Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/ebe6a2-bc18-44ad-97e9-42103ef5151c/1/VaUOeddLU0hCXt8tPrC1ZotSQs4.roa
File: VaUOeddLU0hCXt8tPrC1ZotSQs4.roa (raw, json)
Hash identifier: XSY3wuC0eD9KXuc6vR1Pu+SEWd27cbqiDNs471slwo8=
Subject key identifier: 55:A5:0E:79:D7:4B:53:48:42:5E:DF:2D:3E:B0:B5:66:8B:52:42:CE
Certificate issuer: /CN=dc399e8da0a13f3ed70d858197da2ad3e74bea84
Certificate serial: 01A1843701B26935515BDCC816C09EC8864F
Authority key identifier: DC:39:9E:8D:A0:A1:3F:3E:D7:0D:85:81:97:DA:2A:D3:E7:4B:EA:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3DmejaChPz7XDYWBl9oq0-dL6oQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/ebe6a2-bc18-44ad-97e9-42103ef5151c/1/VaUOeddLU0hCXt8tPrC1ZotSQs4.roa
Signing time: Wed 28 Oct 2026 20:32:39 +0000
ROA not before: Wed 28 Oct 2026 20:32:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 185.54.68.0/24 maxlen: 24
185.54.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/ebe6a2-bc18-44ad-97e9-42103ef5151c/1/3DmejaChPz7XDYWBl9oq0-dL6oQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/ebe6a2-bc18-44ad-97e9-42103ef5151c/1/3DmejaChPz7XDYWBl9oq0-dL6oQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3DmejaChPz7XDYWBl9oq0-dL6oQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:84:37:01:b2:69:35:51:5b:dc:c8:16:c0:9e:c8:86:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc399e8da0a13f3ed70d858197da2ad3e74bea84
Validity
Not Before: Oct 28 20:32:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=55a50e79d74b5348425edf2d3eb0b5668b5242ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e2:54:47:2f:ca:1c:21:60:be:8d:86:4a:15:
fa:ca:c7:6a:01:8e:7b:a6:69:d0:7d:7c:18:ae:d2:
07:4f:f2:ed:c1:ea:6b:38:ed:83:24:a5:c1:ae:15:
bc:d8:d5:6e:0b:b5:26:26:d4:97:44:0b:61:69:fe:
a7:19:1f:33:7b:28:61:a5:62:e3:07:95:f5:74:47:
c1:96:1a:c6:51:b4:57:b3:00:d6:6d:bb:7f:7e:96:
38:9f:0d:8c:0c:28:b2:1b:90:2c:ad:28:04:64:d5:
1a:76:0f:eb:6a:e7:ca:c5:f8:a8:70:81:84:26:51:
46:08:c6:a3:48:4b:78:5a:c8:32:8b:6d:80:4d:e1:
44:48:7e:0c:aa:02:2b:1c:54:19:3c:c9:5c:ff:2a:
1f:fe:c7:5e:10:f3:00:b0:26:87:c4:99:67:87:ac:
54:15:58:2e:19:6b:35:a3:f1:8b:84:63:be:db:f7:
ae:87:c1:7a:2b:5a:d4:b0:76:ff:e4:2d:68:95:b6:
05:f6:d7:d0:e2:2b:87:00:9d:7d:a2:5d:cd:a0:26:
6a:7d:d9:60:0f:9e:6e:31:d5:17:f7:1d:df:24:05:
f1:3c:c3:09:b3:36:44:19:97:eb:0f:b3:a2:ec:9d:
5c:f1:ab:be:18:40:24:33:da:7b:33:95:6f:2c:e8:
3c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:A5:0E:79:D7:4B:53:48:42:5E:DF:2D:3E:B0:B5:66:8B:52:42:CE
X509v3 Authority Key Identifier:
keyid:DC:39:9E:8D:A0:A1:3F:3E:D7:0D:85:81:97:DA:2A:D3:E7:4B:EA:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DmejaChPz7XDYWBl9oq0-dL6oQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/ebe6a2-bc18-44ad-97e9-42103ef5151c/1/VaUOeddLU0hCXt8tPrC1ZotSQs4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/ebe6a2-bc18-44ad-97e9-42103ef5151c/1/3DmejaChPz7XDYWBl9oq0-dL6oQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.54.68.0/23
Signature Algorithm: sha256WithRSAEncryption
15:d6:c9:66:93:5b:00:88:a3:40:03:32:64:1d:35:e6:be:4b:
05:9b:48:a8:f1:7e:f0:40:59:04:ab:f7:2a:e7:41:2c:5a:5d:
68:26:e2:64:18:cf:dd:3b:ff:e7:75:c8:82:08:24:a7:3c:cb:
2d:92:23:7f:49:21:01:7f:53:b8:f3:32:d7:f1:f7:ca:8f:28:
de:f9:2d:1b:12:7d:2c:2f:95:6d:85:c5:40:f7:6a:95:78:72:
d0:8b:54:fd:f0:62:72:ae:de:a6:87:bf:4c:ec:88:40:4d:fa:
2b:dc:db:b3:0b:a5:f7:a8:dd:78:db:df:6e:90:74:3c:61:27:
cf:05:0d:f8:37:4e:2c:dc:6c:1b:d4:7d:03:a1:d5:06:66:24:
31:f6:ec:43:4b:66:4f:eb:ca:6b:34:ab:43:63:60:ac:bc:c6:
79:a5:95:01:63:e2:3a:68:35:bc:0d:d0:59:93:e1:9a:47:15:
98:c5:0d:04:13:40:2b:a8:65:67:3c:fa:db:c1:17:3b:f4:de:
7f:68:16:c4:a6:8f:f8:7b:1f:c1:78:50:10:96:1d:7c:7c:8c:
a2:13:d5:18:f8:b4:8c:00:17:f7:89:4b:84:4c:cc:27:5c:07:
db:84:25:45:2a:91:6f:13:46:35:74:f1:da:b5:b7:a6:46:59:
bf:5d:6d:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:31:49 2026 by rpki-client