Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/JCOqWbRnRywHSsZh-fLz50m-PqY.roa
File: JCOqWbRnRywHSsZh-fLz50m-PqY.roa (raw, json)
Hash identifier: aOTb2qew8LvghZhiTeoIMCTgriMUYXeo63zQWwudYXw=
Subject key identifier: 24:23:AA:59:B4:67:47:2C:07:4A:C6:61:F9:F2:F3:E7:49:BE:3E:A6
Certificate issuer: /CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Certificate serial: 019E6A99272AEA0D2883E6BADF630171FBF7
Authority key identifier: 55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/JCOqWbRnRywHSsZh-fLz50m-PqY.roa
Signing time: Wed 27 May 2026 18:01:22 +0000
ROA not before: Wed 27 May 2026 18:01:22 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213476
IP address blocks: 91.186.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 02 Jun 2026 15:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:6a:99:27:2a:ea:0d:28:83:e6:ba:df:63:01:71:fb:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Validity
Not Before: May 27 18:01:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2423aa59b467472c074ac661f9f2f3e749be3ea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:2a:79:70:c2:98:e7:c5:11:c7:c6:01:47:dd:
f9:15:a4:f7:16:93:36:e0:92:a6:9e:eb:4f:97:ae:
76:cc:3f:4d:7c:a2:b0:d5:a9:20:67:28:f7:64:bb:
c1:f1:1a:99:25:81:d0:4c:db:7e:c7:ce:a8:6d:78:
62:7f:a9:f1:49:5b:76:6b:c3:84:7f:dc:c7:32:3a:
05:70:3a:4b:b5:dc:03:6e:4f:df:ce:4c:f1:d6:db:
1f:e7:15:58:7c:30:20:ec:6a:88:76:86:da:8a:b8:
f1:10:83:ce:77:3f:b0:0a:93:0e:ae:b4:83:81:c9:
68:98:ad:58:e0:23:6d:6b:51:ba:d1:62:2d:9e:73:
a8:2f:68:f1:e0:49:71:33:b3:9f:52:56:a0:11:ac:
62:0b:bd:16:28:ba:88:9e:a5:74:52:e0:ba:eb:76:
a3:f0:61:8f:ad:a0:c8:30:3d:7a:db:2c:d4:aa:23:
2c:51:f6:24:45:b5:3d:9b:4a:bf:9f:47:a5:18:3f:
f4:a8:99:bb:49:e3:44:2b:fe:19:41:2f:cd:e4:00:
7d:3e:62:18:f3:70:94:9a:58:0d:50:83:9c:a2:ab:
5b:33:af:88:98:f4:b4:3c:e7:bc:0b:eb:b1:16:04:
b2:57:8f:21:4f:c0:0a:1f:7d:39:e2:0e:17:63:b0:
2c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:23:AA:59:B4:67:47:2C:07:4A:C6:61:F9:F2:F3:E7:49:BE:3E:A6
X509v3 Authority Key Identifier:
keyid:55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/JCOqWbRnRywHSsZh-fLz50m-PqY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.186.194.0/24
Signature Algorithm: sha256WithRSAEncryption
35:92:62:64:60:70:e0:44:e3:32:45:04:3e:b2:db:fe:53:59:
18:4d:ac:09:31:cf:f8:53:08:bd:4f:61:db:78:8f:a1:87:d4:
f0:82:9e:a7:ba:2a:91:92:ff:92:16:fd:26:74:b2:17:0e:e8:
0d:df:93:75:c5:91:ee:86:59:67:69:86:42:66:a2:d2:b8:6d:
21:c2:0a:da:ad:54:29:14:37:b0:f5:f2:2d:00:28:23:a4:17:
97:bd:b9:69:a5:fb:c0:c0:fb:99:ad:5a:c9:cd:f5:ed:76:cf:
80:3d:a6:61:8d:3f:2e:55:09:0e:b6:8c:d7:72:5f:73:25:4d:
1a:11:0d:50:f2:1b:c4:dd:4c:10:e0:b4:41:9d:4a:29:da:c8:
7a:1a:46:c8:09:1f:43:ca:7b:eb:55:e4:25:d5:be:8e:9c:ac:
ed:7c:da:71:d5:47:a8:70:8d:f1:e8:93:39:13:76:71:53:5a:
d1:66:ee:7a:88:28:69:5a:7e:7c:ad:30:88:6e:2c:d0:6f:1f:
75:75:47:9e:e6:55:66:d1:48:a8:c4:0e:92:52:b0:4e:7a:ea:
1e:82:87:a9:ef:0a:a3:fa:fd:ca:d1:73:8f:e0:24:6d:f0:37:
6d:c6:a2:32:96:a5:fc:3b:b3:06:df:9d:0f:a9:91:c7:42:1d:
76:d3:28:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 1 20:35:31 2026 by rpki-client