh
3OxI1K/eGQYbRh6PpliGqJxIm4sHLh6KTAtAst0sqAgqHi/GjPNw83aMLJz4+oY=
-----END CERTIFICATE-----
Generated at Mon Oct 26 00:32:49 2026 by rpki-client