Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VCk_5W9OWsFgBIJvG53eSkrIF9w.roa
File: VCk_5W9OWsFgBIJvG53eSkrIF9w.roa (raw, json)
Hash identifier: XWSBxVJpVaTOR7Iqo9bhWgCvetPI4Jrt7Cndlmwfe2A=
Subject key identifier: 54:29:3F:E5:6F:4E:5A:C1:60:04:82:6F:1B:9D:DE:4A:4A:C8:17:DC
Certificate issuer: /CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Certificate serial: 01A1A86DEBF5562C3992C7323D51511B6658
Authority key identifier: 55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VCk_5W9OWsFgBIJvG53eSkrIF9w.roa
Signing time: Wed 04 Nov 2026 21:18:58 +0000
ROA not before: Wed 04 Nov 2026 21:18:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200740
IP address blocks: 83.147.232.0/22 maxlen: 24
83.147.240.0/22 maxlen: 24
83.147.240.0/23 maxlen: 24
91.186.202.0/23 maxlen: 24
91.186.214.0/23 maxlen: 24
94.241.164.0/23 maxlen: 24
178.253.52.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 00:02:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a8:6d:eb:f5:56:2c:39:92:c7:32:3d:51:51:1b:66:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Validity
Not Before: Nov 4 21:18:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=54293fe56f4e5ac16004826f1b9dde4a4ac817dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:53:99:99:a3:97:3b:f8:cc:91:40:90:16:a8:
a0:e2:b6:0c:29:0c:42:bb:aa:ef:a2:ff:23:8a:97:
aa:ae:04:c0:2b:16:76:3f:84:54:ad:92:4d:16:7d:
2e:f3:0b:ef:d7:15:d2:d8:fa:78:09:41:ce:c3:20:
a2:9e:44:a2:93:23:18:e7:b7:7f:a7:95:17:01:37:
ac:f1:c7:59:2d:d1:a7:e0:4a:08:a6:25:8f:66:63:
01:b6:ba:77:8e:69:d9:a7:9f:2f:92:ca:f7:9b:3b:
4d:10:29:85:61:21:72:c0:e6:1a:49:0e:2b:8b:3d:
85:dc:9f:3c:51:7f:46:5f:2c:63:76:10:1d:5b:7b:
2e:80:02:5a:b9:a7:5d:1c:cb:9e:97:47:0a:1d:85:
5d:e3:b5:34:e4:b1:e4:ca:03:aa:5f:cb:22:12:ea:
67:d2:78:54:57:11:08:c4:e1:a1:52:a7:0b:7d:cc:
b7:80:1f:ef:e5:6d:d3:94:63:58:0a:2f:68:70:05:
30:24:58:27:8d:6e:0c:60:f2:75:75:01:86:ff:9b:
e2:c4:a9:34:d4:d8:e3:bd:59:b6:3b:aa:4e:84:78:
81:17:fe:d3:d5:ac:7e:0e:94:0a:27:ff:81:ed:5e:
0b:f5:29:76:64:32:c2:57:7a:c8:de:04:8c:7f:1c:
9a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:29:3F:E5:6F:4E:5A:C1:60:04:82:6F:1B:9D:DE:4A:4A:C8:17:DC
X509v3 Authority Key Identifier:
keyid:55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VCk_5W9OWsFgBIJvG53eSkrIF9w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.232.0/22
83.147.240.0/22
91.186.202.0/23
91.186.214.0/23
94.241.164.0/23
178.253.52.0/23
Signature Algorithm: sha256WithRSAEncryption
25:17:45:c7:3c:d0:47:c6:e8:bb:fd:cb:7e:1d:1c:a7:e5:c9:
