Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/55HWqxxZe2wnYl-SD-3TTNTZPYA.roa
File: 55HWqxxZe2wnYl-SD-3TTNTZPYA.roa (raw, json)
Hash identifier: PHOed791pgRRjh0SKyECtJfcfZcGYeoyFrNZ2S7sdyo=
Subject key identifier: E7:91:D6:AB:1C:59:7B:6C:27:62:5F:92:0F:ED:D3:4C:D4:D9:3D:80
Certificate issuer: /CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Certificate serial: 019CFAEF8F7F24E4383AA59528F16F383984
Authority key identifier: 65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/55HWqxxZe2wnYl-SD-3TTNTZPYA.roa
Signing time: Tue 17 Mar 2026 08:35:29 +0000
ROA not before: Tue 17 Mar 2026 08:35:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205489
IP address blocks: 195.216.188.0/24 maxlen: 24
213.182.200.0/24 maxlen: 24
213.182.206.0/24 maxlen: 24
213.182.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 02:18:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:fa:ef:8f:7f:24:e4:38:3a:a5:95:28:f1:6f:38:39:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Validity
Not Before: Mar 17 08:35:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e791d6ab1c597b6c27625f920fedd34cd4d93d80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e6:40:d0:9d:03:ad:e2:c6:ba:d6:9f:12:e9:
79:04:96:a4:d3:7d:11:04:97:4f:93:77:ea:ff:95:
3d:3e:e9:01:42:61:c2:2e:7d:60:5f:e3:90:18:aa:
77:1f:84:25:af:b9:4e:fe:1a:af:58:f1:f8:10:2f:
dd:aa:7c:1c:97:d9:93:da:88:98:6b:54:c8:2c:b8:
7b:92:92:e4:b9:22:6f:64:09:01:b1:f2:af:48:50:
4b:40:8b:59:ff:58:ed:f6:9e:ca:fb:4a:1f:4d:c4:
28:42:81:99:55:72:f0:cf:85:da:29:02:f3:15:a3:
65:bf:43:f1:18:9f:67:f2:55:64:a5:35:da:b5:36:
ad:d5:a8:f0:ff:4a:95:1b:bd:96:f9:e6:5b:26:7d:
34:4b:45:b5:49:b7:fb:1c:30:39:f3:91:5d:9b:11:
ab:7d:08:a9:ea:59:d1:6d:75:d2:f7:62:57:b3:28:
7a:97:ec:eb:39:a4:98:44:a3:5b:33:24:79:23:76:
9b:a9:94:09:40:dd:dc:76:b5:20:04:c8:e5:5a:1d:
e4:b8:14:93:13:62:15:97:a0:05:54:a5:07:bd:d3:
14:2e:b8:0f:d6:71:12:c8:55:7d:51:b6:e7:92:36:
84:b7:19:13:13:bd:09:45:39:c1:d1:16:40:f5:5c:
18:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:91:D6:AB:1C:59:7B:6C:27:62:5F:92:0F:ED:D3:4C:D4:D9:3D:80
X509v3 Authority Key Identifier:
keyid:65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/55HWqxxZe2wnYl-SD-3TTNTZPYA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.216.188.0/24
213.182.200.0/24
213.182.206.0/24
213.182.214.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:d0:34:1c:e1:91:aa:db:4b:a9:45:c1:47:1c:0a:1e:1f:85:
f8:fd:a9:fe:38:18:8b:f8:14:c6:90:ba:74:48:56:44:c9:59:
e4:ad:7b:0a:6f:b6:33:84:8b:78:2c:f6:6d:2a:d3:42:d4:62:
34:df:78:64:9b:69:b0:cb:e7:dc:0e:1e:01:bd:b7:5a:f9:c1:
fa:89:5a:80:4f:db:93:70:2a:5c:8e:65:af:ca:db:a2:64:c9:
cf:5d:16:7a:c1:10:2f:68:03:33:60:8d:0e:47:45:8d:84:34:
c7:c5:93:8f:54:ad:9c:84:71:52:2c:f5:8f:69:46:2d:86:ae:
04:09:e1:f5:4d:f0:0c:4c:3c:e4:92:fb:7d:51:1a:49:55:2a:
ef:5c:a4:af:e6:28:e8:09:bb:bf:59:21:69:d8:1f:30:22:94:
0d:12:bf:f3:ae:27:64:bd:d6:00:44:e9:91:47:54:3b:80:f9:
1b:44:51:d2:8b:45:e8:66:a8:c4:40:a6:dc:b1:be:d0:fa:13:
fa:97:b5:f9:53:39:6c:6c:69:1d:0f:fd:3b:b3:a9:e9:d9:9b:
2a:02:2c:93:84:40:d2:be:6c:83:91:a9:4e:4e:a5:fa:d0:52:
24:34:e8:da:ff:64:2c:63:36:1d:76:1b:38:98:be:d5:48:6c:
a8:e4:1d:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 09:17:02 2026 by rpki-client