Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/_sRckXeyoZxj9rukZRq18fDp3ik.roa
File: _sRckXeyoZxj9rukZRq18fDp3ik.roa (raw, json)
Hash identifier: 1WwE3fcT2kiL+v9mDl8uXlOyD5SD5f4wDk26AdtmLBQ=
Subject key identifier: FE:C4:5C:91:77:B2:A1:9C:63:F6:BB:A4:65:1A:B5:F1:F0:E9:DE:29
Certificate issuer: /CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Certificate serial: 01A043900F53F54ED806B5D32603546B0741
Authority key identifier: 55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/_sRckXeyoZxj9rukZRq18fDp3ik.roa
Signing time: Thu 27 Aug 2026 14:11:49 +0000
ROA not before: Thu 27 Aug 2026 14:11:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 45090
IP address blocks: 94.241.160.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:43:90:0f:53:f5:4e:d8:06:b5:d3:26:03:54:6b:07:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Validity
Not Before: Aug 27 14:11:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fec45c9177b2a19c63f6bba4651ab5f1f0e9de29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:d0:22:d0:38:8c:06:0f:1a:87:0b:7f:8a:ed:
21:8a:c1:b9:e1:12:75:da:eb:a2:09:52:e2:d3:98:
9a:b4:4d:2f:b5:a0:2a:c8:ec:2d:d2:ac:d8:b9:d3:
51:ec:ac:21:5d:74:f5:b1:ec:48:37:fe:3b:2a:a5:
bc:05:da:64:6d:5a:ee:ac:4f:2b:57:e9:91:cf:19:
53:57:5b:f8:4b:4a:9e:7f:58:09:6b:c2:f3:a6:a1:
01:86:46:d0:87:3c:5f:7c:14:18:ad:c2:52:0e:80:
38:52:db:0b:86:c2:de:8f:21:b0:49:24:08:30:00:
76:f2:f8:49:94:7a:d8:1b:69:c0:de:7d:36:99:bc:
fa:22:8f:02:77:04:34:59:ec:05:e4:9e:41:20:03:
3b:fd:ae:74:b5:b5:ef:37:81:2f:c0:98:09:61:05:
9f:b3:34:85:92:31:23:61:a8:98:32:a6:13:60:30:
15:df:aa:2b:69:b8:2b:6a:25:f4:b0:a2:81:10:56:
bc:d8:31:81:f2:1e:3a:2f:7b:b0:1a:57:c0:b4:9e:
19:fa:d4:93:fc:2b:f0:ad:f7:d7:4e:90:a6:5a:0f:
da:57:cc:43:bb:8b:e1:e1:0b:38:ef:b4:a1:11:56:
06:dc:ed:8e:a2:d9:c9:81:f3:61:07:e6:3d:a1:53:
92:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:C4:5C:91:77:B2:A1:9C:63:F6:BB:A4:65:1A:B5:F1:F0:E9:DE:29
X509v3 Authority Key Identifier:
keyid:55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/_sRckXeyoZxj9rukZRq18fDp3ik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.241.160.0/23
Signature Algorithm: sha256WithRSAEncryption
10:f7:21:73:58:3d:90:66:64:f1:ab:52:20:7b:63:6e:74:68:
b4:ab:17:06:e0:f2:a0:58:43:5c:7f:ca:0e:8f:24:e6:b4:c2:
ea:89:cd:93:25:aa:b8:66:e5:93:9c:f4:2d:ec:a0:7e:ce:d3:
35:e2:f4:95:55:5d:3b:9a:5e:07:4a:55:43:09:aa:59:d3:1e:
36:16:59:3b:9f:24:15:43:c5:c2:5f:ba:12:43:d2:95:2d:7e:
92:03:8e:5e:dd:65:e2:17:22:c5:3d:bf:0d:80:ad:25:41:e4:
ce:ee:dc:f3:11:32:f2:50:aa:42:fc:22:71:53:93:5e:f9:48:
22:68:94:fc:a6:e2:25:5e:9c:70:13:9a:90:43:d7:62:84:21:
2f:ec:7f:50:89:51:b5:50:07:c7:2f:1c:c6:a2:36:97:04:56:
a2:4c:e8:40:ed:b4:64:88:2f:73:a7:d6:87:9c:73:b3:c6:45:
9e:5e:9d:fd:20:12:8f:20:eb:a0:a6:f9:58:db:9a:b7:1d:99:
58:5e:21:31:56:53:db:9b:d9:39:02:7f:e2:28:15:28:9b:e2:
e6:c4:de:f2:c8:31:bb:aa:1d:82:62:92:22:55:71:81:6a:76:
3a:4e:a2:b6:b0:62:95:ea:fc:3c:bf:a8:e9:64:8c:e4:0b:d2:
f3:fa:c2:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 22:27:26 2026 by rpki-client