Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/90jzWC09j31eicEBPbQABN_XCok.roa
File: 90jzWC09j31eicEBPbQABN_XCok.roa (raw, json)
Hash identifier: hEoXXfgHazv/V8OYJz1TkL0+xxedJpK+eEPdOo/jKO0=
Subject key identifier: F7:48:F3:58:2D:3D:8F:7D:5E:89:C1:01:3D:B4:00:04:DF:D7:0A:89
Certificate issuer: /CN=826605b4d27f13968e8794e6ef091223748817d8
Certificate serial: 019E7D26FB3DA2F423113D86BB8197B7584F
Authority key identifier: 82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/90jzWC09j31eicEBPbQABN_XCok.roa
Signing time: Sun 31 May 2026 08:29:27 +0000
ROA not before: Sun 31 May 2026 08:29:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9009
IP address blocks: 92.50.14.0/24 maxlen: 24
92.50.15.0/24 maxlen: 24
92.50.16.0/24 maxlen: 24
92.50.17.0/24 maxlen: 24
92.50.18.0/24 maxlen: 24
92.50.19.0/24 maxlen: 24
92.50.20.0/24 maxlen: 24
92.50.21.0/24 maxlen: 24
92.50.22.0/24 maxlen: 24
92.50.23.0/24 maxlen: 24
92.50.24.0/24 maxlen: 24
92.50.25.0/24 maxlen: 24
92.50.26.0/24 maxlen: 24
92.50.27.0/24 maxlen: 24
92.50.28.0/24 maxlen: 24
92.50.29.0/24 maxlen: 24
92.50.30.0/24 maxlen: 24
92.50.31.0/24 maxlen: 24
92.50.32.0/24 maxlen: 24
92.50.33.0/24 maxlen: 24
92.50.34.0/24 maxlen: 24
92.50.35.0/24 maxlen: 24
92.50.36.0/24 maxlen: 24
92.50.37.0/24 maxlen: 24
92.50.38.0/24 maxlen: 24
92.50.39.0/24 maxlen: 24
92.50.40.0/24 maxlen: 24
92.50.41.0/24 maxlen: 24
92.50.42.0/24 maxlen: 24
92.50.43.0/24 maxlen: 24
92.50.44.0/24 maxlen: 24
92.50.45.0/24 maxlen: 24
92.50.46.0/24 maxlen: 24
92.50.47.0/24 maxlen: 24
92.50.48.0/24 maxlen: 24
92.50.49.0/24 maxlen: 24
92.50.50.0/24 maxlen: 24
92.50.51.0/24 maxlen: 24
92.50.52.0/24 maxlen: 24
92.50.53.0/24 maxlen: 24
92.50.54.0/24 maxlen: 24
92.50.55.0/24 maxlen: 24
92.50.56.0/24 maxlen: 24
92.50.57.0/24 maxlen: 24
92.50.58.0/24 maxlen: 24
92.50.59.0/24 maxlen: 24
92.50.60.0/24 maxlen: 24
92.50.61.0/24 maxlen: 24
92.50.62.0/24 maxlen: 24
92.50.63.0/24 maxlen: 24
147.136.78.0/24 maxlen: 24
147.136.79.0/24 maxlen: 24
147.136.84.0/24 maxlen: 24
147.136.86.0/24 maxlen: 24
147.136.87.0/24 maxlen: 24
168.199.133.0/24 maxlen: 24
168.199.134.0/24 maxlen: 24
168.199.135.0/24 maxlen: 24
168.199.136.0/24 maxlen: 24
168.199.137.0/24 maxlen: 24
168.199.138.0/24 maxlen: 24
168.199.139.0/24 maxlen: 24
168.199.140.0/24 maxlen: 24
168.199.141.0/24 maxlen: 24
168.199.142.0/24 maxlen: 24
168.199.143.0/24 maxlen: 24
168.199.144.0/24 maxlen: 24
168.199.145.0/24 maxlen: 24
168.199.146.0/24 maxlen: 24
168.199.147.0/24 maxlen: 24
168.199.148.0/24 maxlen: 24
168.199.149.0/24 maxlen: 24
168.199.150.0/24 maxlen: 24
168.199.151.0/24 maxlen: 24
168.199.152.0/24 maxlen: 24
168.199.153.0/24 maxlen: 24
168.199.154.0/24 maxlen: 24
168.199.155.0/24 maxlen: 24
168.199.156.0/24 maxlen: 24
168.199.157.0/24 maxlen: 24
168.199.158.0/24 maxlen: 24
168.199.159.0/24 maxlen: 24
168.199.164.0/24 maxlen: 24
168.199.166.0/24 maxlen: 24
168.199.167.0/24 maxlen: 24
168.199.168.0/24 maxlen: 24
168.199.174.0/24 maxlen: 24
168.199.192.0/24 maxlen: 24
168.199.193.0/24 maxlen: 24
168.199.202.0/24 maxlen: 24
168.199.203.0/24 maxlen: 24
168.199.204.0/24 maxlen: 24
168.199.206.0/24 maxlen: 24
168.199.208.0/24 maxlen: 24
168.199.211.0/24 maxlen: 24
168.199.216.0/24 maxlen: 24
