Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/SVjRVzC4FofSZn_LkdZ01uT0Ixw.roa
File: SVjRVzC4FofSZn_LkdZ01uT0Ixw.roa (raw, json)
Hash identifier: Z5I2vjh6wEOxhaQkwi2s9c07xIx0Xo/RAZcKad8Jt9M=
Subject key identifier: 49:58:D1:57:30:B8:16:87:D2:66:7F:CB:91:D6:74:D6:E4:F4:23:1C
Certificate issuer: /CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Certificate serial: 01A080E2783D8699C188B48DF2B15074FAD3
Authority key identifier: 55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/SVjRVzC4FofSZn_LkdZ01uT0Ixw.roa
Signing time: Tue 08 Sep 2026 11:58:40 +0000
ROA not before: Tue 08 Sep 2026 11:58:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214432
IP address blocks: 94.241.166.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 14:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:80:e2:78:3d:86:99:c1:88:b4:8d:f2:b1:50:74:fa:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Validity
Not Before: Sep 8 11:58:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4958d15730b81687d2667fcb91d674d6e4f4231c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f5:3e:fa:42:00:98:f8:14:2b:62:5f:b4:2b:
f2:90:18:95:3f:4c:f9:6a:59:40:de:15:69:f1:fc:
5a:7b:a0:4a:b4:af:2b:f9:dc:be:1a:00:bb:a0:32:
1f:93:c7:fa:cd:41:0a:7b:ba:22:1e:d0:43:e3:79:
6f:b3:dd:77:6c:b7:d7:75:78:4d:be:d0:c6:13:07:
67:00:5f:3e:2f:b2:60:7e:90:75:2c:20:ac:e8:45:
55:19:53:7b:e0:2c:06:70:01:9a:ba:7e:f9:f5:57:
e5:af:72:b4:bc:e2:3a:5d:10:10:d9:d6:7b:32:97:
dc:c7:32:1e:01:01:f8:18:35:88:4a:ea:be:66:1d:
cb:f8:0d:18:b5:7b:17:88:82:9c:e4:01:15:88:2c:
3f:e7:46:b7:72:82:bb:0b:da:9f:fa:61:8c:ce:87:
c8:d8:fa:7a:6e:d3:41:84:71:aa:0e:39:9a:c1:f2:
cf:b3:d0:fb:f7:8d:63:bb:14:fd:47:7c:e0:e3:12:
7e:ba:9e:16:c3:f3:9c:f8:7a:70:cd:f0:fe:58:6d:
5e:10:70:df:5e:96:34:a2:fc:4e:16:91:40:a4:1f:
20:bc:a5:5a:12:cd:c0:8f:8c:6c:51:d1:cb:ae:8a:
91:a1:14:ca:12:bd:e5:0a:01:30:6f:11:ab:6c:7f:
32:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:58:D1:57:30:B8:16:87:D2:66:7F:CB:91:D6:74:D6:E4:F4:23:1C
X509v3 Authority Key Identifier:
keyid:55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/SVjRVzC4FofSZn_LkdZ01uT0Ixw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.241.166.0/23
Signature Algorithm: sha256WithRSAEncryption
0b:4f:e4:c4:74:a2:9e:35:93:a0:fc:c2:2c:7f:f2:5b:64:fa:
d3:8c:ae:55:3e:16:a6:8e:11:73:cb:a6:a4:ad:88:90:2a:48:
5a:4d:2f:d4:42:22:68:4b:6f:89:82:96:43:89:a3:25:c4:de:
70:fc:c9:50:89:00:80:f7:f2:ab:2a:38:4e:cd:22:bf:da:3e:
97:da:14:ef:07:40:30:24:ae:49:26:3f:f7:37:6e:67:1e:0a:
22:63:c5:07:8f:2f:3b:9d:71:18:e5:53:f3:06:36:47:92:85:
78:a9:ed:6e:b7:3f:58:92:05:0c:49:29:32:09:96:8c:49:ea:
f7:41:f6:62:9d:3d:23:73:4c:43:99:4f:6b:da:ff:d5:27:d7:
72:a6:80:d2:91:69:36:cd:4b:d3:50:6c:27:e0:05:5d:74:14:
c3:67:56:df:4f:b3:69:ae:50:61:b8:84:45:28:3d:da:8e:42:
df:03:62:41:91:37:95:dd:bd:df:fa:e8:2a:d9:e9:44:62:4b:
b9:85:bd:55:a7:44:8d:ae:9c:6f:66:60:69:e3:2e:01:2f:bc:
fd:d1:69:0b:6d:cd:f4:0a:e4:4a:48:67:da:d3:52:e3:53:f3:
3a:f4:60:97:e0:e5:09:f2:e2:52:e5:0e:fe:58:0c:c9:e3:5a:
1d:e5:2f:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 19:47:17 2026 by rpki-client