Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/0Nj5W80-CAp-ciH5G1sOGT8DohA.roa
File: 0Nj5W80-CAp-ciH5G1sOGT8DohA.roa (raw, json)
Hash identifier: DZfcXDxnuP00lJ2Opa9XSS6dCNvOeYFfbWhPCdmMdMA=
Subject key identifier: D0:D8:F9:5B:CD:3E:08:0A:7E:72:21:F9:1B:5B:0E:19:3F:03:A2:10
Certificate issuer: /CN=826605b4d27f13968e8794e6ef091223748817d8
Certificate serial: 01A12D97F3A0C1D2320F34A9444FF3CD7355
Authority key identifier: 82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/0Nj5W80-CAp-ciH5G1sOGT8DohA.roa
Signing time: Mon 12 Oct 2026 00:51:35 +0000
ROA not before: Mon 12 Oct 2026 00:51:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214483
IP address blocks: 147.136.89.0/24 maxlen: 24
147.136.91.0/24 maxlen: 24
168.199.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 09:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2d:97:f3:a0:c1:d2:32:0f:34:a9:44:4f:f3:cd:73:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=826605b4d27f13968e8794e6ef091223748817d8
Validity
Not Before: Oct 12 00:51:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d0d8f95bcd3e080a7e7221f91b5b0e193f03a210
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f9:74:ce:42:18:f2:b5:2b:ea:30:8d:16:06:
11:5c:d0:eb:54:09:bd:95:25:ce:40:b0:14:18:0d:
72:e0:f6:42:b6:ee:48:b9:56:94:40:de:86:bd:56:
95:d5:92:af:b9:58:70:6e:91:7a:0f:2f:db:99:06:
ee:e8:7c:27:42:23:eb:7f:ca:36:6e:bf:97:21:18:
17:90:e3:55:30:3a:cf:16:41:d5:c3:3c:ba:8d:d6:
5e:d8:47:41:9c:73:d4:f1:fe:6e:ab:60:3f:65:1a:
e4:c8:be:3b:58:76:be:ad:b8:0a:69:d0:07:ae:bc:
96:e0:c0:82:94:c7:e6:fc:a1:1f:fc:51:fb:b9:26:
8e:f2:8e:45:b5:db:55:33:83:24:78:9b:a1:c0:e5:
dc:88:c8:f6:c8:e9:09:f9:5d:31:4d:3f:5b:9c:86:
a4:8f:90:41:bf:0d:ca:15:33:da:d4:50:a1:52:0f:
a5:8a:b8:42:7a:a8:a1:95:0a:56:04:bd:88:7e:83:
1a:b4:97:60:d9:9e:09:73:b9:35:bf:ae:ab:32:ec:
2d:80:d6:15:1c:3b:9d:47:41:49:c2:9c:84:03:cd:
b5:00:84:18:f8:34:8e:0f:e6:57:0f:b8:47:51:39:
b1:49:ab:44:37:82:5b:6b:f5:d7:4c:f8:55:28:1f:
5b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:D8:F9:5B:CD:3E:08:0A:7E:72:21:F9:1B:5B:0E:19:3F:03:A2:10
X509v3 Authority Key Identifier:
keyid:82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/0Nj5W80-CAp-ciH5G1sOGT8DohA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.136.89.0/24
147.136.91.0/24
168.199.136.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:72:cc:6c:bd:ec:cb:86:3d:4c:8c:2d:ee:bc:8b:55:4c:b6:
2c:36:ab:f4:cb:4b:d5:c0:cf:90:de:8c:f5:5a:ee:e6:75:75:
ca:ab:6f:4d:04:0e:31:ad:76:ae:32:45:cd:6a:90:a5:e4:ca:
72:4d:ee:15:f3:66:df:ae:e7:02:05:45:cb:f8:99:75:39:24:
f7:81:16:79:eb:ab:b8:cf:18:58:73:b5:5f:33:3b:0a:08:b6:
9c:f2:12:0d:e1:bb:8d:e8:61:32:f6:85:e4:27:e9:5c:94:87:
c4:56:58:ea:28:61:e0:9f:d5:2a:ab:90:0e:bc:d6:a4:a6:e8:
d6:3d:3b:5c:06:94:5d:f9:f7:99:24:2e:3c:79:49:95:50:2a:
91:4e:71:68:51:a0:96:1b:11:d0:95:83:08:11:b2:52:7e:e1:
79:8f:75:08:f0:b2:26:34:5d:44:f5:53:45:8b:3b:b7:8b:e1:
96:27:26:e2:b2:1e:9e:5e:dc:f5:ed:53:47:8f:50:32:68:61:
8b:91:3e:3e:8a:83:09:ea:e4:23:f9:bb:14:55:0e:6c:8f:a7:
82:66:e7:76:13:fd:77:6e:48:4d:f9:e5:2b:27:89:00:0c:b4:
2a:80:ae:88:35:ed:66:93:98:61:49:68:f8:96:15:a4:ca:35:
b6:55:32:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 15:11:38 2026 by rpki-client