Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/2bDGTj-vuHIefecSirA-ylKa7hQ.roa
File: 2bDGTj-vuHIefecSirA-ylKa7hQ.roa (raw, json)
Hash identifier: xJwZRMbztMWRzI2eqKUcHuKpcW+DDFbx6TBYa/3sbVs=
Subject key identifier: D9:B0:C6:4E:3F:AF:B8:72:1E:7D:E7:12:8A:B0:3E:CA:52:9A:EE:14
Certificate issuer: /CN=826605b4d27f13968e8794e6ef091223748817d8
Certificate serial: 01A107999F060E9523D3AAFE8A4A8FA9DC70
Authority key identifier: 82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/2bDGTj-vuHIefecSirA-ylKa7hQ.roa
Signing time: Sun 04 Oct 2026 15:47:50 +0000
ROA not before: Sun 04 Oct 2026 15:47:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402671
IP address blocks: 147.136.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 00:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:07:99:9f:06:0e:95:23:d3:aa:fe:8a:4a:8f:a9:dc:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=826605b4d27f13968e8794e6ef091223748817d8
Validity
Not Before: Oct 4 15:47:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d9b0c64e3fafb8721e7de7128ab03eca529aee14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:55:cc:21:83:b2:5e:37:60:03:ce:85:57:12:
39:0c:25:c9:ec:35:6b:a2:4a:61:aa:95:75:a5:41:
98:ce:9a:34:05:fa:83:b5:16:76:99:3f:05:a8:63:
f4:b7:10:f5:d8:c1:6f:6a:73:46:0b:32:71:26:27:
b4:71:6b:da:f6:6e:27:21:71:fc:3e:d0:55:b1:53:
8a:30:3d:2d:12:38:b8:ff:55:13:7e:4a:bf:47:9b:
e8:8f:b0:c3:f2:98:93:f3:9d:cd:bf:23:94:71:fc:
36:0e:ce:43:81:8f:6b:ce:7f:30:6a:80:78:4e:79:
7e:d2:3b:41:ab:2d:47:f2:ed:83:b3:ce:1c:fc:49:
9b:25:09:d8:47:18:bf:10:e3:52:b5:65:9d:c9:5b:
b1:04:47:4b:04:13:50:94:ea:d0:20:25:0e:a2:7d:
ef:7f:e9:1e:dd:c1:b0:c7:77:10:dc:34:f6:ae:35:
20:af:31:64:b5:b5:24:0b:03:86:f9:c0:a9:63:d0:
7b:44:29:72:ca:15:8c:52:31:ad:0f:b1:1a:33:52:
0e:8e:ba:84:01:fa:a8:b0:48:a3:42:7a:b5:c1:1d:
03:37:5f:a9:50:c6:e6:59:31:1c:fb:1c:00:32:fd:
ef:24:0c:2d:59:52:fc:db:be:27:3e:c3:3e:f9:5e:
25:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:B0:C6:4E:3F:AF:B8:72:1E:7D:E7:12:8A:B0:3E:CA:52:9A:EE:14
X509v3 Authority Key Identifier:
keyid:82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/2bDGTj-vuHIefecSirA-ylKa7hQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.136.88.0/24
Signature Algorithm: sha256WithRSAEncryption
11:b9:14:ed:f7:ff:9e:a5:34:a6:e6:1f:10:66:45:58:5e:97:
64:e5:d9:b7:4c:cc:1e:68:4d:1d:e7:7b:80:4c:7e:02:da:db:
5c:27:2d:33:f1:14:72:8d:31:7c:9a:9d:f4:2f:1e:ce:c5:b6:
9b:c1:8c:3a:4d:36:1b:3a:02:c9:77:1e:e0:7d:8c:20:75:32:
94:71:4b:17:f8:58:c7:6c:46:65:b7:74:be:21:aa:6b:f8:58:
49:67:37:3a:50:d6:b8:21:56:62:5f:74:d6:58:67:2f:03:b2:
6b:a9:58:c6:cd:9d:36:64:1c:ea:70:f3:fc:9f:dc:87:a8:c4:
ac:03:51:5b:d6:59:03:49:32:5a:b9:9a:cd:d8:09:e6:2d:b3:
64:de:49:ac:1b:92:4c:33:88:00:80:d9:01:07:9a:82:32:6e:
b6:31:2f:01:16:58:b5:0f:26:6b:c3:7c:85:6c:1b:42:16:30:
8b:53:97:c6:e3:ff:18:d9:8e:96:5b:f3:ba:5e:1e:3d:37:67:
7e:b7:7d:a6:fc:18:c3:89:e4:51:52:e9:fb:da:e8:ed:33:6a:
b2:4c:b4:87:44:26:4f:52:fc:73:60:7c:4d:4c:2d:6a:37:f6:
c4:94:1a:5b:37:d9:b3:8b:2b:a5:33:c5:b2:37:d6:9f:94:a2:
ca:dc:8c:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 15:11:27 2026 by rpki-client