Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/1d9FyDQbZqJdl4kUl7PEkczd_Uc.roa
File: 1d9FyDQbZqJdl4kUl7PEkczd_Uc.roa (raw, json)
Hash identifier: X2JDlYQu0x597NKzGyR+q5gr04KGEsSx+Lu2wuq06RQ=
Subject key identifier: D5:DF:45:C8:34:1B:66:A2:5D:97:89:14:97:B3:C4:91:CC:DD:FD:47
Certificate issuer: /CN=826605b4d27f13968e8794e6ef091223748817d8
Certificate serial: 01A121DED99DD6CF723C8B3E23395302E3F6
Authority key identifier: 82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/1d9FyDQbZqJdl4kUl7PEkczd_Uc.roa
Signing time: Fri 09 Oct 2026 18:13:35 +0000
ROA not before: Fri 09 Oct 2026 18:13:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152726
IP address blocks: 92.50.0.0/24 maxlen: 24
185.101.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:21:de:d9:9d:d6:cf:72:3c:8b:3e:23:39:53:02:e3:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=826605b4d27f13968e8794e6ef091223748817d8
Validity
Not Before: Oct 9 18:13:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d5df45c8341b66a25d97891497b3c491ccddfd47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e7:a6:cb:06:5b:1c:a6:ff:77:68:be:95:46:
11:5c:4c:8d:49:93:92:d1:5a:0b:6f:e0:40:21:b2:
eb:12:6e:97:f9:e8:d2:2e:70:1b:1b:0c:28:b9:14:
94:52:14:62:4d:c7:07:59:65:49:d9:41:0e:74:dc:
bb:16:89:2b:7f:00:e5:c8:63:49:49:22:54:03:93:
9f:30:36:81:ef:3b:78:b9:77:c6:f9:9f:a7:18:a3:
38:72:cb:06:b1:6d:8c:3d:e8:ae:c7:96:45:43:e1:
b6:86:94:17:bd:1c:a4:e9:1b:5a:23:fc:41:a0:21:
f9:d6:e4:05:1f:dc:28:0a:95:e8:a0:db:8d:ac:00:
f4:87:22:95:78:09:a3:25:f1:08:56:f5:0c:33:12:
42:9a:e1:30:14:60:23:10:f5:a2:fe:45:60:db:c8:
8f:15:26:40:96:93:b3:b1:79:8e:8f:08:b0:6f:4e:
5c:ed:84:1c:4b:6c:f3:be:6b:ef:32:81:37:0b:ea:
2c:46:1e:7d:c2:3d:88:77:0c:14:e6:92:11:16:7a:
48:e7:d5:2e:5a:70:93:8f:83:f9:b5:38:52:b3:60:
ee:1c:a8:7f:52:97:8b:c0:44:dd:32:60:8d:c5:3f:
38:90:2a:9d:2a:87:67:59:c1:a4:42:93:0d:08:22:
b3:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:DF:45:C8:34:1B:66:A2:5D:97:89:14:97:B3:C4:91:CC:DD:FD:47
X509v3 Authority Key Identifier:
keyid:82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/1d9FyDQbZqJdl4kUl7PEkczd_Uc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.50.0.0/24
185.101.244.0/24
Signature Algorithm: sha256WithRSAEncryption
93:d1:de:4f:92:ca:76:36:83:7c:8e:3b:b4:76:44:ac:82:07:
6d:f8:90:fd:ff:d8:0b:cd:5f:f4:14:8b:cc:7b:4b:ba:4d:2e:
8e:f8:0c:04:b3:c7:5b:e2:65:6a:63:7c:51:59:de:7d:75:e1:
