Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/RG1czkXWXGLP-4EdUs0izSShVbo.roa
File: RG1czkXWXGLP-4EdUs0izSShVbo.roa (raw, json)
Hash identifier: NPiGyzK9BI6kcQM474jIgxhIQuYRLPRxN2Rv0crLLb0=
Subject key identifier: 44:6D:5C:CE:45:D6:5C:62:CF:FB:81:1D:52:CD:22:CD:24:A1:55:BA
Certificate issuer: /CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Certificate serial: 0199CAADE64C82757F55156DC767F7AF5549
Authority key identifier: 55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/RG1czkXWXGLP-4EdUs0izSShVbo.roa
Signing time: Thu 09 Oct 2025 20:33:38 +0000
ROA not before: Thu 09 Oct 2025 20:33:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9123
IP address blocks: 83.147.244.0/24 maxlen: 24
83.147.245.0/24 maxlen: 24
83.147.246.0/24 maxlen: 24
83.147.247.0/24 maxlen: 24
91.186.196.0/24 maxlen: 24
91.186.197.0/24 maxlen: 24
91.186.198.0/24 maxlen: 24
91.186.199.0/24 maxlen: 24
94.241.138.0/24 maxlen: 24
94.241.139.0/24 maxlen: 24
94.241.140.0/24 maxlen: 24
94.241.141.0/24 maxlen: 24
94.241.142.0/24 maxlen: 24
94.241.143.0/24 maxlen: 24
94.241.168.0/24 maxlen: 24
94.241.169.0/24 maxlen: 24
94.241.170.0/24 maxlen: 24
94.241.171.0/24 maxlen: 24
178.253.40.0/24 maxlen: 24
178.253.41.0/24 maxlen: 24
178.253.42.0/24 maxlen: 24
178.253.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ca:ad:e6:4c:82:75:7f:55:15:6d:c7:67:f7:af:55:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Validity
Not Before: Oct 9 20:33:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=446d5cce45d65c62cffb811d52cd22cd24a155ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:01:f8:fc:e0:29:50:5d:b4:88:5f:73:76:6b:
48:0f:68:18:57:a1:d2:44:bc:0f:4e:89:3b:f9:b0:
3b:55:62:fd:cb:76:c3:1c:53:65:d6:33:38:bd:e6:
6d:e5:51:6c:8d:32:b6:2c:7d:04:86:8f:77:1a:f5:
f4:b3:f9:89:93:ca:a2:30:cd:83:bd:32:75:65:1f:
8e:3b:d5:6a:6d:fc:07:c0:17:9e:a6:f7:d4:a8:9d:
55:c4:6c:28:a8:b3:46:7e:6a:bd:23:97:e2:6f:ad:
46:3b:cc:45:57:15:23:ef:84:83:a7:ef:c9:a7:f3:
30:08:4f:1d:48:a5:9f:4b:ea:91:f2:2e:b3:5f:a6:
02:d9:0b:54:ff:a4:86:a3:db:62:d6:ad:30:2e:f2:
8e:b0:61:25:40:aa:49:65:bc:67:ea:34:be:2e:b2:
e4:09:13:4a:1f:c2:f6:2c:89:de:45:e4:f2:f9:5e:
c7:d3:5b:f2:69:fa:6d:75:9d:6d:5b:72:8b:d6:71:
ec:a3:cb:72:cf:d4:15:eb:4d:6a:19:c6:67:83:89:
68:d8:7d:0f:6b:96:52:1d:06:38:90:12:f5:08:e6:
8b:26:37:98:89:b6:f5:c0:d0:af:a0:5e:5d:7d:c9:
0c:ac:b8:04:9a:62:c9:5c:b1:3d:fb:1d:b9:f3:b1:
21:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:6D:5C:CE:45:D6:5C:62:CF:FB:81:1D:52:CD:22:CD:24:A1:55:BA
X509v3 Authority Key Identifier:
keyid:55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/RG1czkXWXGLP-4EdUs0izSShVbo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.244.0/22
91.186.196.0/22
94.241.138.0-94.241.143.255
94.241.168.0/22
178.253.40.0/22
Signature Algorithm: sha256WithRSAEncryption
ac:51:1f:48:8d:16:e2:b4:69:b5:9e:99:df:08:a0:19:29:18:
70:4c:e6:87:40:87:dd:c0:0a:19:6f:b8:aa:75:e7:5a:54:fa:
a3:f2:58:0d:db:5a:8f:75:22:95:c3:51:ff:66:8e:20:53:69:
35:3a:f0:61:5d:de:85:7c:41:5d:ab:ad:74:99:a7:87:a5:9b:
91:34:c1:a8:10:b0:75:e2:51:cd:ef:73:96:32:3d:45:a8:04:
33:83:ac:52:dc:59:f9:69:ae:68:f2:94:46:c6:97:84:18:df:
27:40:c9:e2:08:be:db:57:b9:c7:0b:60:4e:7e:7a:69:38:54:
73:f5:30:40:02:f7:33:16:fd:e6:63:3b:b1:6b:8c:e7:c0:90:
65:75:8f:c4:f8:50:7f:40:44:a6:c7:ec:cd:f6:a0:41:1b:89:
de:a9:f1:5c:4e:83:71:e1:a3:f6:c6:fe:93:12:84:13:54:8f:
64:8b:0a:b4:8b:03:3e:96:c0:90:9f:f6:63:79:ed:6c:18:53:
c2:9c:39:fd:94:94:9e:a1:5d:f7:ec:3f:44:3b:1b:95:d2:f4:
02:fd:e8:6e:b1:ef:cd:ee:0c:08:7f:16:fe:c3:4f:84:a7:1e:
5b:c5:a2:13:52:ed:b7:4d:4b:e9:26:a7:c2:de:61:75:16:ac:
e1:cc:49:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:59:01 2025 by rpki-client