Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/igashBcbuGL5tQm2ViHC4mm4I_8.roa
File: igashBcbuGL5tQm2ViHC4mm4I_8.roa (raw, json)
Hash identifier: /1bDsE552FI0TcEYgogNYmiBlJBza396B5LxJxh8+SY=
Subject key identifier: 8A:06:AC:84:17:1B:B8:62:F9:B5:09:B6:56:21:C2:E2:69:B8:23:FF
Certificate issuer: /CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Certificate serial: 01A169C8DEC59CE0B7D3CA5A92DF9BF48A01
Authority key identifier: 55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/igashBcbuGL5tQm2ViHC4mm4I_8.roa
Signing time: Fri 23 Oct 2026 17:22:14 +0000
ROA not before: Fri 23 Oct 2026 17:22:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5065
IP address blocks: 83.147.223.0/24 maxlen: 24
94.241.136.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:69:c8:de:c5:9c:e0:b7:d3:ca:5a:92:df:9b:f4:8a:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Validity
Not Before: Oct 23 17:22:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8a06ac84171bb862f9b509b65621c2e269b823ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ec:6c:ed:b6:14:d6:be:fa:ad:0a:7f:df:2e:
61:68:94:a8:3a:8f:46:91:a9:a2:66:c4:2e:b2:55:
d4:11:6c:6e:34:53:31:cd:f9:93:fc:ff:af:7b:cf:
80:fc:36:f3:e8:4d:94:11:41:1d:2a:db:d1:1a:48:
6f:12:f1:d3:1d:c7:9d:44:bc:6d:4d:79:87:79:52:
59:ed:86:39:fe:37:2a:64:79:d8:72:f1:41:6a:c5:
2d:c8:f3:fe:f3:cf:f8:f6:55:9d:19:73:ce:61:17:
fd:01:c9:d0:2b:96:ab:66:06:f5:61:16:77:e8:00:
93:b5:b8:c6:71:af:ae:e9:80:57:ef:f6:cc:43:93:
a5:f7:89:03:9d:9c:9c:7c:20:fa:ac:e2:ec:b8:8f:
f5:6b:b5:a0:f8:9b:af:ad:46:89:b5:fa:73:61:15:
f7:df:cc:88:32:99:3a:5c:01:f2:2d:8f:1a:50:e6:
a5:82:4a:0e:95:31:af:e0:15:3b:42:aa:02:4e:38:
dc:ef:dc:cd:45:1b:22:fc:91:0f:84:9a:73:9b:46:
7e:04:44:99:c5:49:f6:7e:fe:4e:dd:1b:da:f6:6c:
55:3e:29:c9:1f:aa:85:11:20:ec:08:71:46:22:d0:
85:d4:9f:0e:f1:0e:05:15:19:e8:da:83:30:2a:04:
74:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:06:AC:84:17:1B:B8:62:F9:B5:09:B6:56:21:C2:E2:69:B8:23:FF
X509v3 Authority Key Identifier:
keyid:55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/igashBcbuGL5tQm2ViHC4mm4I_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.223.0/24
94.241.136.0/23
Signature Algorithm: sha256WithRSAEncryption
6a:c8:e5:91:f4:4d:4d:6b:69:2d:49:1a:fc:04:e6:58:d3:fa:
e4:78:06:9d:e1:e5:68:b9:28:e9:f3:b6:00:bb:a4:58:c9:d4:
33:1e:36:fd:58:24:89:66:6e:33:4d:5c:f8:63:24:ba:42:71:
94:cc:61:af:5d:1c:30:9e:30:67:60:e8:c7:b1:87:2b:11:5c:
9d:e0:08:c6:68:3b:cb:16:6c:f2:76:81:d2:3d:2f:8b:49:ec:
c5:12:c4:56:18:db:4e:43:af:22:f9:48:c1:f2:af:bd:36:2d:
c0:aa:47:1b:f1:57:f7:52:dc:0e:d5:21:f2:66:1a:1e:d1:a3:
ff:c1:f8:cd:ea:10:5c:d2:5a:4b:cd:72:1b:45:e6:d7:92:4f:
d3:bd:82:7e:82:99:be:79:fb:5f:16:d8:86:7b:d7:de:90:f7:
41:9e:03:09:3a:fe:ab:1b:46:d3:3c:ea:fc:5e:a3:f2:f1:58:
50:d1:6d:0e:2f:07:f0:db:a9:ac:f9:bf:fa:cf:db:4d:7d:9d:
aa:d9:d7:d1:62:64:9d:aa:59:0b:3d:83:3c:f0:3d:c5:10:4a:
56:72:4a:e0:8d:fb:16:ca:6f:2b:e8:ce:c1:37:ce:ed:01:c8:
a5:ba:de:24:4b:74:a6:7c:08:d8:73:57:95:de:c5:ca:9f:d0:
75:58:bb:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:51:12 2026 by rpki-client