Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/TtwZZsg6q2ba160FmRHaoJ3awPE.roa
File: TtwZZsg6q2ba160FmRHaoJ3awPE.roa (raw, json)
Hash identifier: cbPYNIqTw4kFkdx8UuIKUXrNM5j+dI7DQZeiboQ1MXE=
Subject key identifier: 4E:DC:19:66:C8:3A:AB:66:DA:D7:AD:05:99:11:DA:A0:9D:DA:C0:F1
Certificate issuer: /CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Certificate serial: 01A10DF7A7F0F36D39F49C5559C286134990
Authority key identifier: 55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/TtwZZsg6q2ba160FmRHaoJ3awPE.roa
Signing time: Mon 05 Oct 2026 21:28:16 +0000
ROA not before: Mon 05 Oct 2026 21:28:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200740
IP address blocks: 83.147.232.0/22 maxlen: 24
83.147.240.0/23 maxlen: 24
91.186.202.0/23 maxlen: 24
91.186.214.0/23 maxlen: 24
178.253.52.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 22:14:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0d:f7:a7:f0:f3:6d:39:f4:9c:55:59:c2:86:13:49:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Validity
Not Before: Oct 5 21:28:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4edc1966c83aab66dad7ad059911daa09ddac0f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:fd:c7:f9:ca:c0:c4:10:55:1e:f2:b4:43:a3:
61:b8:15:f2:00:34:38:97:6b:73:3b:bb:69:42:12:
a6:42:80:0c:86:fa:e4:72:8c:6d:f3:c5:84:20:66:
f8:57:80:7e:a6:70:f8:76:a5:c6:76:d7:11:8f:f9:
fa:d9:ef:64:23:eb:93:63:19:dd:fa:11:98:86:01:
5e:a4:0b:2e:96:08:ef:63:cf:45:d3:09:d6:92:f2:
53:ec:43:8b:7f:ee:b3:ec:da:9c:95:44:5f:8b:75:
98:1d:f2:06:fe:d9:f8:a1:45:52:b0:83:0b:e0:7e:
f0:9d:77:7e:0c:18:21:f9:54:9d:7d:a1:ba:e1:f2:
09:47:6e:d5:7b:39:08:a7:b5:60:ed:fe:ca:d9:9a:
45:f3:81:8e:c6:2c:42:2e:df:35:b3:40:39:97:1c:
21:e4:80:ea:99:75:25:8e:b1:36:ae:6b:d9:a7:ae:
8e:41:32:5c:17:c5:f0:ac:f3:3d:a0:b4:78:f3:35:
e9:2b:59:b2:60:25:3e:c4:74:be:1c:b0:9f:16:c8:
43:86:f6:08:9a:54:32:82:61:45:9c:15:52:26:9a:
fa:ef:25:8c:94:bc:d2:ef:f7:03:56:cd:e1:b5:8d:
e3:34:fb:41:a4:d2:30:4f:6b:3d:65:1b:f9:56:ce:
6f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:DC:19:66:C8:3A:AB:66:DA:D7:AD:05:99:11:DA:A0:9D:DA:C0:F1
X509v3 Authority Key Identifier:
keyid:55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/TtwZZsg6q2ba160FmRHaoJ3awPE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.232.0/22
83.147.240.0/23
91.186.202.0/23
91.186.214.0/23
178.253.52.0/23
Signature Algorithm: sha256WithRSAEncryption
62:60:93:05:3c:1e:0c:52:a1:7a:fd:4c:e0:9a:20:db:42:71:
99:fb:0c:3c:cd:81:2c:e7:4e:6d:cf:23:4a:77:03:f9:6e:cc:
11:75:ad:03:20:30:d9:58:84:5c:42:4c:f9:60:d9:0a:d5:e4:
93:da:d1:ab:10:5d:e9:72:60:8e:ca:27:62:9e:82:26:f4:41:
07:4a:4b:fd:ee:73:5d:d3:c2:0d:d8:6c:82:ee:64:21:d0:64:
b6:74:ca:6c:40:3a:f1:b9:ea:c6:91:19:f5:b2:bb:2e:ea:63:
66:4a:82:08:59:c9:ba:26:2b:2f:29:bb:a1:81:d8:e0:30:7b:
88:bd:38:d8:e7:da:b6:90:33:9d:7a:c2:e2:00:a1:51:78:ad:
1d:4a:94:37:7e:72:16:d6:f3:73:be:1b:60:a4:a0:cf:f8:9b:
ac:77:f5:a8:52:7d:a7:65:8e:d7:ed:c3:5a:a6:45:e4:c5:04:
3d:e2:09:47:76:f1:82:ca:32:79:67:0c:9c:2a:42:60:f6:b4:
49:86:e9:45:f9:59:55:b3:e0:a9:b4:85:ca:01:c8:eb:48:49:
e4:4a:59:e4:58:e3:f7:03:dd:70:7b:dc:cd:c2:8e:70:15:2d:
a5:85:ee:81:00:11:ec:66:45:f3:92:8a:2f:eb:14:06:80:dd:
6c:0a:42:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 06:05:49 2026 by rpki-client