3f:96:49:1a:97:f0:d5:5e:ee:e9:5b:bc:63:0a:e0:76:c6:d3:
9d:0b:48:1e:dc:eb:4d:ad:80:1e:ee:91:76:87:b4:4e:f2:1d:
78:ae:2e:5b:98:44:3b:00:99:d9:b2:29:c1:10:5c:b9:e1:f2:
61:29:73:ef:b5:00:8a:7c:a0:cf:d1:06:71:8f:ef:55:fa:93:
0b:4a:3e:ae:1e:6a:82:6e:c6:68:c5:17:71:ff:e9:94:13:d7:
0f:93:1b:7b:90:1a:06:f1:26:52:b6:07:e2:a1:40:d0:b6:ec:
8b:50:10:9f:42:ed:3d:5d:18:ab:75:85:e9:c6:7e:26:ac:72:
45:41:61:59:43:ba:e7:42:f1:0e:77:96:dc:09:ea:f9:07:e0:
09:2f:f2:64:7d:85:d9:8c:15:c7:85:22:05:0e:bc:45:fe:e3:
b5:e2:a9:bd:18:47:15:b3:77:13:7f:ec:c0:66:bc:2b:f5:95:
10:64:8e:b6:7a:09:60:e8:f6:9b:e5:18:70:d9:50:43:6b:8e:
99:07:df:17
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaEh3tmd1s9yPIs+IzlTAuP2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyNjYwNWI0ZDI3ZjEzOTY4ZTg3OTRlNmVmMDkxMjIzNzQ4
ODE3ZDgwHhcNMjYxMDA5MTgxMzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNWRmNDVjODM0MWI2NmEyNWQ5Nzg5MTQ5N2IzYzQ5MWNjZGRmZDQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0uemywZbHKb/d2i+lUYRXEyNSZOS
0VoLb+BAIbLrEm6X+ejSLnAbGwwouRSUUhRiTccHWWVJ2UEOdNy7FokrfwDlyGNJ
SSJUA5OfMDaB7zt4uXfG+Z+nGKM4cssGsW2MPeiux5ZFQ+G2hpQXvRyk6RtaI/xB
oCH51uQFH9woCpXooNuNrAD0hyKVeAmjJfEIVvUMMxJCmuEwFGAjEPWi/kVg28iP
FSZAlpOzsXmOjwiwb05c7YQcS2zzvmvvMoE3C+osRh59wj2IdwwU5pIRFnpI59Uu
WnCTj4P5tThSs2DuHKh/UpeLwETdMmCNxT84kCqdKodnWcGkQpMNCCKz/QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFNXfRcg0G2aiXZeJFJezxJHM3f1HMB8GA1UdIwQY
MBaAFIJmBbTSfxOWjoeU5u8JEiN0iBfYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ21ZRnROSl9FNWFPaDVUbTd3a1NJM1NJRjlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9mYmNjMzItMzNjOC00MWZmLTg5ZmEt
MmQxOTE4YmExYzBlLzEvMWQ5RnlEUWJacUpkbDRrVWw3UEVrY3pkX1VjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny9mYmNjMzItMzNjOC00MWZmLTg5ZmEtMmQxOTE4YmExYzBl
LzEvZ21ZRnROSl9FNWFPaDVUbTd3a1NJM1NJRjlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXDIAAwQA
uWX0MA0GCSqGSIb3DQEBCwUAA4IBAQCT0d5Pksp2NoN8jju0dkSsggdt+JD9/9gL
zV/0FIvMe0u6TS6O+AwEs8db4mVqY3xRWd59deE/lkkal/DVXu7pW7xjCuB2xtOd
C0ge3OtNrYAe7pF2h7RO8h14ri5bmEQ7AJnZsinBEFy54fJhKXPvtQCKfKDP0QZx
j+9V+pMLSj6uHmqCbsZoxRdx/+mUE9cPkxt7kBoG8SZStgfioUDQtuyLUBCfQu09
XRirdYXpxn4mrHJFQWFZQ7rnQvEOd5bcCer5B+AJL/JkfYXZjBXHhSIFDrxF/uO1
4qm9GEcVs3cTf+zAZrwr9ZUQZI62eglg6Pab5Rhw2VBDa46ZB98X
-----END CERTIFICATE-----
Generated at Tue Oct 13 01:16:32 2026 by rpki-client