Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/1P2SuLFvccQJC4SilqlgUWBZ63M.roa
File: 1P2SuLFvccQJC4SilqlgUWBZ63M.roa (raw, json)
Hash identifier: a8PCmFkUcumYLsCwT3dcjpJWaUDfX51JMqb+zgxnkUU=
Subject key identifier: D4:FD:92:B8:B1:6F:71:C4:09:0B:84:A2:96:A9:60:51:60:59:EB:73
Certificate issuer: /CN=826605b4d27f13968e8794e6ef091223748817d8
Certificate serial: 01A17C737CCDBEAC2911FC0FD0CD969FF002
Authority key identifier: 82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/1P2SuLFvccQJC4SilqlgUWBZ63M.roa
Signing time: Tue 27 Oct 2026 08:21:45 +0000
ROA not before: Tue 27 Oct 2026 08:21:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401362
IP address blocks: 147.136.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:73:7c:cd:be:ac:29:11:fc:0f:d0:cd:96:9f:f0:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=826605b4d27f13968e8794e6ef091223748817d8
Validity
Not Before: Oct 27 08:21:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d4fd92b8b16f71c4090b84a296a960516059eb73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:38:36:7d:c3:4a:e2:da:42:74:4e:ff:75:64:
22:d9:06:67:04:98:13:19:38:d9:83:92:d4:09:23:
73:65:4e:04:df:8b:e8:79:85:42:f6:0d:e3:e6:47:
0a:a8:79:b1:7c:7d:e1:17:ef:9e:64:1a:7b:68:2a:
2f:e0:fa:29:54:4a:98:0e:0b:81:45:36:b5:6d:03:
83:7e:9c:7b:47:80:44:56:cc:2a:6d:d4:b3:29:ad:
7b:61:39:87:33:06:9e:a7:b9:9a:88:73:47:ca:6f:
f7:84:88:32:fe:0f:e9:a1:ad:d8:6c:0f:81:c9:95:
2e:5c:82:a4:f5:1e:bb:e1:60:10:bd:f9:92:f8:b9:
a7:f7:ae:20:09:f5:dd:8c:e8:53:4d:e2:ea:10:a9:
3c:dc:ac:19:79:5a:92:07:63:8b:8c:95:f6:4d:28:
bc:6d:61:c0:e7:22:2b:2d:f6:0c:a7:1f:c0:97:c4:
1b:ee:77:96:6b:5a:b2:86:0b:54:cd:c0:28:b8:4c:
b7:73:07:b4:8d:ec:94:ce:68:3e:2c:9a:87:42:11:
d6:0d:54:54:8a:ab:b6:f9:5f:42:01:41:a3:f9:de:
31:b5:62:2c:4f:5e:d6:6e:eb:47:6e:9c:66:70:62:
ad:e6:df:ec:6a:aa:22:5d:30:61:dc:c0:f9:97:5c:
42:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:FD:92:B8:B1:6F:71:C4:09:0B:84:A2:96:A9:60:51:60:59:EB:73
X509v3 Authority Key Identifier:
keyid:82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/1P2SuLFvccQJC4SilqlgUWBZ63M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.136.86.0/24
Signature Algorithm: sha256WithRSAEncryption
63:48:7a:4c:fa:ac:3f:1d:c0:c4:31:bf:c3:95:15:7b:c7:d9:
0d:7f:f1:6e:ac:48:78:e9:73:a6:fd:da:ed:5d:cd:86:0a:a1:
4e:c4:f3:c2:50:9d:b2:c7:f1:4e:a1:29:ab:0e:e4:0a:87:91:
03:f7:72:bc:40:27:d0:82:f5:fd:5f:61:05:ae:ae:0c:b1:e3:
02:f5:df:ca:84:25:f0:e6:f0:ea:6c:41:3b:7e:c5:c9:a1:95:
9d:9b:5f:65:32:c9:49:13:a0:8c:ae:64:3b:5a:9f:ec:5d:bb:
15:70:ca:33:eb:85:f9:33:f9:e8:14:4c:c1:2b:76:50:18:c1:
79:41:4e:d3:8e:01:ff:3a:18:08:70:2e:eb:c6:60:58:24:24:
d6:b1:08:45:3f:f6:ba:7c:ab:ce:17:d7:80:6a:fb:a2:70:f0:
09:51:63:d9:a2:44:1f:ec:a7:b7:d0:c7:ba:e8:3a:3c:7d:24:
42:a7:46:d1:2b:f4:5e:10:e1:49:ec:c3:3c:09:c3:c0:7c:b0:
c9:0d:93:80:48:2b:62:1b:37:06:03:7b:68:d4:96:da:e7:fd:
9c:7e:5d:41:e1:2c:a4:1b:2c:ff:47:fd:7c:3b:82:02:c6:f0:
33:8c:67:72:02:5c:94:d1:63:0e:89:3d:36:22:bc:4a:e0:10:
40:5c:e7:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 11:15:14 2026 by rpki-client