Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/0HuCI8W9raaw6VF5ob5AeUYCqvY.roa
File: 0HuCI8W9raaw6VF5ob5AeUYCqvY.roa (raw, json)
Hash identifier: MWQfJ9QmkOMknSrFnqP6sweW3o4qTpecRX9iW0v5lMI=
Subject key identifier: D0:7B:82:23:C5:BD:AD:A6:B0:E9:51:79:A1:BE:40:79:46:02:AA:F6
Certificate issuer: /CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Certificate serial: 01A0D261DACF9D65A5C3A9E731B2A0F077FE
Authority key identifier: 55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/0HuCI8W9raaw6VF5ob5AeUYCqvY.roa
Signing time: Thu 24 Sep 2026 07:47:03 +0000
ROA not before: Thu 24 Sep 2026 07:47:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 91.186.210.0/23 maxlen: 24
94.241.164.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:61:da:cf:9d:65:a5:c3:a9:e7:31:b2:a0:f0:77:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Validity
Not Before: Sep 24 07:47:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d07b8223c5bdada6b0e95179a1be40794602aaf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e9:94:1d:7a:05:fa:60:8c:2a:5f:ff:f2:24:
2a:5f:d8:66:a5:5a:0a:25:36:0a:58:c1:36:0a:95:
fa:ca:54:75:82:95:50:b2:3a:ac:eb:b3:e3:9d:07:
e5:c8:fe:a9:99:08:f8:ba:2a:c7:3f:d4:7d:e2:22:
2e:b3:e7:1c:14:79:02:b8:86:de:2c:e9:f9:45:1c:
b0:88:9a:51:53:c1:00:1f:db:74:f6:88:db:e3:b3:
0d:0c:ef:3a:51:a2:61:5c:74:63:ba:c0:96:fc:86:
47:34:b1:bb:74:86:e7:60:62:5e:0d:87:8e:b5:24:
6d:1d:9f:2c:4f:fe:83:91:3a:41:ef:57:9b:3d:f0:
dd:db:c7:7a:22:c4:42:93:6c:81:a1:e9:3e:ff:b9:
65:b7:b4:f3:29:14:34:00:87:78:8e:1e:33:5a:2c:
b2:a2:d0:d9:5b:43:bc:31:36:42:e5:a7:30:f7:f1:
81:bb:0a:fe:ca:25:e3:c7:2f:df:4d:84:b9:55:42:
be:1f:a4:90:75:a0:1b:90:4b:a1:4c:5f:6c:2f:fc:
c4:37:e2:05:be:f5:2f:b6:c3:75:e5:d9:84:c9:f7:
ca:29:2a:fa:69:1c:f7:72:c4:b2:78:ba:99:67:c6:
06:83:0a:d2:83:e5:07:31:8e:f5:9e:b6:62:e5:3d:
99:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:7B:82:23:C5:BD:AD:A6:B0:E9:51:79:A1:BE:40:79:46:02:AA:F6
X509v3 Authority Key Identifier:
keyid:55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/0HuCI8W9raaw6VF5ob5AeUYCqvY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.186.210.0/23
94.241.164.0/23
Signature Algorithm: sha256WithRSAEncryption
7d:b0:33:ee:4f:2f:4d:fe:33:ff:3d:3c:2a:6a:76:f4:63:af:
e3:53:fe:39:ce:80:af:c1:ff:fb:cb:e2:28:b3:41:b0:cf:ba:
05:3b:f8:53:fd:be:1f:0f:f4:e2:61:8a:81:a6:84:6a:10:56:
d9:42:e5:04:cc:96:fe:da:d3:8a:76:38:61:ac:8c:02:e1:01:
e7:f3:4b:8d:f0:97:da:a7:ca:35:6a:ed:3d:75:4c:d4:8d:06:
fc:47:ce:3c:02:1a:88:9f:b2:e6:32:85:29:64:5b:56:99:af:
4d:4b:1a:97:cd:e6:b1:71:39:c8:3f:57:31:58:00:af:df:24:
ab:7b:f8:a1:32:9b:6d:e6:09:8f:51:f1:83:94:6e:1a:ee:dc:
13:55:bd:83:de:ef:a7:80:79:e3:b1:db:be:39:ab:5f:8c:7b:
1a:8f:2f:76:77:1a:5a:a1:d1:ff:3d:00:96:89:9e:ed:10:18:
83:69:24:9c:e5:03:bc:61:fc:f8:d0:c3:ef:6f:8d:2c:02:c0:
ac:b1:b5:7c:58:07:6d:1f:d8:b6:c5:72:38:16:90:c7:9d:47:
f3:20:21:a1:46:46:8f:76:6a:eb:eb:54:c8:79:8a:88:cc:2f:
f3:ce:8a:ff:3d:ae:97:24:72:d8:cf:5c:bf:25:e5:7b:d5:12:
08:e0:c6:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 17:53:37 2026 by rpki-client