Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/u-ddoqXehtb5m6JTXCSF4HyFY8E.roa
File: u-ddoqXehtb5m6JTXCSF4HyFY8E.roa (raw, json)
Hash identifier: UyjZhoeMOYj569cGU0irTIkbnK1IY9Bk6c1YVd6j+D8=
Subject key identifier: BB:E7:5D:A2:A5:DE:86:D6:F9:9B:A2:53:5C:24:85:E0:7C:85:63:C1
Certificate issuer: /CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Certificate serial: 019E3654F06E55D8E23EAFFACC66C1A390CD
Authority key identifier: 55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/u-ddoqXehtb5m6JTXCSF4HyFY8E.roa
Signing time: Sun 17 May 2026 14:26:36 +0000
ROA not before: Sun 17 May 2026 14:26:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56815
IP address blocks: 91.186.192.0/24 maxlen: 24
185.140.240.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 06:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:36:54:f0:6e:55:d8:e2:3e:af:fa:cc:66:c1:a3:90:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Validity
Not Before: May 17 14:26:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bbe75da2a5de86d6f99ba2535c2485e07c8563c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:10:76:ee:0a:f6:57:fc:bb:b0:7a:a4:91:c9:
d8:94:a5:86:97:01:fa:c8:95:ef:ed:69:00:51:a5:
c8:17:dd:8b:3d:87:7b:96:78:10:7b:f2:cd:2b:64:
7f:5d:c2:9b:48:1c:66:9b:ac:a1:33:cc:56:b2:92:
a4:f6:8b:2f:09:cd:9b:fd:78:b6:e1:bc:ae:a8:15:
d7:75:ee:7a:c5:8c:70:af:40:1e:66:d6:13:cb:33:
66:f8:e8:78:38:bc:38:9c:cf:8c:5b:25:3c:d7:51:
5a:5c:be:00:af:7f:30:41:10:41:4d:51:ee:c9:b3:
63:13:65:3c:7b:71:17:13:4e:ee:c0:d7:2b:7a:d8:
66:36:84:a8:1e:d6:50:1e:21:55:fe:ea:c2:36:52:
dc:81:fb:27:2b:a2:b9:34:ca:20:d4:ab:e6:fd:9a:
4c:11:6c:ac:28:e1:fa:07:70:35:54:0f:78:36:ad:
5f:6e:d0:23:d2:94:72:43:bf:0b:d2:ed:f6:31:02:
9e:e7:2a:dc:e6:b9:a7:68:39:42:88:a4:4a:1e:bd:
ec:ca:a8:58:6b:30:10:68:1e:08:81:6b:72:25:9a:
f4:9e:88:a7:bc:14:4a:80:64:69:0e:d7:6c:54:1c:
d5:76:a2:bc:2d:21:0d:ab:8d:a0:fc:19:1a:29:53:
49:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:E7:5D:A2:A5:DE:86:D6:F9:9B:A2:53:5C:24:85:E0:7C:85:63:C1
X509v3 Authority Key Identifier:
keyid:55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/u-ddoqXehtb5m6JTXCSF4HyFY8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.186.192.0/24
185.140.240.0/22
Signature Algorithm: sha256WithRSAEncryption
b0:97:74:f3:30:8c:27:91:9b:28:b6:d4:75:0f:18:c0:72:48:
5a:9f:61:c9:47:f1:16:51:03:4f:10:14:59:88:9a:64:ef:9f:
1a:0c:2e:38:44:6d:98:84:4a:c6:df:1c:54:8b:5f:e3:43:71:
54:86:ff:3f:5d:6f:3a:43:65:1c:d9:1a:aa:37:02:dd:0a:a6:
1b:94:f6:cb:ac:81:b7:36:b4:4d:ed:91:9a:50:6b:40:5f:14:
46:2d:a5:9e:b5:22:22:b9:40:24:53:c4:ad:4a:ce:04:2e:fe:
6c:48:ee:72:fc:a2:81:a6:d7:1a:58:b8:eb:23:ae:c3:9a:df:
e8:7d:e0:44:d5:a0:59:d0:36:72:b6:53:b7:18:4e:cf:96:66:
e0:5a:4e:67:36:c0:d5:25:47:1c:e3:f2:8d:08:b8:50:9b:89:
82:a0:06:f5:6b:f1:83:1f:ad:52:23:17:dd:63:fd:aa:29:46:
3e:eb:8c:5f:a1:85:dd:8d:50:dc:d3:c0:11:3b:ae:69:db:22:
61:61:d9:e3:72:63:41:13:57:04:94:10:3a:2e:17:04:71:1e:
27:db:30:2e:5f:5f:c1:89:09:41:72:3a:98:8e:01:6a:ac:e1:
d0:bc:a2:56:de:25:27:c9:c6:a3:e9:5f:70:83:84:06:69:21:
73:d2:e8:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:59:24 2026 by rpki-client