Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/Ri-dZEtxzT9ojpkgONGACFAikrc.roa
File: Ri-dZEtxzT9ojpkgONGACFAikrc.roa (raw, json)
Hash identifier: DuxOeFpH4H8HgVeiIT6BlRO5bHol3M80FSSIDgaLYVs=
Subject key identifier: 46:2F:9D:64:4B:71:CD:3F:68:8E:99:20:38:D1:80:08:50:22:92:B7
Certificate issuer: /CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Certificate serial: 01A169C7F40573E74634FFA608D2B5672AE3
Authority key identifier: 55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/Ri-dZEtxzT9ojpkgONGACFAikrc.roa
Signing time: Fri 23 Oct 2026 17:21:14 +0000
ROA not before: Fri 23 Oct 2026 17:21:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47216
IP address blocks: 91.186.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:69:c7:f4:05:73:e7:46:34:ff:a6:08:d2:b5:67:2a:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Validity
Not Before: Oct 23 17:21:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=462f9d644b71cd3f688e992038d18008502292b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:1d:94:2d:e2:19:fc:66:e6:16:5b:71:40:74:
b0:48:9b:b4:2a:4a:d6:60:b4:22:f2:6e:b6:c6:f2:
64:d6:f2:7c:f0:bd:37:fd:a2:f8:d4:14:e0:b9:0f:
a2:3c:8a:6b:63:5d:1b:4f:12:72:56:af:32:61:fb:
9a:e5:29:a9:c4:0b:8a:4c:5b:ff:15:a1:01:de:16:
42:c9:94:68:a8:28:1a:4e:0c:78:21:ca:a4:e0:ce:
d3:33:d5:f8:28:1b:77:01:f1:6b:80:6e:9f:1e:1d:
11:18:e8:01:df:34:ac:b5:87:77:bb:25:1e:66:b7:
21:67:96:ac:b5:bf:b5:9a:c4:02:65:55:52:01:86:
c0:6e:fb:dd:b0:c6:d0:72:2f:bb:dc:71:b0:b6:2c:
34:55:fd:74:53:42:e2:4c:41:e5:98:91:88:b9:21:
8d:47:c7:32:cf:f6:7c:fd:56:7b:85:41:60:62:54:
9f:91:96:ae:73:17:fe:34:3e:3c:06:e9:c1:d0:59:
e0:ae:e4:02:e9:ff:23:0c:e0:e4:2b:0f:87:02:b0:
6d:b4:95:0e:65:06:47:a8:54:1b:45:5f:02:8b:81:
a2:5c:68:00:64:43:91:c4:e5:b0:54:a2:6f:08:c2:
fa:d8:56:e6:1f:cd:de:29:8f:a5:b6:12:1e:16:58:
7b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:2F:9D:64:4B:71:CD:3F:68:8E:99:20:38:D1:80:08:50:22:92:B7
X509v3 Authority Key Identifier:
keyid:55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/Ri-dZEtxzT9ojpkgONGACFAikrc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.186.193.0/24
Signature Algorithm: sha256WithRSAEncryption
70:90:be:fe:5a:93:38:36:4e:6c:10:32:11:62:59:50:1c:ae:
bd:91:7a:26:99:a5:e7:9a:5f:21:ac:bc:64:0c:2a:83:b3:d7:
60:69:4e:bc:9a:32:c6:31:77:63:41:04:01:43:94:3a:f7:43:
74:61:2d:be:29:66:66:86:56:da:dc:2c:1b:00:dc:72:0e:9e:
f9:e3:61:7f:46:d8:84:56:a6:f3:07:42:9b:c9:55:0c:2c:0b:
7f:3c:bc:2e:b6:3c:f5:3f:72:71:23:5d:68:6e:45:8c:2c:33:
24:7c:5d:e8:5a:4b:a2:27:30:7c:bd:b5:88:83:09:70:a3:52:
13:75:c2:3c:6e:bf:a8:f8:c2:26:77:5b:c7:90:d9:c4:59:b1:
bd:10:08:9a:64:d5:35:61:57:13:56:f0:09:6f:5e:42:c5:77:
ea:0e:e7:89:a5:2d:dc:b3:6f:a9:92:d8:80:2e:eb:5c:c8:b0:
0c:f8:2c:40:c5:d7:76:59:75:8e:72:70:8a:ee:56:19:9f:86:
03:15:22:8f:44:74:a3:cc:62:57:f6:73:ee:33:fa:05:5e:f8:
b9:c5:49:46:c9:4e:eb:e8:dc:e4:14:a8:80:e6:27:d9:94:0a:
50:06:88:45:ce:04:ab:a0:30:a4:16:60:a2:ee:3d:b3:f1:93:
21:c3:fa:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:56:34 2026 by rpki-client