Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/wZm4OfdK9nzfD3vu_qi5NQWsF3w.roa
File: wZm4OfdK9nzfD3vu_qi5NQWsF3w.roa (raw, json)
Hash identifier: HVxbpWC3yoCLBzQqqVEbSHH0KLW0dx34Mb4XrSqEcaw=
Subject key identifier: C1:99:B8:39:F7:4A:F6:7C:DF:0F:7B:EE:FE:A8:B9:35:05:AC:17:7C
Certificate issuer: /CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Certificate serial: 01A169CE5D5C24CE96DE6AC48D34071C84E2
Authority key identifier: 55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/wZm4OfdK9nzfD3vu_qi5NQWsF3w.roa
Signing time: Fri 23 Oct 2026 17:28:14 +0000
ROA not before: Fri 23 Oct 2026 17:28:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201936
IP address blocks: 94.241.132.0/22 maxlen: 22
94.241.166.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:69:ce:5d:5c:24:ce:96:de:6a:c4:8d:34:07:1c:84:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Validity
Not Before: Oct 23 17:28:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c199b839f74af67cdf0f7beefea8b93505ac177c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:52:60:e8:29:66:e2:9f:c9:32:26:34:63:7c:
7b:4d:fc:45:42:ce:cd:1f:f7:c5:42:54:58:f1:ab:
d8:81:8b:84:b5:db:be:80:ec:5e:51:95:3b:5a:43:
85:08:1d:4a:7d:02:3b:0a:fa:90:5f:78:5b:c3:d3:
77:a0:66:9c:72:ab:7f:c4:df:ee:1f:e7:9a:0f:9f:
00:61:41:21:f6:b8:88:b7:7c:03:24:95:6d:22:da:
5b:59:bb:96:03:8a:d4:cb:50:d0:0f:aa:07:19:38:
5e:98:f8:90:f5:8e:be:85:36:65:e8:f2:66:8c:32:
a0:20:38:1f:bc:3f:aa:7c:df:0d:c8:98:d9:a7:e0:
7a:29:1c:91:86:4a:a3:5c:de:69:46:53:20:3a:42:
bd:5f:7d:1a:58:6b:85:f8:ca:4c:fa:31:2a:86:e9:
74:a6:93:35:49:bf:76:16:49:63:d3:8b:b8:db:ac:
a3:8c:6f:0c:42:b6:ec:33:92:f6:25:8b:60:33:06:
0e:5a:bf:c2:fd:fe:a8:6a:97:14:46:fe:48:56:5c:
e9:ac:42:c3:6e:71:2e:21:f8:31:aa:bf:b2:d3:09:
20:05:87:b5:c8:8d:a0:55:96:f3:68:9a:a7:89:22:
32:95:fb:4d:96:d4:7b:37:9f:76:60:1b:d5:21:ff:
a2:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:99:B8:39:F7:4A:F6:7C:DF:0F:7B:EE:FE:A8:B9:35:05:AC:17:7C
X509v3 Authority Key Identifier:
keyid:55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/wZm4OfdK9nzfD3vu_qi5NQWsF3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.241.132.0/22
94.241.166.0/23
Signature Algorithm: sha256WithRSAEncryption
46:e8:41:82:47:a3:32:1f:2f:a6:d7:d3:1b:50:0d:72:f7:77:
a2:94:50:8f:e0:ee:8b:c3:b5:de:07:61:da:d8:fb:29:08:9f:
79:d8:8e:9e:1b:c5:3f:b6:ee:61:b9:68:46:3e:1a:e4:ad:03:
8d:c4:4d:c1:4b:4e:e6:14:71:90:a8:7a:48:79:87:2d:dc:a8:
3e:ce:e8:ce:bb:98:0a:3a:01:58:d7:9f:17:ec:0e:5b:4e:4f:
51:43:9c:09:c5:de:1d:45:f9:2b:6e:fb:4f:d9:94:66:1a:00:
69:c1:f0:03:48:81:d3:2f:34:75:02:1e:3f:c7:ee:be:49:68:
27:5f:06:a9:ed:8c:9f:79:3c:7f:8b:d0:56:d2:ab:78:1c:72:
1e:cc:28:06:12:12:c3:1d:03:00:c6:b8:34:33:2f:57:97:9e:
af:e4:d1:86:34:6e:ef:c9:53:49:a9:7d:1d:58:ad:39:26:e9:
13:0b:9b:4c:7d:4c:a8:c7:17:9d:4b:b0:18:2e:4e:c8:6b:9c:
c6:80:26:14:57:df:95:e0:ec:a6:6c:d5:ee:24:95:b0:41:46:
c8:9e:69:5c:76:20:87:c0:70:26:ae:42:65:94:7e:94:9f:5d:
3c:22:87:e9:bf:f8:24:ca:4f:67:96:eb:a6:5e:cd:ab:3c:2a:
71:b4:86:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 09:51:31 2026 by rpki-client