Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/lhGjYOvG7xRCQmocLGQ9crs3FQ8.roa
File: lhGjYOvG7xRCQmocLGQ9crs3FQ8.roa (raw, json)
Hash identifier: wbll+wfxs1SRTXpcNJoaJ7wD7gLeA4C2gmervo+Xpl4=
Subject key identifier: 96:11:A3:60:EB:C6:EF:14:42:42:6A:1C:2C:64:3D:72:BB:37:15:0F
Certificate issuer: /CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Certificate serial: 019F05339CD27C1DB84198C53AE370978433
Authority key identifier: 55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/lhGjYOvG7xRCQmocLGQ9crs3FQ8.roa
Signing time: Fri 26 Jun 2026 18:31:36 +0000
ROA not before: Fri 26 Jun 2026 18:31:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 91.186.210.0/23 maxlen: 24
94.241.164.0/23 maxlen: 24
178.253.12.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 00:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:05:33:9c:d2:7c:1d:b8:41:98:c5:3a:e3:70:97:84:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Validity
Not Before: Jun 26 18:31:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9611a360ebc6ef1442426a1c2c643d72bb37150f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:96:44:47:21:68:14:ae:d8:31:67:c0:1f:e7:
5b:38:eb:48:37:c3:10:a2:2e:e8:1d:11:1d:ab:60:
0c:98:f2:00:c2:75:c1:3c:b6:47:17:7f:19:ff:9b:
31:96:42:fa:75:a6:fb:bc:2c:6a:5a:02:b0:07:6e:
40:87:33:e7:f6:5c:33:e9:0d:51:6c:fd:3e:0a:0e:
5b:2d:01:b4:92:bc:7b:d8:9e:9c:44:64:3b:94:97:
0f:60:32:9b:dd:8c:f3:61:60:58:86:f5:61:f6:ec:
a0:6b:39:01:61:67:b7:7f:ce:73:a6:15:9d:9a:20:
90:7d:5d:44:07:62:f3:6f:0e:4e:cc:71:41:74:be:
fb:b5:e9:b0:4a:ae:bf:4d:7f:8f:a4:51:fa:6f:cb:
c5:b4:f7:ef:2f:96:1a:76:e6:a0:c6:de:74:71:9c:
d7:27:45:fb:66:57:7b:77:b1:23:87:03:f1:44:e0:
f0:35:36:70:51:91:fd:63:9c:65:0c:6c:71:bb:e9:
5b:f6:07:d7:0f:40:6b:62:02:40:4a:c5:5e:25:03:
cd:8c:19:78:28:ff:4a:1c:35:91:db:4c:a6:db:60:
65:3d:1d:5a:cf:a6:a9:c3:0b:52:0c:6a:4c:16:44:
10:ff:9e:14:56:72:2c:05:48:00:3c:ab:10:78:0c:
1e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:11:A3:60:EB:C6:EF:14:42:42:6A:1C:2C:64:3D:72:BB:37:15:0F
X509v3 Authority Key Identifier:
keyid:55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/lhGjYOvG7xRCQmocLGQ9crs3FQ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.186.210.0/23
94.241.164.0/23
178.253.12.0/23
Signature Algorithm: sha256WithRSAEncryption
aa:37:fd:38:42:0b:a7:c5:ae:79:97:fb:ab:c5:ea:79:84:f1:
ee:0c:2b:c4:e6:10:76:f9:8d:2b:79:ec:84:03:16:5b:ae:f6:
9a:0e:2b:7e:be:13:5b:a2:20:74:ac:8c:3c:88:84:1f:30:5e:
3a:56:ae:7a:8a:2b:cb:cb:07:78:76:2c:a8:91:26:4a:0f:e8:
14:cf:39:73:1a:9f:72:74:14:14:a4:81:78:22:5a:11:08:21:
61:05:66:38:19:25:66:6f:9a:98:0f:82:ca:4e:6f:85:b7:21:
d7:5c:0e:6b:d1:63:04:fb:f1:6b:cb:49:c4:b7:94:20:61:a5:
81:7f:a9:19:19:55:43:71:3e:7a:fd:73:a3:44:7e:a4:93:c8:
e7:a0:fa:f5:44:27:a2:5f:79:79:7e:aa:72:a8:ca:3c:f0:ed:
ea:23:e6:da:2a:ac:23:4d:99:f3:7d:dd:8a:e7:1a:db:51:db:
b3:c6:ee:fd:b4:fc:4f:d8:0c:91:c8:8a:33:6d:d7:5f:90:b4:
80:6a:89:45:2d:19:5d:8b:d2:19:01:8a:3d:95:a3:c5:f1:e9:
c2:59:58:8d:6b:5f:97:bc:73:d3:5f:07:e2:10:84:93:f9:68:
66:f4:63:88:c5:15:52:bd:a9:96:b0:bc:fd:39:d1:2f:cb:ba:
5c:71:a7:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 09:59:57 2026 by rpki-client