Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/ldDNssW1F5zn_Orwx-FgyjHW1Rc.roa
File: ldDNssW1F5zn_Orwx-FgyjHW1Rc.roa (raw, json)
Hash identifier: rfpaBdfwCIYHHptSdIg73xsxFK5IMMlEcNsY0b1peRs=
Subject key identifier: 95:D0:CD:B2:C5:B5:17:9C:E7:FC:EA:F0:C7:E1:60:CA:31:D6:D5:17
Certificate issuer: /CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Certificate serial: 01A169D0318F846793B494F157D83253CC9B
Authority key identifier: 55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/ldDNssW1F5zn_Orwx-FgyjHW1Rc.roa
Signing time: Fri 23 Oct 2026 17:30:14 +0000
ROA not before: Fri 23 Oct 2026 17:30:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202492
IP address blocks: 83.147.196.0/22 maxlen: 24
83.147.204.0/22 maxlen: 24
83.147.208.0/22 maxlen: 24
83.147.218.0/23 maxlen: 24
83.147.220.0/23 maxlen: 24
83.147.236.0/22 maxlen: 24
91.186.204.0/22 maxlen: 22
94.241.144.0/21 maxlen: 21
94.241.188.0/22 maxlen: 22
178.253.0.0/21 maxlen: 24
178.253.14.0/23 maxlen: 24
178.253.18.0/23 maxlen: 24
178.253.20.0/23 maxlen: 24
178.253.24.0/23 maxlen: 24
178.253.28.0/23 maxlen: 24
178.253.30.0/24 maxlen: 24
178.253.36.0/23 maxlen: 24
178.253.46.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:69:d0:31:8f:84:67:93:b4:94:f1:57:d8:32:53:cc:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Validity
Not Before: Oct 23 17:30:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=95d0cdb2c5b5179ce7fceaf0c7e160ca31d6d517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:8d:52:b6:0e:1f:f6:8f:c8:52:fe:94:98:64:
f1:77:3e:0f:af:52:55:fd:45:4f:49:40:db:5b:e3:
59:13:b1:70:1e:05:37:5c:c1:e8:f2:61:14:16:73:
84:da:3b:4d:c5:13:46:ab:3d:a8:5f:7d:4e:89:9c:
7e:35:6a:d2:eb:9d:42:bb:a8:28:2a:d7:77:9e:4c:
d3:67:89:5b:5d:82:3f:0d:2e:4b:c1:ab:d6:7b:14:
2d:98:ec:36:40:34:67:94:e8:34:d6:72:36:e9:89:
36:4a:c8:28:c3:60:ee:02:e6:e1:a7:e7:6e:17:e9:
58:4e:30:80:f2:4d:a5:e6:ce:9f:d2:8d:ab:71:f7:
07:98:02:b5:93:82:e8:79:b4:a9:45:51:e3:35:4d:
42:15:40:48:6d:ef:32:0a:e8:17:22:01:75:a4:98:
d0:d5:75:02:2e:8b:82:71:a0:75:07:01:e1:e6:ba:
aa:d2:1b:b9:5b:d6:1d:d1:3c:5c:55:e7:6a:71:2c:
9d:3a:f4:4f:70:de:af:92:2d:e1:2b:fe:92:25:c7:
51:5b:ab:dc:46:06:f5:c8:bc:b9:38:b3:a5:0e:fd:
14:9c:d6:82:27:35:cf:f6:f2:f3:9f:c7:27:7b:7f:
d3:4c:25:e6:41:e7:54:48:e6:58:4d:a2:de:b0:42:
bf:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:D0:CD:B2:C5:B5:17:9C:E7:FC:EA:F0:C7:E1:60:CA:31:D6:D5:17
X509v3 Authority Key Identifier:
keyid:55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/ldDNssW1F5zn_Orwx-FgyjHW1Rc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.196.0/22
83.147.204.0-83.147.211.255
83.147.218.0-83.147.221.255
83.147.236.0/22
91.186.204.0/22
94.241.144.0/21
94.241.188.0/22
178.253.0.0/21
178.253.14.0/23
178.253.18.0-178.253.21.255
178.253.24.0/23
178.253.28.0-178.253.30.255
178.253.36.0/23
178.253.46.0/23
Signature Algorithm: sha256WithRSAEncryption
ac:d6:a3:a1:9b:bc:f2:58:aa:87:08:1f:f2:41:00:b7:1e:1c:
65:82:c2:2b:b0:33:54:16:f0:d4:ce:b0:72:dd:81:00:d2:f4:
70:59:94:06:ff:f7:3c:0a:3f:ea:37:3e:1c:1d:d4:bf:f6:f2:
e3:9e:59:72:07:c7:65:6c:4a:1b:6d:2c:07:e1:91:24:03:81:
99:5d:bf:d5:ef:b7:7a:25:8a:86:d3:0b:9b:da:d6:b3:32:b2:
e0:23:31:ff:79:68:44:31:82:f3:41:45:56:65:de:5e:ec:de:
8d:70:35:d7:ed:d1:79:9e:bf:8b:96:8f:d3:39:b7:be:64:be:
f1:1a:47:4a:2e:0a:fd:ea:54:6f:3d:26:52:06:5a:78:96:cb:
5c:80:b0:94:22:f5:51:55:21:a4:ec:1b:f5:30:99:2f:26:26:
99:8b:76:51:b2:e2:d8:e1:ec:6b:57:49:a3:b2:ab:9f:55:7d:
9a:33:d2:2e:6b:9d:61:06:cd:da:c3:5e:60:c3:c3:77:00:0d:
4b:e5:4b:fe:eb:b0:45:f8:61:fd:ae:b7:76:32:4d:04:a0:16:
ac:bb:1a:6a:39:53:93:ed:a0:7e:03:ec:28:98:cd:d3:69:ec:
e6:49:b2:d7:36:f4:15:ac:15:a2:f4:af:cb:76:d1:db:fc:34:
38:db:0a:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:51:34 2026 by rpki-client