Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/dHzEcFxSEc-uf0H4Sg4xKlWh-4k.roa
File: dHzEcFxSEc-uf0H4Sg4xKlWh-4k.roa (raw, json)
Hash identifier: 3i/pf9h7ZiLSa+8padVIfplVfi9yXsLywXZ6KeAIQnE=
Subject key identifier: 74:7C:C4:70:5C:52:11:CF:AE:7F:41:F8:4A:0E:31:2A:55:A1:FB:89
Certificate issuer: /CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Certificate serial: 01A16FFABD4CCFB6256DAA340ABF0C30959E
Authority key identifier: 55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/dHzEcFxSEc-uf0H4Sg4xKlWh-4k.roa
Signing time: Sat 24 Oct 2026 22:14:25 +0000
ROA not before: Sat 24 Oct 2026 22:14:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16200
IP address blocks: 83.147.193.0/24 maxlen: 24
2a14:ed00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6f:fa:bd:4c:cf:b6:25:6d:aa:34:0a:bf:0c:30:95:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Validity
Not Before: Oct 24 22:14:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=747cc4705c5211cfae7f41f84a0e312a55a1fb89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5f:98:a0:e2:f7:0a:6d:d4:bc:c9:22:2e:52:
b7:20:28:09:a6:49:3a:d1:ad:49:a3:d5:63:62:35:
e8:08:3d:2b:60:26:a9:69:32:34:a1:d9:95:40:26:
d8:d5:52:08:c7:b7:ae:ca:67:43:2f:42:ad:5d:25:
74:70:79:b1:20:60:f2:6b:f0:55:48:3c:c7:7e:67:
ee:be:91:5d:a0:c0:06:2a:c4:94:aa:cb:ef:62:22:
3e:08:0c:13:0c:70:85:85:5a:a4:17:86:4a:e4:7f:
0e:11:e2:61:69:ed:3b:98:d3:41:f0:35:a0:73:04:
26:47:ad:d6:16:f8:83:c8:b1:6e:45:09:55:7d:35:
3a:9d:03:c1:8e:ef:07:0b:49:23:2b:03:88:e7:80:
13:81:70:b8:de:f0:01:d8:d7:88:de:51:55:52:8a:
bd:87:02:b9:e7:fa:6a:1c:e5:25:ba:ff:7f:c1:40:
a0:b2:3a:94:63:fc:01:be:1d:5f:55:ca:5e:9d:0b:
be:43:de:c7:5f:3c:75:5b:da:f4:4f:19:87:18:6e:
fa:a4:1a:b2:98:fb:a5:87:b9:10:98:86:ed:6b:d6:
7a:6b:4f:2a:5e:b5:5a:ee:91:5c:b8:fd:15:6e:d8:
58:53:39:e0:cf:39:f3:12:19:ab:6f:67:32:9e:95:
5f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:7C:C4:70:5C:52:11:CF:AE:7F:41:F8:4A:0E:31:2A:55:A1:FB:89
X509v3 Authority Key Identifier:
keyid:55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/dHzEcFxSEc-uf0H4Sg4xKlWh-4k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.193.0/24
IPv6:
2a14:ed00::/29
Signature Algorithm: sha256WithRSAEncryption
08:56:51:07:be:dc:10:17:b0:47:05:76:87:d5:d4:23:97:76:
21:b9:54:1b:28:36:5e:d7:32:dc:2b:0e:b9:04:63:5f:43:b8:
a9:c5:d0:83:30:b8:d2:7f:b2:91:5f:41:4f:60:a7:b2:22:02:
07:05:0e:5d:55:20:56:63:6c:eb:1a:a4:c8:7d:b5:a0:72:d1:
c6:46:1c:25:bb:95:46:45:6c:d6:3b:9b:eb:e7:8b:2e:df:5c:
6c:52:88:ff:fb:80:df:a8:4d:e1:c6:25:25:66:e8:57:23:79:
fb:92:46:14:76:7a:5b:fe:07:fa:da:9c:3a:0b:3d:a1:42:69:
0b:af:28:1e:37:ed:77:9c:95:41:3b:e7:77:65:04:87:c2:7f:
cd:a1:1e:76:f1:44:95:b6:6e:d8:ae:1c:76:ed:28:02:49:80:
5d:b6:e5:23:ce:ae:63:ed:f2:35:7d:e8:f5:05:bc:70:75:a4:
88:6c:e2:08:c0:10:68:22:30:05:21:34:2c:48:d5:4f:5d:f1:
72:0c:df:0a:d1:9e:0f:23:29:b7:f7:46:f6:77:08:20:cc:4a:
66:fb:e1:ee:5d:de:23:62:ed:34:67:96:b3:a6:0a:db:a6:98:
3c:ad:c0:3a:80:1e:9a:d1:c6:d8:81:3f:26:02:bf:60:63:1c:
51:1e:8f:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 02:16:21 2026 by rpki-client