a1:c9:7f:d5:78:58:e0:e5:61:79:df:8b:b0:06:0d:88:b2:8a:
d1:b0:f9:83:b6:7a:2a:9c:c9:71:d1:63:6a:32:86:41:2b:be:
18:79:5e:2f:96:7a:c2:cd:d7:e1:81:2a:dc:5f:e7:65:6b:f1:
42:de:b4:65:f7:92:81:6c:fd:5c:c5:13:e7:84:b3:34:74:ad:
77:e7:1d:cf:d7:21:f9:8d:46:02:54:4f:6a:b0:e0:80:0e:b0:
ea:81:ab:7c:94:21:c0:b8:6e:3d:25:49:e1:d4:1b:e2:6e:4f:
53:bf:2a:2f:b7:d7:4f:75:6a:4c:48:b0:45:50:fe:0f:b1:c2:
fb:c2:48:19:af:a3:11:c8:fa:6d:3b:ed:3d:fa:13:17:42:e4:
55:df:47:b6:b9:5c:a0:99:e2:16:b8:34:d7:eb:c6:fb:15:69:
cf:ad:58:41:a6:0e:74:c8:87:cf:b3:96:52:d8:61:a1:2b:59:
31:7e:55:aa:71:c9:7c:69:4d:b7:46:52:8a:29:a6:0c:81:9b:
b2:ad:f0:4e:d3:ac:be:ad:80:c2:c6:80:03:7e:28:15:18:84:
de:50:b9:51:fd:e0:09:1c:ab:fe:7d:b2:c5:1e:75:b7:78:37:
e0:84:bb:fa
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAaGobev1Viw5kscyPVFRG2ZYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1YmFmMjY5Njc1MTBiM2M1MmU0NmQxZGM1OTM5NjdjZGYy
OWY5YzkwHhcNMjYxMTA0MjExODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NDI5M2ZlNTZmNGU1YWMxNjAwNDgyNmYxYjlkZGU0YTRhYzgxN2RjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFOZmaOXO/jMkUCQFqig4rYMKQxC
u6rvov8jipeqrgTAKxZ2P4RUrZJNFn0u8wvv1xXS2Pp4CUHOwyCinkSikyMY57d/
p5UXATes8cdZLdGn4EoIpiWPZmMBtrp3jmnZp58vksr3mztNECmFYSFywOYaSQ4r
iz2F3J88UX9GXyxjdhAdW3sugAJauaddHMuel0cKHYVd47U05LHkygOqX8siEupn
0nhUVxEIxOGhUqcLfcy3gB/v5W3TlGNYCi9ocAUwJFgnjW4MYPJ1dQGG/5vixKk0
1NjjvVm2O6pOhHiBF/7T1ax+DpQKJ/+B7V4L9Sl2ZDLCV3rI3gSMfxyaXQIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFFQpP+VvTlrBYASCbxud3kpKyBfcMB8GA1UdIwQY
MBaAFFW68mlnUQs8UuRtHcWTlnzfKfnJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmJyeWFXZFJDenhTNUcwZHhaT1dmTjhwLWNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS81YWE0ZGMtZDE4NC00ZGI0LTllMTAt
NDlmOTgxZWU1OTgxLzEvVkNrXzVXOU9Xc0ZnQklKdkc1M2VTa3JJRjl3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS81YWE0ZGMtZDE4NC00ZGI0LTllMTAtNDlmOTgxZWU1OTgx
LzEvVmJyeWFXZFJDenhTNUcwZHhaT1dmTjhwLWNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQCU5PoAwQC
U5PwAwQBW7rKAwQBW7rWAwQBXvGkAwQBsv00MA0GCSqGSIb3DQEBCwUAA4IBAQAl
F0XHPNBHxui7/ct+HRyn5cmhyX/VeFjg5WF534uwBg2IsorRsPmDtnoqnMlx0WNq
MoZBK74YeV4vlnrCzdfhgSrcX+dla/FC3rRl95KBbP1cxRPnhLM0dK135x3P1yH5
jUYCVE9qsOCADrDqgat8lCHAuG49JUnh1Bvibk9Tvyovt9dPdWpMSLBFUP4PscL7
wkgZr6MRyPptO+09+hMXQuRV30e2uVygmeIWuDTX68b7FWnPrVhBpg50yIfPs5ZS
2GGhK1kxflWqccl8aU23RlKKKaYMgZuyrfBO06y+rYDCxoADfigVGITeULlR/eAJ
HKv+fbLFHnW3eDfghLv6
-----END CERTIFICATE-----
Generated at Sun Nov 15 10:25:17 2026 by rpki-client