Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/551VyyB9yt1jU1oArfdFyAq4eSg.roa
File: 551VyyB9yt1jU1oArfdFyAq4eSg.roa (raw, json)
Hash identifier: gm5h/cU5QmHdORzGbSen605MM1rA87Jfvrz/TD6AKKo=
Subject key identifier: E7:9D:55:CB:20:7D:CA:DD:63:53:5A:00:AD:F7:45:C8:0A:B8:79:28
Certificate issuer: /CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055
Certificate serial: 01A0238583D852E058C22382F0EA89D2070E
Authority key identifier: 92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/551VyyB9yt1jU1oArfdFyAq4eSg.roa
Signing time: Fri 21 Aug 2026 08:52:27 +0000
ROA not before: Fri 21 Aug 2026 08:52:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152698
IP address blocks: 185.189.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Aug 2026 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:23:85:83:d8:52:e0:58:c2:23:82:f0:ea:89:d2:07:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055
Validity
Not Before: Aug 21 08:52:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e79d55cb207dcadd63535a00adf745c80ab87928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b9:92:f9:03:e4:bb:1e:80:4a:3a:55:19:94:
1d:18:41:9a:96:aa:cd:f2:f1:a0:bf:af:ca:9b:90:
8a:b5:2c:d7:38:59:20:bc:b7:12:e4:05:96:0b:f4:
02:eb:88:ee:ec:a4:98:ec:d3:25:e8:57:14:44:f4:
78:14:35:a5:67:23:bf:b4:ac:d6:29:f1:59:3e:76:
7b:56:68:e1:95:27:a9:1f:48:68:2e:df:f8:5b:c6:
0b:77:ce:9b:86:63:22:43:18:d4:03:9e:81:68:74:
8d:6b:cb:78:51:67:63:8b:71:94:73:d1:ac:22:e5:
b9:b7:28:59:92:f3:55:29:08:a3:f2:8b:cd:07:6d:
00:91:13:2f:2a:3a:41:7b:c9:06:fd:65:25:c3:59:
2d:0d:f4:0a:04:1b:45:26:7a:9b:0d:8c:e8:dc:4f:
27:76:19:01:6d:11:11:76:03:21:67:5b:02:19:30:
38:6b:e7:0e:b5:f6:9e:d2:2b:de:7b:2a:56:7b:aa:
7c:1d:77:e6:56:32:6d:0f:4e:d3:5d:b7:ea:89:09:
39:82:52:42:93:ec:04:ec:52:cf:66:0c:ff:68:2c:
2b:4f:0f:5b:5c:1a:9e:50:c9:74:3e:2d:4b:06:1e:
72:af:4e:45:49:d5:e8:4a:7e:9e:33:fc:24:d8:a7:
36:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:9D:55:CB:20:7D:CA:DD:63:53:5A:00:AD:F7:45:C8:0A:B8:79:28
X509v3 Authority Key Identifier:
keyid:92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/551VyyB9yt1jU1oArfdFyAq4eSg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.189.32.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:dc:4a:24:31:f2:fe:d1:7e:35:1f:17:c8:5f:4c:f0:28:2b:
cd:02:94:94:47:b5:5a:df:13:bb:12:3d:5d:68:8d:79:fa:b3:
bb:93:d7:97:d1:b6:90:03:f2:62:dd:75:14:3f:b4:0b:9f:56:
3f:15:ab:50:85:61:ab:a9:69:ae:a1:4e:6c:9e:c0:8c:58:6d:
09:d9:07:02:f4:5a:b6:46:61:8e:b2:fc:8f:7f:a3:e2:1b:93:
7b:42:b7:d2:f6:b7:43:ef:a0:04:29:a6:ff:e1:8e:5a:78:75:
df:b4:fe:16:3a:e2:e4:21:4a:93:72:e7:51:c5:91:ac:93:15:
b7:d0:d5:9b:45:04:fe:3f:75:fe:bf:49:db:12:e9:95:31:3b:
44:69:34:d3:1d:b2:4c:ff:7b:25:89:f9:be:33:a6:30:35:8f:
0a:da:84:fe:b3:b7:72:5c:ce:b9:38:e6:fd:a9:ab:a6:c3:89:
1d:2b:dd:67:91:ea:f5:27:b7:42:ed:f5:9d:64:2e:19:29:12:
f0:43:b3:32:50:6e:2e:93:33:74:63:01:13:4c:2d:51:10:26:
82:ba:f7:18:36:fd:7f:43:5c:b7:5b:8e:d3:eb:d3:3e:01:d2:
e2:1b:86:98:a9:7e:b7:98:13:e6:7a:4c:5b:b9:1c:c5:89:81:
89:49:e0:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 16:25:07 2026 by rpki-client