Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/q6YKUxlVHXPLjqallGnzCEm5RoQ.roa
File: q6YKUxlVHXPLjqallGnzCEm5RoQ.roa (raw, json)
Hash identifier: RZs0dJ+0lk6Oax9jGpNGT7gy4fY/ZgONFVX3dfP/0cM=
Subject key identifier: AB:A6:0A:53:19:55:1D:73:CB:8E:A6:A5:94:69:F3:08:49:B9:46:84
Certificate issuer: /CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Certificate serial: 019CF7DC35E0F6363F26C7B02888C932EFA2
Authority key identifier: 55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/q6YKUxlVHXPLjqallGnzCEm5RoQ.roa
Signing time: Mon 16 Mar 2026 18:15:29 +0000
ROA not before: Mon 16 Mar 2026 18:15:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30058
IP address blocks: 83.147.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f7:dc:35:e0:f6:36:3f:26:c7:b0:28:88:c9:32:ef:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Validity
Not Before: Mar 16 18:15:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aba60a5319551d73cb8ea6a59469f30849b94684
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:08:90:3b:fc:f3:34:ba:d8:d1:10:6c:47:68:
1a:db:d9:dc:aa:c0:4a:6a:ce:b8:9d:72:63:69:86:
a7:3e:48:10:94:e9:c9:a6:d6:56:e3:e6:41:99:50:
88:1e:76:6e:06:29:08:b6:3f:5f:23:fc:e9:e5:f3:
fe:2a:e3:e1:e8:e9:3a:05:da:4f:c0:97:10:a6:02:
ea:2b:75:29:07:9c:43:ed:7d:77:8b:01:ef:32:65:
27:72:d4:a0:73:04:c1:59:8b:d0:d9:d8:14:a2:13:
02:9c:95:20:fa:f1:fb:be:48:e4:44:a2:e2:c0:e4:
43:45:1f:e8:cd:d0:63:35:a0:7a:89:5e:69:a9:68:
28:54:96:7c:f1:e3:c0:60:2c:bf:13:d4:99:1a:eb:
ab:d6:ba:d5:30:05:56:56:91:77:50:11:ae:cb:85:
ec:f0:f7:aa:a0:6f:1e:5a:33:ac:ae:40:81:32:9b:
15:20:33:fe:76:4d:f0:23:35:8f:46:55:58:f3:03:
17:96:fd:2f:9c:15:96:fc:ce:9e:38:bc:51:2a:84:
e7:20:53:7e:56:a0:91:ea:58:23:29:fa:e7:1a:fd:
6e:73:52:ee:b2:c1:65:d4:65:7b:c4:1a:07:c9:32:
f1:66:3f:10:f4:ac:1a:b7:6d:7d:02:81:82:75:4c:
02:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:A6:0A:53:19:55:1D:73:CB:8E:A6:A5:94:69:F3:08:49:B9:46:84
X509v3 Authority Key Identifier:
keyid:55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/q6YKUxlVHXPLjqallGnzCEm5RoQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.217.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:32:94:27:47:2d:38:1a:2b:8c:b8:ee:e0:5d:c2:16:a5:2b:
69:12:2c:f1:1a:17:30:45:39:90:97:96:c4:47:dc:05:c1:ac:
9b:b8:70:82:af:3a:ed:d3:6b:ce:32:81:0c:75:ce:19:03:4a:
f6:94:52:b0:59:80:ed:2c:64:4b:7d:d0:91:a1:17:be:2a:79:
07:57:4e:14:67:3d:24:c7:f7:c5:b2:84:c7:18:87:4a:27:90:
ad:da:6b:fa:b6:4f:bf:03:12:bf:ba:5e:ca:5b:75:2f:12:ed:
15:2f:5e:c2:90:90:45:75:79:13:7c:a9:a4:b7:d4:9a:e1:6c:
03:36:12:a4:bd:a0:37:8b:65:01:04:05:b6:09:b5:5d:eb:56:
27:63:79:f8:50:a2:c5:2a:77:48:ce:04:7c:a0:14:5f:30:7e:
07:44:32:10:dd:2d:8c:08:ee:48:49:5a:b1:08:64:8f:d0:ec:
9d:68:34:f6:54:75:2f:66:17:df:2b:7e:32:e4:ec:65:ca:77:
07:83:e9:38:03:7a:e0:3f:80:95:fb:da:cc:29:da:bd:39:ed:
ab:3e:ac:41:db:b5:5b:f7:ae:46:68:a0:07:80:f9:2f:e2:ac:
fd:ab:45:1f:78:54:82:d3:96:f0:2a:a3:51:28:46:5b:72:85:
26:a0:1f:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:42:34 2026 by rpki-client