Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/55fxNOw-fO30u-BmXgjw4WeUa80.roa
File: 55fxNOw-fO30u-BmXgjw4WeUa80.roa (raw, json)
Hash identifier: gpla/Ku9QHt9oZP7wDDCGsD9ywE+luSObWiz+a4gmYw=
Subject key identifier: E7:97:F1:34:EC:3E:7C:ED:F4:BB:E0:66:5E:08:F0:E1:67:94:6B:CD
Certificate issuer: /CN=3cf615f06d23228c769a85faf0510393d064e0e0
Certificate serial: 019FD62B10BF2372485B72BCF8A03816AB3A
Authority key identifier: 3C:F6:15:F0:6D:23:22:8C:76:9A:85:FA:F0:51:03:93:D0:64:E0:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PPYV8G0jIox2moX68FEDk9Bk4OA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/55fxNOw-fO30u-BmXgjw4WeUa80.roa
Signing time: Thu 06 Aug 2026 08:22:54 +0000
ROA not before: Thu 06 Aug 2026 08:22:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47376
IP address blocks: 91.222.196.0/24 maxlen: 24
91.222.197.0/24 maxlen: 24
103.215.220.0/24 maxlen: 24
103.215.223.0/24 maxlen: 24
195.28.11.0/24 maxlen: 24
195.234.191.0/24 maxlen: 24
195.238.231.0/24 maxlen: 24
195.238.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/PPYV8G0jIox2moX68FEDk9Bk4OA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/PPYV8G0jIox2moX68FEDk9Bk4OA.mft
rsync://rpki.ripe.net/repository/DEFAULT/PPYV8G0jIox2moX68FEDk9Bk4OA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d6:2b:10:bf:23:72:48:5b:72:bc:f8:a0:38:16:ab:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cf615f06d23228c769a85faf0510393d064e0e0
Validity
Not Before: Aug 6 08:22:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e797f134ec3e7cedf4bbe0665e08f0e167946bcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:02:87:81:0d:85:f6:e5:20:54:67:fc:e2:2f:
4f:8b:f9:51:f4:7d:56:65:d2:7c:4f:dc:8f:f4:0e:
e3:f0:02:f7:c7:92:10:7c:43:b5:88:7c:fb:be:36:
09:0b:e4:05:cd:26:5d:7e:c5:e9:f0:52:29:61:13:
82:f8:65:e2:ac:37:96:cd:b6:2e:22:b3:f4:99:58:
68:b4:62:4b:d9:cd:cd:ff:82:4e:cb:98:bc:5e:26:
00:e3:9f:f1:07:63:12:e9:63:45:4d:99:f4:f6:54:
fd:41:ad:59:98:1b:d8:27:fd:b3:f4:39:e8:e9:5f:
9f:84:01:d1:7a:b1:75:ec:97:e7:e1:0e:0d:ba:49:
fb:f3:6f:e4:ce:46:fa:62:e4:ab:d6:80:0b:22:9d:
cd:55:b7:78:1c:5d:8f:ab:14:67:78:ec:88:b2:63:
c0:a6:e6:18:09:21:99:6f:7a:95:b5:4c:7c:99:7b:
ea:4b:60:ea:5e:de:91:d4:41:6f:88:53:a2:24:e0:
7c:91:13:d2:d0:3b:ca:c2:37:f3:45:71:5b:4c:bd:
48:9a:d4:4c:39:f9:40:23:51:81:bc:19:1d:17:d0:
10:9c:34:c8:6a:f7:e3:e1:ff:5e:29:a0:c8:49:63:
f5:0f:a4:44:dd:38:9f:6c:c7:ad:b1:8f:e5:ee:b4:
b8:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:97:F1:34:EC:3E:7C:ED:F4:BB:E0:66:5E:08:F0:E1:67:94:6B:CD
X509v3 Authority Key Identifier:
keyid:3C:F6:15:F0:6D:23:22:8C:76:9A:85:FA:F0:51:03:93:D0:64:E0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PPYV8G0jIox2moX68FEDk9Bk4OA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/55fxNOw-fO30u-BmXgjw4WeUa80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/PPYV8G0jIox2moX68FEDk9Bk4OA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.222.196.0/23
