Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/bXd27v7vseLcs1p86WVPiFf581g.roa
File: bXd27v7vseLcs1p86WVPiFf581g.roa (raw, json)
Hash identifier: ph4o+crLTIHbzjOiEQPAhmzNlIZlfryhefh40UAzDLM=
Subject key identifier: 6D:77:76:EE:FE:EF:B1:E2:DC:B3:5A:7C:E9:65:4F:88:57:F9:F3:58
Certificate issuer: /CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Certificate serial: 01A03E7719DE152B3342A531972EF32AFB66
Authority key identifier: 55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/bXd27v7vseLcs1p86WVPiFf581g.roa
Signing time: Wed 26 Aug 2026 14:26:27 +0000
ROA not before: Wed 26 Aug 2026 14:26:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 45102
IP address blocks: 94.241.160.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3e:77:19:de:15:2b:33:42:a5:31:97:2e:f3:2a:fb:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Validity
Not Before: Aug 26 14:26:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6d7776eefeefb1e2dcb35a7ce9654f8857f9f358
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:bd:8f:01:b4:7c:53:db:10:c4:ee:56:e7:52:
19:4e:57:b0:88:57:1e:15:13:83:41:c4:44:e6:94:
15:36:1f:0a:04:37:30:0f:b4:04:f4:b3:bf:3b:bb:
26:c0:4d:fe:5a:a8:5c:68:0d:2d:cb:89:fb:87:de:
58:22:9f:e2:4d:ea:d3:1f:82:4e:28:5b:74:0b:f2:
f4:5d:6f:bf:c4:41:67:6b:9f:6f:cf:16:57:34:7a:
52:c1:53:2f:75:09:72:71:c0:2a:c3:8b:bd:b9:08:
ad:c1:53:d8:48:b2:75:22:46:01:3d:12:de:e5:f6:
91:f5:8d:f4:6f:f2:b7:7b:fd:a9:bb:95:3e:fc:da:
ce:89:b5:d3:28:56:1d:77:19:ef:f5:14:00:f7:bd:
9a:57:aa:94:9f:3d:c2:bf:6f:80:59:d3:86:7b:f9:
b3:d9:35:6e:64:54:28:c7:d9:b7:c9:ca:d8:75:90:
50:7e:b5:52:e0:d8:ea:35:72:64:c4:f4:83:df:b8:
0f:b4:39:fb:b8:cd:77:49:fb:93:05:83:d4:9c:32:
79:7a:df:ce:9e:f6:6d:61:92:33:f5:85:62:54:5d:
4b:2b:b7:96:ef:f1:1d:4d:af:ea:47:1f:13:01:ff:
09:e5:cf:f0:9f:17:eb:8e:46:63:78:7c:f3:07:a2:
56:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:77:76:EE:FE:EF:B1:E2:DC:B3:5A:7C:E9:65:4F:88:57:F9:F3:58
X509v3 Authority Key Identifier:
keyid:55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/bXd27v7vseLcs1p86WVPiFf581g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.241.160.0/23
Signature Algorithm: sha256WithRSAEncryption
0a:09:5b:fb:3e:ec:37:8e:26:2d:bb:0b:e3:a0:07:04:da:4e:
0d:0a:2c:04:88:05:10:53:9d:3d:07:f9:1a:3c:84:f0:fd:db:
b9:fd:1f:0b:a0:11:7f:f0:59:63:67:3b:4c:9d:13:c6:5c:3a:
19:ea:a0:89:06:c9:cd:25:e8:96:f7:8b:5b:ad:4a:8a:0f:c8:
26:0b:f6:ea:ab:6d:28:e0:6f:db:3e:d3:f3:32:17:9f:8c:b0:
52:a1:a8:08:4d:08:77:de:6d:44:81:30:38:d7:9b:dc:f8:7a:
68:b2:d6:c9:e2:c5:03:a0:d2:f5:48:7e:e2:7b:d6:8d:01:2b:
13:ee:7e:a3:00:e6:c8:78:5b:25:16:f0:2b:10:65:b9:46:47:
57:3b:c1:c6:a3:30:46:c7:61:ee:f4:0a:a3:00:d0:3e:98:9f:
b7:6a:5a:23:bf:79:a8:4d:05:e0:6f:f0:72:38:5e:81:7a:2e:
80:ea:54:fd:62:e8:f3:72:b7:21:1c:54:98:fb:ce:2c:50:4b:
62:3a:16:6b:df:54:47:99:2d:dd:7f:cd:0d:9f:d8:8c:ea:7a:
e5:a4:ec:3b:b9:c0:88:a0:ba:75:57:ca:06:89:19:8d:6c:12:
7b:32:ca:65:38:b3:39:b7:fa:87:9b:c8:84:fa:29:02:57:8d:
1a:40:30:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:19:50 2026 by rpki-client