Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/MF8B41LOFvd_dJLnd2L2mOHrbqA.roa
File: MF8B41LOFvd_dJLnd2L2mOHrbqA.roa (raw, json)
Hash identifier: dybtYBEew5yYvZAdDX5s5pLrwbA79vaB+sXZOkgoniI=
Subject key identifier: 30:5F:01:E3:52:CE:16:F7:7F:74:92:E7:77:62:F6:98:E1:EB:6E:A0
Certificate issuer: /CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Certificate serial: 01A1748E9E6E2DA9E47A2D68CD00857B8437
Authority key identifier: 55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/MF8B41LOFvd_dJLnd2L2mOHrbqA.roa
Signing time: Sun 25 Oct 2026 19:34:26 +0000
ROA not before: Sun 25 Oct 2026 19:34:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200740
IP address blocks: 83.147.232.0/22 maxlen: 24
83.147.240.0/22 maxlen: 24
83.147.240.0/23 maxlen: 24
91.186.202.0/23 maxlen: 24
91.186.214.0/23 maxlen: 24
178.253.52.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:74:8e:9e:6e:2d:a9:e4:7a:2d:68:cd:00:85:7b:84:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Validity
Not Before: Oct 25 19:34:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=305f01e352ce16f77f7492e77762f698e1eb6ea0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:a4:73:5d:2f:4f:d3:e7:a0:93:c3:8f:c7:39:
db:67:a0:e3:e4:1f:c2:a5:85:27:79:26:c5:64:fa:
ce:93:f8:81:78:b5:d7:3d:8a:b1:34:95:3e:99:42:
f6:e7:91:8d:e3:5f:c2:4f:45:ee:ee:8a:98:1f:e4:
44:c3:7a:97:33:0f:5c:89:a5:44:c8:fd:16:16:a5:
45:10:31:72:3a:43:d8:45:b6:3b:10:e8:06:c5:16:
1b:49:27:68:33:29:f8:7f:f2:f5:ed:ec:72:78:32:
dc:84:b7:ad:9e:44:34:40:1d:ac:44:db:fd:56:fc:
24:f7:17:d9:64:40:b0:d4:e5:b8:17:98:d7:69:2a:
a3:9d:9a:3e:66:3a:27:09:16:4c:b7:38:bb:f8:7c:
02:09:da:3e:57:3c:10:bf:cf:89:bc:d1:b2:2a:27:
02:44:48:4a:53:e0:b6:fb:05:6c:ee:38:60:ce:25:
19:f8:6a:57:32:a5:61:85:d4:f1:7a:b9:30:63:cd:
90:9f:3e:68:e4:b0:19:b4:28:11:f0:06:3f:5e:3b:
86:37:91:fb:fd:30:c2:57:66:62:4d:45:23:aa:3d:
c0:3a:1a:39:98:6f:2f:6a:ff:8b:fa:58:42:ac:04:
de:28:dd:52:60:ae:5b:71:25:2a:f2:32:81:3c:5f:
72:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:5F:01:E3:52:CE:16:F7:7F:74:92:E7:77:62:F6:98:E1:EB:6E:A0
X509v3 Authority Key Identifier:
keyid:55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/MF8B41LOFvd_dJLnd2L2mOHrbqA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.232.0/22
83.147.240.0/22
91.186.202.0/23
91.186.214.0/23
178.253.52.0/23
Signature Algorithm: sha256WithRSAEncryption
41:aa:dc:45:e1:5d:50:bd:ce:3d:e3:03:ae:0f:a5:cc:06:6c:
a7:48:a9:e0:90:5e:65:d2:f5:51:a4:ad:c8:1f:47:94:c4:08:
b9:60:d0:4f:c0:9d:11:b2:87:c9:78:e1:a4:f6:9b:71:ae:c1:
2d:ff:5c:04:ea:f0:08:70:49:06:17:3c:1d:20:b5:e8:45:5b:
72:82:07:ad:21:1f:c6:15:f6:6b:d3:06:37:00:6f:c5:0b:6f:
5e:83:6a:2b:fb:79:27:f2:b6:c7:fb:00:93:d7:87:f9:84:9d:
b7:d7:a3:38:8f:59:31:84:13:17:f0:7d:3f:06:d4:8f:71:a2:
f1:51:48:eb:7e:29:e3:7a:92:74:27:6a:37:95:75:5f:f9:fc:
8b:03:be:be:94:01:d8:b3:5a:de:0a:f7:19:6c:ac:64:c6:f5:
d9:20:ac:13:cb:60:38:cf:06:64:87:db:8b:d5:5d:e6:c4:14:
be:ce:85:23:aa:d3:72:3b:d6:88:78:65:57:b0:08:7d:05:80:
aa:ad:8c:31:46:af:31:3f:e3:7e:ac:c3:a0:7c:65:1a:a7:1e:
53:5b:03:9e:88:fb:41:d2:d2:37:59:70:45:51:c2:21:84:d0:
62:d0:0a:1f:34:6c:1c:a5:b4:58:60:d1:97:66:43:e5:55:b9:
7e:82:b0:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:51:02 2026 by rpki-client