103.215.220.0/24
103.215.223.0/24
195.28.11.0/24
195.234.191.0/24
195.238.231.0/24
195.238.240.0/24
Signature Algorithm: sha256WithRSAEncryption
af:96:9f:ca:73:a5:1c:7b:1a:29:6a:70:c9:e4:fb:6c:5a:49:
9e:50:55:b0:6d:a6:5c:73:b6:fb:86:44:e7:0d:c3:dd:92:b2:
eb:bb:98:bf:67:17:ac:35:6d:f5:1c:00:be:1a:8f:3b:02:ba:
a1:44:bd:c1:76:dc:f6:6f:3f:14:bf:c1:bc:71:a1:27:23:49:
91:1d:4b:a3:9c:65:ca:55:9b:3c:6c:f5:7f:44:6d:8e:58:3d:
74:d7:51:a6:a2:7e:9f:f0:83:11:0f:25:d5:11:d2:e6:61:85:
b3:65:61:c6:7c:7c:39:c7:d6:83:14:a4:58:0b:bf:d8:87:30:
42:f1:b4:75:17:0d:06:3e:09:d1:85:0a:64:1c:ca:85:64:d0:
9a:48:14:ff:ad:f0:09:b1:c0:51:a2:83:e5:df:ad:72:61:f7:
e4:e7:72:3b:00:45:11:6f:f1:92:23:89:e2:3d:61:f4:cd:c3:
c9:cc:dd:98:64:7a:a8:06:4e:a5:be:ca:67:72:2f:bb:83:b5:
98:de:23:44:84:28:28:70:4a:fe:ea:97:63:0f:56:69:18:4e:
6d:ae:24:77:6e:68:32:25:43:0f:0e:49:a0:e1:b9:78:f8:88:
98:0a:5f:55:68:50:0a:f1:94:02:b2:0a:b0:33:35:0d:12:ef:
7f:90:64:99
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAZ/WKxC/I3JIW3K8+KA4Fqs6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjZjYxNWYwNmQyMzIyOGM3NjlhODVmYWYwNTEwMzkzZDA2
NGUwZTAwHhcNMjYwODA2MDgyMjU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNzk3ZjEzNGVjM2U3Y2VkZjRiYmUwNjY1ZTA4ZjBlMTY3OTQ2YmNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2wKHgQ2F9uUgVGf84i9Pi/lR9H1W
ZdJ8T9yP9A7j8AL3x5IQfEO1iHz7vjYJC+QFzSZdfsXp8FIpYROC+GXirDeWzbYu
IrP0mVhotGJL2c3N/4JOy5i8XiYA45/xB2MS6WNFTZn09lT9Qa1ZmBvYJ/2z9Dno
6V+fhAHRerF17Jfn4Q4Nukn782/kzkb6YuSr1oALIp3NVbd4HF2PqxRneOyIsmPA
puYYCSGZb3qVtUx8mXvqS2DqXt6R1EFviFOiJOB8kRPS0DvKwjfzRXFbTL1ImtRM
OflAI1GBvBkdF9AQnDTIavfj4f9eKaDISWP1D6RE3TifbMetsY/l7rS4owIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFOeX8TTsPnzt9LvgZl4I8OFnlGvNMB8GA1UdIwQY
MBaAFDz2FfBtIyKMdpqF+vBRA5PQZODgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFBZVjhHMGpJb3gybW9YNjhGRURrOUJrNE9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9jOTNhNjYtYzdjNy00YzMzLWE3MjUt
MThkMWE0MDZhYWVkLzEvNTVmeE5Pdy1mTzMwdS1CbVhnanc0V2VVYTgwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS9jOTNhNjYtYzdjNy00YzMzLWE3MjUtMThkMWE0MDZhYWVk
LzEvUFBZVjhHMGpJb3gybW9YNjhGRURrOUJrNE9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQBW97EAwQA
Z9fcAwQAZ9ffAwQAwxwLAwQAw+q/AwQAw+7nAwQAw+7wMA0GCSqGSIb3DQEBCwUA
A4IBAQCvlp/Kc6UcexopanDJ5PtsWkmeUFWwbaZcc7b7hkTnDcPdkrLru5i/Zxes
NW31HAC+Go87ArqhRL3Bdtz2bz8Uv8G8caEnI0mRHUujnGXKVZs8bPV/RG2OWD10
11Gmon6f8IMRDyXVEdLmYYWzZWHGfHw5x9aDFKRYC7/YhzBC8bR1Fw0GPgnRhQpk
HMqFZNCaSBT/rfAJscBRooPl361yYffk53I7AEURb/GSI4niPWH0zcPJzN2YZHqo
Bk6lvspnci+7g7WY3iNEhCgocEr+6pdjD1ZpGE5triR3bmgyJUMPDkmg4bl4+IiY
Cl9VaFAK8ZQCsgqwMzUNEu9/kGSZ
-----END CERTIFICATE-----
Generated at Thu Sep 10 19:05:37 2026 by rpki-client