Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/hH6SscUVwxOAtyg7v-rtCk2K2X8.roa
File: hH6SscUVwxOAtyg7v-rtCk2K2X8.roa (raw, json)
Hash identifier: Vm7r6NpMDAM8u2USx1pIJnRj/n5G1kZwXAPG6NcZcFs=
Subject key identifier: 84:7E:92:B1:C5:15:C3:13:80:B7:28:3B:BF:EA:ED:0A:4D:8A:D9:7F
Certificate issuer: /CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Certificate serial: 01A1748CC9DCA6DFE2FDB8CBBA13DE0F6D62
Authority key identifier: 55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/hH6SscUVwxOAtyg7v-rtCk2K2X8.roa
Signing time: Sun 25 Oct 2026 19:32:26 +0000
ROA not before: Sun 25 Oct 2026 19:32:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203273
IP address blocks: 83.147.192.0/24 maxlen: 24
83.147.216.0/24 maxlen: 24
83.147.252.0/22 maxlen: 24
83.147.252.0/24 maxlen: 24
83.147.253.0/24 maxlen: 24
83.147.254.0/24 maxlen: 24
83.147.255.0/24 maxlen: 24
91.186.212.0/24 maxlen: 24
91.186.213.0/24 maxlen: 24
91.186.216.0/24 maxlen: 24
91.186.217.0/24 maxlen: 24
91.186.218.0/24 maxlen: 24
91.186.219.0/24 maxlen: 24
178.253.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:74:8c:c9:dc:a6:df:e2:fd:b8:cb:ba:13:de:0f:6d:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Validity
Not Before: Oct 25 19:32:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=847e92b1c515c31380b7283bbfeaed0a4d8ad97f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:dc:2a:26:44:ad:29:a9:47:38:d2:e5:a7:05:
98:3d:ce:5c:a6:d8:9f:4b:57:32:e4:4a:93:3e:84:
00:e8:d1:d9:57:12:0a:a5:63:d1:2d:99:50:96:82:
ea:87:fc:bb:29:34:3c:91:00:d1:72:09:50:5f:8b:
09:85:a1:0e:08:38:16:93:96:a0:f1:e7:ca:33:cf:
d5:28:1d:b3:6c:e4:30:29:f1:b8:79:e8:1a:7e:94:
6d:9d:40:2a:1e:c4:fe:cb:4b:2d:2d:45:5c:c4:cf:
72:a8:e1:2c:37:35:95:11:61:fc:5a:a4:20:2e:31:
25:ce:74:1d:c5:76:36:77:bd:23:57:1b:e4:78:f2:
39:ea:18:f6:57:f8:eb:b9:e6:5f:c2:d3:06:a3:27:
14:31:af:cb:1a:68:37:27:14:73:cd:1b:d5:a8:d0:
bf:cb:4a:40:28:c2:71:c0:16:aa:d7:a6:78:69:4c:
96:41:6a:67:4a:23:85:98:51:38:e8:7b:30:bb:b1:
0d:b4:5a:1c:61:22:84:48:94:1b:34:ba:94:b7:7b:
fd:7e:0f:52:bc:d4:10:76:1b:7b:2e:ed:52:dd:9e:
2a:85:43:29:e4:76:37:fb:ad:8e:87:34:55:6f:d4:
bd:2a:04:ad:bc:35:12:99:07:af:8d:65:51:bd:92:
6b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:7E:92:B1:C5:15:C3:13:80:B7:28:3B:BF:EA:ED:0A:4D:8A:D9:7F
X509v3 Authority Key Identifier:
keyid:55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/hH6SscUVwxOAtyg7v-rtCk2K2X8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.192.0/24
83.147.216.0/24
83.147.252.0/22
91.186.212.0/23
91.186.216.0/22
178.253.55.0/24
Signature Algorithm: sha256WithRSAEncryption
93:72:1e:29:8a:48:72:8b:ac:ad:30:be:71:bd:18:8e:c5:6d:
22:7a:37:67:39:8c:f2:05:e0:2f:e2:62:01:60:2e:35:1e:fd:
a0:06:ee:bb:7f:b4:d9:0f:1f:ce:02:dd:29:17:dc:ca:db:29:
03:41:d2:3c:e0:28:0e:d3:00:fc:00:7b:11:db:6e:4b:16:20:
be:34:e3:81:68:36:68:f6:74:26:c7:74:e4:59:35:94:f8:8c:
a9:ce:fa:e7:a7:b3:72:8d:01:0d:50:36:ae:d8:91:62:d1:49:
7a:4e:31:06:c8:13:8f:87:eb:01:3a:91:bb:51:9e:b9:37:af:
20:bf:e4:49:e5:c9:c1:0b:b4:79:70:f9:26:9d:a4:9d:2c:e4:
7c:2a:6d:bd:bd:b0:c0:f0:d6:cd:cd:1d:95:2e:6d:9f:71:77:
2a:86:ff:5a:24:e6:21:dd:fb:d6:72:4c:25:e3:20:68:0f:55:
e9:ae:11:e2:86:3a:99:e6:01:94:9f:79:76:c8:0d:62:fa:e4:
80:dd:b5:10:77:0b:fc:40:59:fc:40:9e:85:de:8a:62:38:5b:
80:77:16:82:71:c6:76:ce:a5:e5:49:00:c2:97:0f:73:8a:c0:
b5:a9:7c:96:8d:8f:8c:22:90:dc:57:4b:5e:3b:15:87:cd:57:
b9:9d:25:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 05:11:27 2026 by rpki-client