Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/IEML87ENmURx_enV7vm5j-ovZFg.roa
File: IEML87ENmURx_enV7vm5j-ovZFg.roa (raw, json)
Hash identifier: 2iwpnxMW2xkA63IVjHK3SdkubgBGpgZGA7zRiDUaYwI=
Subject key identifier: 20:43:0B:F3:B1:0D:99:44:71:FD:E9:D5:EE:F9:B9:8F:EA:2F:64:58
Certificate issuer: /CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Certificate serial: 01A0FB7CBB3CC2A0AE01A8F025EFAD6FC78C
Authority key identifier: 55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/IEML87ENmURx_enV7vm5j-ovZFg.roa
Signing time: Fri 02 Oct 2026 07:20:50 +0000
ROA not before: Fri 02 Oct 2026 07:20:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 83.147.248.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fb:7c:bb:3c:c2:a0:ae:01:a8:f0:25:ef:ad:6f:c7:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Validity
Not Before: Oct 2 07:20:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=20430bf3b10d994471fde9d5eef9b98fea2f6458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d0:c2:93:f8:1a:c8:ff:93:ff:e1:bb:bc:63:
28:66:81:1f:d3:9f:6e:3e:40:9e:cc:a5:cc:b9:19:
b4:be:5c:d4:fe:96:ce:c7:72:fd:cb:e0:e0:9e:f7:
e2:5c:49:f0:3c:01:3d:3a:81:75:35:d9:fa:3e:8a:
c8:2a:82:fa:90:b4:fe:d5:98:75:7c:39:8b:53:6d:
28:18:63:c4:eb:c4:53:65:eb:72:3e:69:6d:b2:22:
88:0a:b4:0e:5a:b1:fa:9f:21:5e:6c:80:15:20:7c:
21:e1:e9:68:59:35:f6:d7:e7:ed:f8:23:6a:2d:96:
3d:c3:6c:08:5e:f0:38:66:a7:a8:14:b1:40:ce:83:
aa:ba:df:7b:f1:7d:4b:5c:ba:14:1c:6c:9e:9d:fd:
31:94:bd:71:90:d9:ce:93:58:b7:34:67:46:63:df:
94:b7:5d:a0:28:af:ed:96:f4:b7:1c:f1:f8:89:0d:
dc:e7:63:e4:0d:b1:4f:83:83:cd:e2:9d:fa:da:26:
eb:80:5d:08:87:d0:1f:87:b3:c9:d3:dd:0c:f7:3a:
ec:8c:3f:51:1f:4c:95:84:ff:89:65:20:26:99:0a:
29:90:86:7c:61:46:8e:1c:bf:4f:bb:a5:d5:d8:c6:
68:72:72:52:91:c9:f7:33:e0:56:06:c9:aa:02:1d:
41:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:43:0B:F3:B1:0D:99:44:71:FD:E9:D5:EE:F9:B9:8F:EA:2F:64:58
X509v3 Authority Key Identifier:
keyid:55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/IEML87ENmURx_enV7vm5j-ovZFg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.248.0/22
Signature Algorithm: sha256WithRSAEncryption
3d:6e:f9:50:5c:89:87:95:5d:f2:93:5f:42:38:84:12:30:dc:
7a:e0:80:7b:64:c5:9a:99:f7:40:9b:5a:b4:4a:94:c0:74:6a:
f1:fb:02:a0:f6:b3:cc:3d:c0:96:6d:98:87:7d:ff:8b:5b:26:
05:83:19:b4:71:5c:0f:1c:64:f8:c9:f7:3c:eb:ad:d2:ea:1f:
3f:2f:d8:29:c5:ac:94:40:d8:a3:d0:53:08:43:2d:45:4f:ef:
e8:a0:e3:f7:29:05:1a:91:d0:b0:12:82:3e:3b:55:b8:13:39:
4e:43:a4:6d:22:83:05:86:6f:8d:85:92:ca:a1:eb:bc:ec:56:
a0:e4:a3:81:ec:86:ff:59:82:98:a5:64:4e:33:a7:28:40:1f:
da:23:4a:96:64:35:3c:c8:3c:c9:c0:75:1e:f8:44:32:79:38:
e4:18:20:ae:d5:e2:d3:ef:de:28:89:a7:e8:58:02:6e:e8:e3:
e9:ee:81:96:1c:4c:e5:0c:13:26:68:b0:b8:a6:66:3d:e8:37:
4f:31:69:3b:b1:cb:82:be:46:0a:90:34:b4:89:87:92:1b:98:
07:68:57:63:33:7a:39:b6:ea:c5:10:09:b3:cc:3c:2d:82:3d:
57:cc:88:9d:99:af:4a:14:64:63:e6:7d:db:2c:42:70:9c:13:
74:ce:b2:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 05:51:54 2026 by rpki-client