Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/SvjTGdBq4AdZoEpPZy6xjNbEZes.roa
File: SvjTGdBq4AdZoEpPZy6xjNbEZes.roa (raw, json)
Hash identifier: XpBtNWxbTh/AKxbwJMevW4MmHvNMk9M4Q25IscBORxQ=
Subject key identifier: 4A:F8:D3:19:D0:6A:E0:07:59:A0:4A:4F:67:2E:B1:8C:D6:C4:65:EB
Certificate issuer: /CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Certificate serial: 01A0CEB85B2A5BF62D25378CD61F19441F84
Authority key identifier: 55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/SvjTGdBq4AdZoEpPZy6xjNbEZes.roa
Signing time: Wed 23 Sep 2026 14:43:03 +0000
ROA not before: Wed 23 Sep 2026 14:43:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215224
IP address blocks: 178.253.12.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:b8:5b:2a:5b:f6:2d:25:37:8c:d6:1f:19:44:1f:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Validity
Not Before: Sep 23 14:43:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4af8d319d06ae00759a04a4f672eb18cd6c465eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:81:81:35:1e:90:c4:1c:e4:46:57:77:ec:9a:
5a:04:cc:f0:82:78:f9:a7:08:8d:8b:5c:76:32:8a:
ae:2d:3c:f2:32:e3:bf:92:a9:03:78:bc:1c:94:12:
1c:6d:57:75:f5:89:28:d5:77:ea:78:f4:61:80:e2:
87:2d:4b:d4:86:25:89:b7:62:05:91:b9:ef:c5:4a:
55:e4:79:b0:a0:91:4a:c4:eb:71:f5:7e:a7:f6:75:
88:0b:8c:0a:aa:9a:6e:6d:0c:d6:3e:ab:95:6a:6e:
d8:d4:f2:f8:3a:ad:4a:a1:f0:71:5a:c3:cd:d1:4f:
9f:d8:95:2b:66:bd:84:84:61:f6:7b:e9:7c:b3:92:
f9:ad:32:1a:9d:dc:31:bb:e4:67:21:64:3b:16:88:
be:67:eb:2a:69:39:85:b7:c1:a4:86:a7:82:0f:db:
41:f6:58:70:79:f8:3e:a9:bc:19:72:75:98:8c:cf:
a6:47:60:09:e6:c9:11:19:5f:21:f4:e5:05:b4:15:
10:82:f5:c6:d9:56:c2:10:fe:28:e5:ce:df:06:17:
15:8c:c8:3e:39:17:38:cc:11:1d:41:a2:7f:44:8c:
27:af:17:d6:dc:cc:b1:02:36:56:37:b2:3a:73:1f:
ea:b1:8e:73:b2:0b:51:4a:48:08:13:60:fa:66:60:
05:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:F8:D3:19:D0:6A:E0:07:59:A0:4A:4F:67:2E:B1:8C:D6:C4:65:EB
X509v3 Authority Key Identifier:
keyid:55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/SvjTGdBq4AdZoEpPZy6xjNbEZes.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.253.12.0/23
Signature Algorithm: sha256WithRSAEncryption
7a:5b:05:54:82:5d:da:dd:53:5e:9e:28:86:62:fa:db:ca:09:
25:52:83:b7:3c:a1:ac:0e:45:53:46:d8:08:89:f0:3e:d9:3a:
e2:35:a3:69:ec:45:47:6f:b6:9c:07:d8:f2:9a:1e:ef:f0:0f:
df:5e:f8:be:22:46:e4:18:c0:92:9f:e4:cf:65:5c:b2:aa:90:
c0:dc:33:d3:45:b6:d3:6f:6a:f7:dc:08:74:9e:f3:04:b2:1f:
db:9c:fc:22:fe:09:2a:e8:46:0b:43:89:34:97:f4:7c:c2:fc:
fa:b2:79:85:d7:e9:85:31:f7:e1:52:8d:8a:59:3b:42:32:87:
29:63:ce:0f:9c:46:33:67:e9:2f:85:0d:b6:96:66:c0:0b:58:
78:1a:01:b0:de:96:18:0c:c3:a6:76:66:af:69:ac:f2:6a:62:
25:ff:06:b1:58:11:c7:9f:94:50:99:d8:a8:fa:fa:39:05:2d:
23:7c:36:a7:42:0f:51:a8:9c:46:17:0c:7a:d6:d9:37:d8:58:
da:d6:5e:e9:ee:ff:48:da:f3:6e:c8:04:5d:18:08:3d:cc:7c:
b4:79:54:5d:71:34:ee:9c:02:0a:d6:27:8c:77:c1:f1:b4:c5:
77:52:54:d2:b0:b5:45:2a:52:06:fd:b9:f1:71:d3:dd:84:dd:
04:98:2f:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 00:31:01 2026 by rpki-client