Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/wXeQ_bqVYSAQNh8BsomXrKWEPnQ.roa
File: wXeQ_bqVYSAQNh8BsomXrKWEPnQ.roa (raw, json)
Hash identifier: DH+8dGO7ELMrzVWRl7HBCDYNR4gBReTuiDSGx/p0Ue4=
Subject key identifier: C1:77:90:FD:BA:95:61:20:10:36:1F:01:B2:89:97:AC:A5:84:3E:74
Certificate issuer: /CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Certificate serial: 019F2877BDD1E30F2EA0AB26C9A5ED69238D
Authority key identifier: 55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/wXeQ_bqVYSAQNh8BsomXrKWEPnQ.roa
Signing time: Fri 03 Jul 2026 14:52:43 +0000
ROA not before: Fri 03 Jul 2026 14:52:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 91.186.210.0/23 maxlen: 24
94.241.164.0/23 maxlen: 24
178.253.12.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:28:77:bd:d1:e3:0f:2e:a0:ab:26:c9:a5:ed:69:23:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Validity
Not Before: Jul 3 14:52:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c17790fdba95612010361f01b28997aca5843e74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1a:48:df:44:bd:fa:fb:37:f9:5b:52:be:32:
5b:3f:81:66:5e:7a:7a:85:8e:b7:a6:20:db:3d:ec:
fc:ef:35:5a:c6:18:dc:a6:20:93:71:bc:23:08:6f:
7b:0d:dd:51:eb:b0:71:6a:0d:e2:c2:1e:a8:8b:69:
1b:8e:6a:da:2e:b1:c1:ab:f5:65:b4:fe:1d:6c:1f:
e1:d6:06:37:9e:7b:94:b8:a0:08:00:ff:5e:3c:d8:
79:91:fb:5b:7e:d6:68:56:19:45:11:34:9b:2e:1d:
50:8e:24:bc:ea:b1:3f:12:bc:87:5a:1f:3a:53:fa:
3a:94:20:5c:99:40:bb:75:ba:e4:43:54:ee:3b:46:
bb:95:97:2a:2c:13:34:8c:0b:f9:ca:17:5d:2e:02:
54:8c:62:f6:ee:63:2e:e0:e8:89:ad:8f:bf:24:e6:
d2:01:d2:f6:72:20:c9:75:7f:00:7d:59:bc:41:3d:
8e:94:0e:18:2f:c1:ed:3a:8f:0e:29:2f:89:fb:b6:
bf:58:e8:41:ae:79:82:14:45:aa:63:b2:c5:74:c0:
00:6a:58:0d:0d:f5:43:9f:5f:cf:9b:f9:01:4a:7f:
2d:9c:db:77:97:a6:91:7f:6c:ad:cc:37:87:b4:95:
b8:18:dd:98:83:9c:20:14:c5:db:a5:f6:f6:35:61:
1d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:77:90:FD:BA:95:61:20:10:36:1F:01:B2:89:97:AC:A5:84:3E:74
X509v3 Authority Key Identifier:
keyid:55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/wXeQ_bqVYSAQNh8BsomXrKWEPnQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.186.210.0/23
94.241.164.0/23
178.253.12.0/23
Signature Algorithm: sha256WithRSAEncryption
1a:03:f8:24:17:88:6c:4b:53:63:2b:65:8d:4c:5b:b5:cc:2e:
ac:0b:07:45:93:6d:f3:fd:ab:e3:8a:08:d8:35:48:95:0e:7e:
24:ba:7c:27:ca:e8:fe:47:4b:41:6f:40:f4:9b:47:bd:72:99:
c2:b7:27:13:ae:cc:72:e7:c7:8b:09:d3:21:b9:be:c5:c1:39:
7b:4b:0e:e5:52:bb:a1:b8:3e:c0:cf:1e:7f:5c:3f:f2:c4:80:
73:7f:fe:6c:b2:5b:ae:52:1e:21:bd:5e:87:4b:e6:ff:90:ee:
dc:8b:82:23:8d:00:6a:d0:f1:d3:60:75:f9:fc:7a:89:dc:15:
6b:52:4b:e3:ba:9c:c1:a2:64:d2:f4:4d:81:5f:58:68:f4:61:
67:0f:bd:88:0e:ad:a0:53:52:88:fc:3c:d3:5a:ce:30:b2:26:
76:e4:3e:8d:9f:51:5e:fc:25:f8:f1:1c:b7:b9:d5:9a:c4:83:
c1:80:e9:4f:dc:d2:df:4e:a5:95:b2:26:be:26:2c:07:ce:6e:
0b:48:d2:a4:82:49:e5:58:db:11:12:57:d8:64:d9:5c:4a:8b:
4f:23:3b:f3:93:f3:d5:06:90:bb:32:04:e7:06:2c:17:60:c9:
ed:88:38:1a:df:3e:05:02:aa:4b:aa:38:66:a3:2b:b7:c9:6c:
39:52:da:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:02:13 2026 by rpki-client