Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/5I926zTGrp2Z5fTnkBF017-7UCc.roa
File: 5I926zTGrp2Z5fTnkBF017-7UCc.roa (raw, json)
Hash identifier: /McvRCKOonJobo5UoChhc2t1WugRO3x8DKC/AIwuDaM=
Subject key identifier: E4:8F:76:EB:34:C6:AE:9D:99:E5:F4:E7:90:11:74:D7:BF:BB:50:27
Certificate issuer: /CN=826605b4d27f13968e8794e6ef091223748817d8
Certificate serial: 01A155AF5EF884220BB94FAE4F66B59C74EC
Authority key identifier: 82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/5I926zTGrp2Z5fTnkBF017-7UCc.roa
Signing time: Mon 19 Oct 2026 19:41:58 +0000
ROA not before: Mon 19 Oct 2026 19:41:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203156
IP address blocks: 92.50.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:55:af:5e:f8:84:22:0b:b9:4f:ae:4f:66:b5:9c:74:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=826605b4d27f13968e8794e6ef091223748817d8
Validity
Not Before: Oct 19 19:41:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e48f76eb34c6ae9d99e5f4e7901174d7bfbb5027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:cb:d8:47:6f:b4:ef:c4:cd:9d:35:56:1b:69:
0a:37:52:01:ab:91:65:d5:62:61:1c:e2:44:b3:da:
96:19:79:d5:1d:2f:2c:6d:4f:e3:fb:71:87:58:5e:
bc:55:8b:10:ec:54:4c:64:c5:4f:2d:e7:b7:2c:df:
3f:91:07:40:50:1c:23:30:31:6d:99:ff:e9:fe:b7:
c7:fc:7d:44:f8:d3:d1:1a:bd:9b:ce:e9:09:35:1a:
dc:13:75:56:50:bb:13:71:b4:45:4d:32:1b:14:14:
ea:b3:db:15:b0:89:cd:c8:12:41:3e:07:fe:84:c0:
fd:54:0b:de:78:59:68:d6:9b:c4:0b:d4:78:1a:d5:
b7:a2:56:a1:1a:54:82:87:aa:e9:fd:eb:7f:5a:a2:
b4:69:07:64:9a:1d:dd:ac:fe:ab:d9:f2:b3:74:8c:
b6:84:cf:2f:14:de:b6:2f:5f:a2:85:d4:0b:4e:ca:
84:99:ec:36:5e:54:39:8f:1c:0c:4e:e5:f4:61:5d:
61:f7:1b:0f:b8:46:6c:01:01:53:ce:2d:92:c9:1f:
ed:76:9b:00:b6:bf:dc:46:2d:d2:31:5e:36:f4:fd:
3c:37:af:86:f7:70:cc:93:0e:ae:6b:13:7f:35:42:
2c:8b:17:5f:0e:e6:5e:5f:dc:81:cb:15:03:ca:56:
02:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:8F:76:EB:34:C6:AE:9D:99:E5:F4:E7:90:11:74:D7:BF:BB:50:27
X509v3 Authority Key Identifier:
keyid:82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/5I926zTGrp2Z5fTnkBF017-7UCc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.50.3.0/24
Signature Algorithm: sha256WithRSAEncryption
93:e1:7c:8b:95:86:b0:ec:7b:4a:f8:65:81:05:40:2f:19:c5:
8b:04:c9:59:38:52:fc:ab:8a:93:3f:66:0c:a2:eb:83:f8:b2:
03:ff:e1:c8:17:fc:bf:f8:2d:c0:94:7a:89:a8:9d:c0:fa:02:
22:f7:03:9f:dc:87:1c:00:0a:cb:00:be:b7:0a:d4:f6:a8:82:
d6:c4:42:e6:0e:f5:b5:f4:d6:b9:fe:a8:7e:a4:29:3e:e7:0f:
77:5a:8b:27:52:c9:41:1c:7c:7d:27:1f:15:00:59:75:85:c1:
e6:cf:04:49:be:7f:c2:08:b6:61:09:1b:41:b6:06:1f:64:39:
21:6c:07:e0:1c:ff:0e:95:45:d0:23:b6:0d:b0:9b:04:97:ee:
2a:c4:15:d8:ff:24:55:66:af:04:8f:e1:b9:fc:c7:93:ab:90:
e3:eb:45:0e:25:62:be:9b:0e:65:3a:d1:0a:54:cc:b1:ed:3a:
24:f1:91:fe:d0:a0:3c:e8:13:0d:75:76:11:ad:77:61:76:d8:
71:68:a3:26:47:22:44:1f:ea:6b:df:2c:98:72:1b:b8:7d:e7:
33:a7:a7:5f:ee:52:5a:ae:61:9e:5b:74:60:11:a0:9e:37:05:
76:17:90:81:86:b8:e5:5d:30:e3:4e:72:36:c7:08:24:47:77:
93:60:e6:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 03:52:48 2026 by rpki-client