Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/SOsaXdHyYUNfbljTgM39qDyP-U4.roa
File: SOsaXdHyYUNfbljTgM39qDyP-U4.roa (raw, json)
Hash identifier: A7BAa4REwCM6QDH30nv848CZmQoKkbhsPtsdln3GiK8=
Subject key identifier: 48:EB:1A:5D:D1:F2:61:43:5F:6E:58:D3:80:CD:FD:A8:3C:8F:F9:4E
Certificate issuer: /CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Certificate serial: 01A10DF7A7A3000EAD14E5D7B376D4990DD1
Authority key identifier: 55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/SOsaXdHyYUNfbljTgM39qDyP-U4.roa
Signing time: Mon 05 Oct 2026 21:28:16 +0000
ROA not before: Mon 05 Oct 2026 21:28:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197703
IP address blocks: 91.186.200.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0d:f7:a7:a3:00:0e:ad:14:e5:d7:b3:76:d4:99:0d:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Validity
Not Before: Oct 5 21:28:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=48eb1a5dd1f261435f6e58d380cdfda83c8ff94e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:63:96:2d:35:0c:85:a7:6d:0e:cf:f1:89:50:
92:d3:b5:8a:ab:a1:10:35:9e:9f:52:a9:00:72:c5:
33:66:9c:fe:b0:f3:f2:e7:23:f5:18:af:cb:79:5b:
ec:1d:af:2c:75:2b:62:20:24:a3:ad:f6:4a:c0:1c:
c8:81:12:e7:9f:70:e4:6e:a2:58:e2:89:85:06:a6:
29:de:54:af:ea:f5:5c:b7:73:65:55:48:36:63:39:
4d:5e:cb:6d:55:50:36:b0:da:7e:4c:cc:95:1f:0a:
7f:6e:e3:b1:9f:fa:d6:5c:1b:96:22:e9:b0:30:4d:
30:de:7d:50:3e:c5:49:03:2f:2d:02:01:ab:17:35:
5f:27:c8:d4:e0:9f:10:43:63:24:70:1c:d1:b0:f4:
f7:97:a3:3e:d5:f0:0e:75:36:5c:a7:1e:90:b8:82:
7d:ef:5d:35:d1:14:27:bb:0e:bb:e5:9b:c8:24:08:
c6:ee:da:29:b4:d2:fe:1d:9e:05:9c:ff:ac:45:57:
4c:c4:02:81:38:70:88:83:ec:a9:0c:6f:b7:9e:a7:
ca:14:d4:5e:16:3e:17:1a:61:93:ee:5f:9d:21:77:
33:37:24:f3:c8:f1:9d:d4:41:74:b9:5c:36:db:37:
29:3e:3c:9f:98:94:5a:36:87:5b:21:ff:9d:49:cd:
fd:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:EB:1A:5D:D1:F2:61:43:5F:6E:58:D3:80:CD:FD:A8:3C:8F:F9:4E
X509v3 Authority Key Identifier:
keyid:55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/SOsaXdHyYUNfbljTgM39qDyP-U4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.186.200.0/23
Signature Algorithm: sha256WithRSAEncryption
a5:f5:2a:85:dc:9c:ac:02:38:9c:c2:00:82:bd:88:c7:79:5e:
0f:18:11:14:be:d2:0a:43:31:14:bf:03:f4:b0:61:06:8d:04:
6a:f4:fb:b3:87:46:b8:78:c8:d0:14:50:ee:21:cd:98:e4:1a:
46:b5:59:ea:03:3c:32:54:61:f4:b1:52:c4:2d:6d:a4:d5:0d:
b7:8a:6c:6d:f5:7b:4d:0c:b6:2a:e7:b3:70:91:00:ef:6e:4a:
6c:14:ab:39:ae:70:a1:04:46:bf:85:b6:db:c1:18:6c:33:2c:
b4:5e:e9:22:9d:86:46:1f:5a:dd:97:e4:90:ef:cd:74:7d:e1:
12:2c:23:2a:bc:7c:08:17:52:67:bd:7c:57:df:99:c0:0b:cd:
c3:b3:2f:ec:cb:8d:47:33:03:49:f6:a4:a0:6b:6b:f5:f8:1c:
36:4a:69:c2:fc:63:ff:8e:6d:ea:6c:e7:9c:33:2a:a8:0a:d8:
78:e4:ce:3d:be:ec:ff:e5:03:75:c2:d6:c9:fc:54:05:97:5b:
f4:8b:67:b5:44:8c:04:7f:2c:b4:ce:d8:8e:d1:6f:89:85:25:
fc:56:5f:7b:e8:0c:67:ce:cb:d4:ab:f4:59:ce:e2:02:20:2b:
04:1d:a2:5a:5e:02:82:51:6e:17:12:76:10:11:04:46:f3:2d:
17:03:0d:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 05:11:15 2026 by rpki-client