Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/_i48lM7Eo2rHrByRjlyXrsH3U0s.roa
File: _i48lM7Eo2rHrByRjlyXrsH3U0s.roa (raw, json)
Hash identifier: 1uIQEbGFJJUEbYdq8UFZ0GO0fOqrd7bHytEfXmOkqyc=
Subject key identifier: FE:2E:3C:94:CE:C4:A3:6A:C7:AC:1C:91:8E:5C:97:AE:C1:F7:53:4B
Certificate issuer: /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial: 01A15488926A688CBD184651F71DB54E0A12
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/_i48lM7Eo2rHrByRjlyXrsH3U0s.roa
Signing time: Mon 19 Oct 2026 14:19:58 +0000
ROA not before: Mon 19 Oct 2026 14:19:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218450
IP address blocks: 139.28.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 04:42:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:54:88:92:6a:68:8c:bd:18:46:51:f7:1d:b5:4e:0a:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Validity
Not Before: Oct 19 14:19:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fe2e3c94cec4a36ac7ac1c918e5c97aec1f7534b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:70:8c:7b:7d:0a:7d:df:88:98:db:21:10:9a:
1d:68:38:e6:25:8f:c8:a4:04:ef:fd:e6:ed:93:d7:
99:64:c2:b6:1b:fb:ea:02:78:c9:ad:67:b2:f3:ec:
ec:04:a3:4d:45:27:ef:15:99:25:e6:69:f5:ab:04:
9d:94:22:44:73:09:dc:a4:f2:09:5c:a2:fd:50:6a:
83:b4:46:3b:21:b3:e1:52:95:d2:c9:0c:74:5b:d8:
e0:7c:e5:15:64:86:94:f4:71:69:a7:62:ee:ae:26:
db:2e:c7:98:17:a8:81:77:e3:6e:91:b5:e9:d8:c9:
06:06:14:f8:1b:40:1a:2a:dc:af:73:94:14:c4:00:
49:67:c4:1e:67:2c:b5:64:27:d9:9c:6b:1a:bd:56:
66:14:5f:f9:88:eb:4b:7a:8f:31:e7:a6:87:23:24:
5c:e0:31:b4:f3:c9:0e:5b:84:85:53:2c:13:5b:af:
ba:5c:32:76:27:8a:9b:c0:9f:51:65:20:06:fc:3f:
1c:6f:59:ce:89:12:e9:11:ed:06:81:3e:46:be:5d:
85:c1:6c:c8:55:b4:5f:73:5b:b1:cd:3f:fb:6d:f0:
b6:ee:1f:dd:b3:12:02:e1:4e:92:c4:69:c0:05:d4:
b3:52:8f:81:71:96:46:c3:1b:91:3f:0d:81:8a:fc:
3b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:2E:3C:94:CE:C4:A3:6A:C7:AC:1C:91:8E:5C:97:AE:C1:F7:53:4B
X509v3 Authority Key Identifier:
keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/_i48lM7Eo2rHrByRjlyXrsH3U0s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.28.50.0/24
Signature Algorithm: sha256WithRSAEncryption
46:95:9c:ab:9f:da:62:40:91:25:08:8f:62:62:4c:97:76:1b:
11:6b:af:4a:ba:27:56:ec:3a:5a:89:2b:8b:5e:2f:1e:f0:3e:
7e:9f:83:cb:4c:e6:89:80:75:55:1c:9b:1b:46:4b:cd:b9:a2:
fc:c5:af:a7:2a:e3:43:8a:09:51:fe:ea:01:98:89:94:19:ca:
ac:58:ac:cd:ec:2f:f3:9d:86:df:3f:d1:6f:c9:9b:1e:fb:53:
4f:72:10:78:90:f8:39:ae:63:95:55:e2:fe:8e:8e:0c:ed:bd:
0e:b7:c0:6e:be:6c:3e:86:e2:df:42:a6:c5:69:27:92:87:83:
57:12:ef:89:e7:40:c2:1e:ca:f5:c2:d4:3b:c5:21:d5:7a:c9:
9e:20:93:c8:ea:4a:db:2e:90:69:b6:9a:e7:5e:4c:31:8d:40:
e8:a0:64:7d:84:de:8d:8e:c0:42:b6:b9:81:e4:7e:f6:8e:fe:
e7:40:17:c0:96:d7:d2:d7:fa:88:04:3f:84:78:4f:e7:91:85:
3b:c5:50:39:94:f9:45:c2:f1:0d:b6:b0:5a:7c:37:e8:5a:09:
93:f8:e5:61:4e:f3:e5:ed:ee:c6:73:fe:50:e8:31:43:7a:2b:
46:62:04:95:d9:24:ec:62:ac:26:c9:13:6f:98:5a:31:09:6b:
d4:54:a6:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 10:40:17 2026 by rpki-client