Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/TR0sCiIgKOI5AVSRYcSDjPZXFDI.roa
File: TR0sCiIgKOI5AVSRYcSDjPZXFDI.roa (raw, json)
Hash identifier: ENYN4gxoYSX3l9HrvRf6C27kNk+FcKSMtrIH5nChxC0=
Subject key identifier: 4D:1D:2C:0A:22:20:28:E2:39:01:54:91:61:C4:83:8C:F6:57:14:32
Certificate issuer: /CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Certificate serial: 019CAFE1586E39B8F23656341908823A3BBA
Authority key identifier: 55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/TR0sCiIgKOI5AVSRYcSDjPZXFDI.roa
Signing time: Mon 02 Mar 2026 18:48:26 +0000
ROA not before: Mon 02 Mar 2026 18:48:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 83.147.194.0/24 maxlen: 24
83.147.217.0/24 maxlen: 24
83.147.222.0/24 maxlen: 24
83.147.240.0/23 maxlen: 24
83.147.242.0/23 maxlen: 24
91.186.194.0/24 maxlen: 24
91.186.208.0/23 maxlen: 24
91.186.210.0/23 maxlen: 24
178.253.38.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Mar 2026 01:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:e1:58:6e:39:b8:f2:36:56:34:19:08:82:3a:3b:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Validity
Not Before: Mar 2 18:48:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4d1d2c0a222028e23901549161c4838cf6571432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:51:49:5a:36:9b:75:60:f5:04:23:14:6d:67:
02:29:22:c4:b0:48:00:a0:af:ac:66:4d:0f:25:e3:
8a:f0:3e:18:71:2a:26:16:08:aa:eb:2f:00:57:68:
0c:af:7f:c1:be:d0:9c:7e:d0:6b:40:03:b2:73:4b:
29:69:03:0f:21:e0:ec:d2:85:7a:e0:d9:c7:57:04:
d6:1e:9c:df:dd:bf:d6:65:b6:37:82:11:84:3e:df:
42:d2:eb:c5:69:96:df:d4:52:f9:48:20:7f:14:92:
a7:ab:02:4a:43:31:7a:d8:da:e2:93:81:c5:c0:dd:
9f:2e:0e:10:2b:b7:13:0f:e9:5f:ff:00:4a:1e:b7:
4b:3c:e8:87:9e:30:80:79:2e:34:64:ab:8e:be:25:
e1:aa:06:48:b1:0d:27:c7:6b:f9:44:ae:af:d3:4b:
21:5c:0c:88:d8:c5:88:5e:8d:86:5b:f6:5c:85:f3:
6f:dd:b7:63:35:6c:22:44:1a:ec:7d:69:55:04:b6:
d0:1f:9b:bf:92:3b:9b:28:ba:d1:98:7e:99:d2:3d:
35:90:67:43:9b:41:78:75:da:1f:5a:fc:40:c0:15:
04:95:78:5f:58:21:8c:e3:94:b8:46:7c:c9:9b:74:
8a:c8:e7:51:0d:e7:43:5e:a6:66:e3:98:ee:7e:d4:
93:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:1D:2C:0A:22:20:28:E2:39:01:54:91:61:C4:83:8C:F6:57:14:32
X509v3 Authority Key Identifier:
keyid:55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/TR0sCiIgKOI5AVSRYcSDjPZXFDI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.194.0/24
83.147.217.0/24
83.147.222.0/24
83.147.240.0/22
91.186.194.0/24
91.186.208.0/22
178.253.38.0/23
Signature Algorithm: sha256WithRSAEncryption
62:10:f9:e7:de:12:9f:69:f9:66:47:18:00:de:75:7d:1e:07:
79:d9:61:c9:94:12:40:63:14:40:d9:3a:b2:6f:21:95:fe:d4:
a0:66:c4:63:5e:b0:fe:b5:e7:b9:14:84:d5:a7:75:0f:b8:f4:
53:4d:ce:72:b1:f2:38:6a:cb:8e:d3:55:2d:d6:8a:bb:51:86:
28:8f:95:96:65:49:7c:17:7e:49:17:bf:7a:44:04:9d:de:3d:
43:96:b6:19:47:ed:aa:cc:fb:fc:8b:0c:cc:58:e5:92:6c:05:
9e:89:d9:b4:2b:af:72:a7:28:a9:11:53:c8:70:b2:1b:a0:a4:
2a:6a:2a:e7:5c:a1:8b:f1:f6:cf:76:39:60:6d:c8:bc:3e:4a:
65:a0:25:8e:2b:ae:55:e5:f4:88:32:7c:6a:d3:98:20:7b:fa:
6b:d3:7b:7a:a0:72:3e:cb:3c:bc:d8:39:80:d5:71:06:64:53:
c3:b5:02:f8:4a:bf:f1:01:04:14:52:b8:b1:a4:3e:4c:95:c2:
24:6f:6d:09:f6:73:e5:ae:a6:95:7d:41:12:6b:7a:9c:5f:4c:
a0:10:97:2e:29:c5:08:a4:b3:a2:c8:ff:31:fc:99:55:d2:57:
33:a8:a5:e4:73:a6:8b:b8:fc:29:c6:7b:59:3b:19:56:ad:f6:
48:02:72:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 05:53:38 2026 by rpki-client