Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/bNU0SqVbRFQ2gEH6BxoDbPzm9WM.roa
File: bNU0SqVbRFQ2gEH6BxoDbPzm9WM.roa (raw, json)
Hash identifier: fkkQLcdywpnUBXvtnTMYngIO2YWFx3MS4IUP7TbpXWE=
Subject key identifier: 6C:D5:34:4A:A5:5B:44:54:36:80:41:FA:07:1A:03:6C:FC:E6:F5:63
Certificate issuer: /CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Certificate serial: 01A169CD7261E0A7D6AA0CACEE131095EE89
Authority key identifier: 55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/bNU0SqVbRFQ2gEH6BxoDbPzm9WM.roa
Signing time: Fri 23 Oct 2026 17:27:14 +0000
ROA not before: Fri 23 Oct 2026 17:27:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56876
IP address blocks: 83.147.212.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:69:cd:72:61:e0:a7:d6:aa:0c:ac:ee:13:10:95:ee:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Validity
Not Before: Oct 23 17:27:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6cd5344aa55b4454368041fa071a036cfce6f563
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:83:17:58:39:4a:9a:14:2f:c2:5e:27:3f:52:
4e:bb:ee:b4:69:8a:28:3a:88:fc:07:15:4e:3d:94:
4c:4e:84:b6:20:32:8e:25:36:1c:49:61:4c:8f:7c:
c7:df:90:76:52:7d:33:1c:e0:fe:d3:f8:b4:2a:52:
52:32:6e:42:49:58:2e:31:b6:10:95:8e:63:7f:96:
8e:1d:ef:06:b4:2a:1e:8f:01:f6:25:52:1c:33:e8:
c9:ac:87:04:ce:c6:19:cd:13:52:ab:3a:38:f7:75:
1f:33:52:cf:32:9f:ec:0c:a4:34:53:c1:9e:bb:66:
47:4d:4b:12:ad:6b:4e:5e:e0:b0:dc:0e:84:e4:b2:
73:1e:01:6d:22:c4:45:7c:4a:53:cb:5c:e5:4a:53:
98:ba:7f:6f:40:56:7d:78:d3:02:b1:cf:9a:b0:fa:
00:1c:9b:50:f7:61:2e:0a:96:82:5b:dd:34:d7:77:
3e:47:44:03:56:50:c1:33:28:6d:52:0d:89:48:eb:
41:64:07:8b:7b:7d:fd:3f:be:47:c1:40:37:53:1a:
20:8c:0d:f0:0a:25:97:17:52:b2:89:f0:44:5b:d4:
53:2d:f5:51:fa:62:7b:d7:2f:f1:d8:1d:0c:8a:8a:
d0:cf:7c:ee:2d:64:9f:a3:97:04:54:57:6b:18:cf:
e2:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:D5:34:4A:A5:5B:44:54:36:80:41:FA:07:1A:03:6C:FC:E6:F5:63
X509v3 Authority Key Identifier:
keyid:55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/bNU0SqVbRFQ2gEH6BxoDbPzm9WM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.212.0/22
Signature Algorithm: sha256WithRSAEncryption
86:4f:55:d4:37:cf:7d:fd:42:a9:8f:46:4e:98:91:6c:98:a6:
56:b5:fe:38:51:a9:b5:70:a5:af:0d:c3:c2:9a:e2:ff:2b:7a:
3b:e9:dc:42:df:01:a3:ae:bf:f0:4f:54:38:28:a6:67:a9:fd:
81:26:7d:43:a8:e3:87:9c:09:07:74:d6:ab:1f:ae:68:e2:50:
38:9a:1f:3e:2c:c5:58:bd:d6:bc:ab:c6:dc:03:80:84:9a:d2:
cd:13:99:85:8d:4a:4d:cd:66:ae:da:9f:67:07:09:e7:69:9b:
08:04:8f:4a:69:78:2e:bb:59:b5:97:1e:25:8f:af:50:e8:9e:
7c:bc:9e:f3:c4:44:c9:ce:31:a4:eb:dc:b6:f4:cd:11:16:5a:
3d:49:ae:c4:5f:11:c6:71:74:3f:c3:f9:1d:4f:54:ba:15:41:
68:e9:92:ad:56:fd:42:91:68:38:9d:af:22:d5:0f:96:a8:5c:
4a:b5:91:90:c2:8b:7c:03:09:4a:3e:d0:dc:50:71:b6:c9:60:
5e:e7:e5:44:55:fd:ff:30:e7:ba:7e:89:ee:ce:36:bc:f4:ee:
c8:a3:76:b7:64:03:58:c9:fd:84:a9:5d:11:4e:60:c6:e9:cd:
14:42:26:74:49:a9:0d:87:97:1f:8f:35:4a:7d:18:ee:03:40:
6f:7e:a5:3d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaFpzXJh4KfWqgys7hMQle6JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1YmFmMjY5Njc1MTBiM2M1MmU0NmQxZGM1OTM5NjdjZGYy
OWY5YzkwHhcNMjYxMDIzMTcyNzE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2Y2Q1MzQ0YWE1NWI0NDU0MzY4MDQxZmEwNzFhMDM2Y2ZjZTZmNTYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4MXWDlKmhQvwl4nP1JOu+60aYoo
Ooj8BxVOPZRMToS2IDKOJTYcSWFMj3zH35B2Un0zHOD+0/i0KlJSMm5CSVguMbYQ
lY5jf5aOHe8GtCoejwH2JVIcM+jJrIcEzsYZzRNSqzo493UfM1LPMp/sDKQ0U8Ge
u2ZHTUsSrWtOXuCw3A6E5LJzHgFtIsRFfEpTy1zlSlOYun9vQFZ9eNMCsc+asPoA
HJtQ92EuCpaCW90013c+R0QDVlDBMyhtUg2JSOtBZAeLe339P75HwUA3UxogjA3w
CiWXF1KyifBEW9RTLfVR+mJ71y/x2B0MiorQz3zuLWSfo5cEVFdrGM/iwwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGzVNEqlW0RUNoBB+gcaA2z85vVjMB8GA1UdIwQY
MBaAFFW68mlnUQs8UuRtHcWTlnzfKfnJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmJyeWFXZFJDenhTNUcwZHhaT1dmTjhwLWNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS81YWE0ZGMtZDE4NC00ZGI0LTllMTAt
NDlmOTgxZWU1OTgxLzEvYk5VMFNxVmJSRlEyZ0VINkJ4b0RiUHptOVdNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS81YWE0ZGMtZDE4NC00ZGI0LTllMTAtNDlmOTgxZWU1OTgx
LzEvVmJyeWFXZFJDenhTNUcwZHhaT1dmTjhwLWNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCU5PUMA0G
CSqGSIb3DQEBCwUAA4IBAQCGT1XUN899/UKpj0ZOmJFsmKZWtf44Uam1cKWvDcPC
muL/K3o76dxC3wGjrr/wT1Q4KKZnqf2BJn1DqOOHnAkHdNarH65o4lA4mh8+LMVY
vda8q8bcA4CEmtLNE5mFjUpNzWau2p9nBwnnaZsIBI9KaXguu1m1lx4lj69Q6J58
vJ7zxETJzjGk69y29M0RFlo9Sa7EXxHGcXQ/w/kdT1S6FUFo6ZKtVv1CkWg4na8i
1Q+WqFxKtZGQwot8AwlKPtDcUHG2yWBe5+VEVf3/MOe6fonuzja89O7Io3a3ZANY
yf2EqV0RTmDG6c0UQiZ0SakNh5cfjzVKfRjuA0BvfqU9
-----END CERTIFICATE-----
Generated at Mon Oct 26 08:54:13 2026 by rpki-client