Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/Tq5HxqjA4WGnDHQBXgbImocLTlA.roa
File: Tq5HxqjA4WGnDHQBXgbImocLTlA.roa (raw, json)
Hash identifier: JLGnUiP7XXQtyia8GXNL+gnYUPJm11Mo/e5W/XWZiTY=
Subject key identifier: 4E:AE:47:C6:A8:C0:E1:61:A7:0C:74:01:5E:06:C8:9A:87:0B:4E:50
Certificate issuer: /CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Certificate serial: 01A1698F301B652496F0B14B0474555589B3
Authority key identifier: 55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/Tq5HxqjA4WGnDHQBXgbImocLTlA.roa
Signing time: Fri 23 Oct 2026 16:19:14 +0000
ROA not before: Fri 23 Oct 2026 16:19:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 400909
IP address blocks: 178.253.26.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 15:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:69:8f:30:1b:65:24:96:f0:b1:4b:04:74:55:55:89:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Validity
Not Before: Oct 23 16:19:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4eae47c6a8c0e161a70c74015e06c89a870b4e50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:cd:73:29:ba:ca:2e:e7:76:37:c7:cb:ea:e8:
bc:bd:cd:67:d4:c6:98:4d:4e:af:1c:9f:8f:cf:b8:
c6:61:10:ed:2d:3a:79:de:c3:b4:4e:54:46:f2:79:
6a:dd:c9:54:5f:22:bb:50:3a:c0:14:d9:c1:1c:61:
a9:d4:bc:66:15:80:32:21:73:a5:54:92:a7:2c:6a:
70:d4:7e:6c:80:6e:ab:f1:dd:2b:bd:c3:30:93:81:
24:d5:42:2e:e7:e1:fa:f2:c0:fa:4c:be:c0:4b:47:
d8:48:21:5f:02:72:c8:93:64:ac:5a:3c:e3:56:3e:
70:80:fc:36:79:6a:0d:99:f9:06:f1:91:61:7d:c3:
f9:ea:a3:c1:70:fe:bd:d2:59:f0:a0:1a:f4:68:38:
5e:8b:d6:ff:64:9f:89:36:a2:0f:ce:8d:e0:d7:23:
d8:63:84:6d:7c:c7:f0:38:cb:af:71:bb:b0:7d:b0:
a4:27:24:59:43:18:45:38:1c:8e:db:e9:48:76:58:
2f:39:f8:b9:01:8b:17:a4:f2:ac:54:16:e3:30:f9:
aa:6d:c9:d7:1c:76:21:91:a4:fb:42:0c:3e:11:c5:
e3:6f:7a:c1:61:22:a9:e7:2e:93:60:dd:1b:62:4f:
e1:d2:0d:5a:4e:7c:40:76:7c:98:21:c2:4e:10:f2:
f1:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:AE:47:C6:A8:C0:E1:61:A7:0C:74:01:5E:06:C8:9A:87:0B:4E:50
X509v3 Authority Key Identifier:
keyid:55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/Tq5HxqjA4WGnDHQBXgbImocLTlA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.253.26.0/23
Signature Algorithm: sha256WithRSAEncryption
94:1e:d9:29:f4:3d:e0:d0:ca:fd:a4:b8:ac:9f:74:f5:7f:24:
43:99:0e:bf:bc:4b:67:23:23:5b:3b:28:19:b3:a5:90:53:81:
b5:2a:1b:8a:eb:9c:5b:f1:0b:27:64:71:32:18:86:10:f5:df:
e9:6d:19:bf:d8:6c:a4:72:82:3f:66:49:98:f9:84:34:53:c6:
76:61:5c:bc:bc:0c:dd:50:39:fe:79:b3:e2:3c:e8:b0:03:75:
e1:29:a0:0c:2f:1b:08:4e:1f:a7:3c:08:78:28:0b:ae:7a:c7:
e4:7b:3b:6a:bd:db:95:c5:53:7b:d5:4d:fd:08:76:38:d4:1a:
47:d3:3c:96:df:ba:52:24:c9:d9:8f:fb:31:c9:43:6d:94:d5:
12:8c:f4:c8:31:35:07:36:dc:96:c5:df:f9:bb:85:0d:aa:b3:
48:69:4c:34:96:9e:93:57:a8:24:cb:31:7a:3d:93:20:fc:b9:
b0:fb:0f:70:90:e4:dd:7d:01:93:dd:0e:84:3a:75:02:19:86:
fd:5c:cd:6b:53:4d:20:42:66:08:b9:41:a5:66:bf:97:5b:d0:
7b:9a:16:dd:d4:b4:47:7b:d1:8a:84:1d:42:98:53:ba:72:d7:
70:d8:53:94:2c:39:21:82:78:20:e1:8f:62:89:28:1e:ad:8b:
66:51:35:ce
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaFpjzAbZSSW8LFLBHRVVYmzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1YmFmMjY5Njc1MTBiM2M1MmU0NmQxZGM1OTM5NjdjZGYy
OWY5YzkwHhcNMjYxMDIzMTYxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZWFlNDdjNmE4YzBlMTYxYTcwYzc0MDE1ZTA2Yzg5YTg3MGI0ZTUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq81zKbrKLud2N8fL6ui8vc1n1MaY
TU6vHJ+Pz7jGYRDtLTp53sO0TlRG8nlq3clUXyK7UDrAFNnBHGGp1LxmFYAyIXOl
VJKnLGpw1H5sgG6r8d0rvcMwk4Ek1UIu5+H68sD6TL7AS0fYSCFfAnLIk2SsWjzj
Vj5wgPw2eWoNmfkG8ZFhfcP56qPBcP690lnwoBr0aDhei9b/ZJ+JNqIPzo3g1yPY
Y4RtfMfwOMuvcbuwfbCkJyRZQxhFOByO2+lIdlgvOfi5AYsXpPKsVBbjMPmqbcnX
HHYhkaT7Qgw+EcXjb3rBYSKp5y6TYN0bYk/h0g1aTnxAdnyYIcJOEPLxfwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFE6uR8aowOFhpwx0AV4GyJqHC05QMB8GA1UdIwQY
MBaAFFW68mlnUQs8UuRtHcWTlnzfKfnJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmJyeWFXZFJDenhTNUcwZHhaT1dmTjhwLWNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS81YWE0ZGMtZDE4NC00ZGI0LTllMTAt
NDlmOTgxZWU1OTgxLzEvVHE1SHhxakE0V0duREhRQlhnYkltb2NMVGxBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS81YWE0ZGMtZDE4NC00ZGI0LTllMTAtNDlmOTgxZWU1OTgx
LzEvVmJyeWFXZFJDenhTNUcwZHhaT1dmTjhwLWNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBsv0aMA0G
CSqGSIb3DQEBCwUAA4IBAQCUHtkp9D3g0Mr9pLisn3T1fyRDmQ6/vEtnIyNbOygZ
s6WQU4G1KhuK65xb8QsnZHEyGIYQ9d/pbRm/2GykcoI/ZkmY+YQ0U8Z2YVy8vAzd
UDn+ebPiPOiwA3XhKaAMLxsITh+nPAh4KAuuesfkeztqvduVxVN71U39CHY41BpH
0zyW37pSJMnZj/sxyUNtlNUSjPTIMTUHNtyWxd/5u4UNqrNIaUw0lp6TV6gkyzF6
PZMg/Lmw+w9wkOTdfQGT3Q6EOnUCGYb9XM1rU00gQmYIuUGlZr+XW9B7mhbd1LRH
e9GKhB1CmFO6ctdw2FOULDkhgngg4Y9iiSgerYtmUTXO
-----END CERTIFICATE-----
Generated at Mon Oct 26 00:32:50 2026 by rpki-client