168.199.217.0/24 maxlen: 24
168.199.218.0/24 maxlen: 24
168.199.219.0/24 maxlen: 24
168.199.222.0/24 maxlen: 24
168.199.226.0/24 maxlen: 24
168.199.228.0/24 maxlen: 24
168.199.230.0/24 maxlen: 24
168.199.240.0/24 maxlen: 24
168.199.241.0/24 maxlen: 24
168.199.242.0/24 maxlen: 24
168.199.243.0/24 maxlen: 24
168.199.244.0/24 maxlen: 24
168.199.245.0/24 maxlen: 24
168.199.246.0/24 maxlen: 24
168.199.247.0/24 maxlen: 24
168.199.248.0/24 maxlen: 24
168.199.249.0/24 maxlen: 24
168.199.250.0/24 maxlen: 24
168.199.251.0/24 maxlen: 24
168.199.252.0/24 maxlen: 24
168.199.253.0/24 maxlen: 24
168.199.254.0/24 maxlen: 24
168.199.255.0/24 maxlen: 24
185.100.58.0/24 maxlen: 24
192.95.85.0/24 maxlen: 24
192.95.86.0/24 maxlen: 24
192.95.91.0/24 maxlen: 24
2001:678:8b4::/48 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 14:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:7d:26:fb:3d:a2:f4:23:11:3d:86:bb:81:97:b7:58:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=826605b4d27f13968e8794e6ef091223748817d8
Validity
Not Before: May 31 08:29:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f748f3582d3d8f7d5e89c1013db40004dfd70a89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f2:f3:4b:24:84:8f:3a:c4:ad:9c:d9:b3:c9:
ba:fc:38:55:26:f4:76:b1:11:fd:cb:26:c3:2e:2b:
de:65:a2:e1:43:68:77:16:24:cb:6a:bf:78:43:e6:
70:2c:50:b4:01:5c:9d:c6:04:d6:6a:93:ca:cf:37:
af:65:c0:7c:ae:f4:4b:0d:87:c0:ec:71:27:a2:f5:
27:cc:86:fb:23:2f:07:fc:71:99:e2:a0:7f:28:06:
a0:e9:28:08:c1:5b:e5:02:b7:88:2e:7b:07:d1:77:
92:9f:64:f1:c2:0a:1f:2d:21:a9:e1:02:9c:8c:85:
44:64:e7:3e:3c:88:db:88:ca:53:64:1e:f7:46:e3:
b3:d5:1b:c2:5a:46:12:67:a7:ea:17:46:1c:7e:5f:
e3:9a:06:a4:dd:e2:29:10:8a:0d:53:01:a0:55:0f:
6e:60:43:fe:f9:5a:42:9a:64:e3:ba:50:d7:2a:63:
75:48:5e:bc:f9:45:86:63:32:22:18:9f:f8:26:1e:
94:d0:e5:9f:9c:59:56:1f:fd:f1:a4:f1:73:86:71:
e3:75:c7:e8:4b:b8:24:db:ee:dc:b5:f7:96:88:97:
1a:6c:f7:c4:ae:d5:69:0d:89:4c:7d:92:89:5c:30:
8f:9f:03:92:b9:d3:6c:cd:1e:72:ad:40:69:28:f5:
77:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:48:F3:58:2D:3D:8F:7D:5E:89:C1:01:3D:B4:00:04:DF:D7:0A:89
X509v3 Authority Key Identifier:
keyid:82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/90jzWC09j31eicEBPbQABN_XCok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.50.14.0-92.50.63.255
147.136.78.0/23
147.136.84.0/24
147.136.86.0/23
168.199.133.0-168.199.159.255
168.199.164.0/24
168.199.166.0-168.199.168.255
168.199.174.0/24
168.199.192.0/23
168.199.202.0-168.199.204.255
168.199.206.0/24
168.199.208.0/24
168.199.211.0/24
168.199.216.0/22
168.199.222.0/24
168.199.226.0/24
168.199.228.0/24
168.199.230.0/24
168.199.240.0/20
185.100.58.0/24
192.95.85.0-192.95.86.255
192.95.91.0/24
IPv6:
2001:678:8b4::/48
Signature Algorithm: sha256WithRSAEncryption
54:3f:04:b5:7c:68:2b:eb:01:66:40:13:cf:75:68:4c:50:03:
58:3c:93:33:c7:c5:cc:3e:70:11:23:8a:56:75:4a:19:09:ce:
e3:5f:62:5f:93:ab:1a:0d:1d:21:e8:f6:2d:f1:04:9d:b8:99:
66:3e:bd:6b:fd:67:8c:4f:dd:82:6c:0b:a2:1d:f7:7f:5b:3e:
8f:3a:8b:31:80:ae:b7:71:7a:e6:d8:15:9d:bf:99:52:93:83:
26:db:a4:06:69:4d:93:0a:6c:17:82:a5:e9:9b:f0:8d:68:91:
6a:6b:f7:6e:87:c5:04:23:94:6e:51:2d:c1:78:a5:0a:5f:dc:
3b:da:60:2f:a8:fe:07:f1:d8:01:cf:8e:d5:ae:bb:90:ea:f7:
b8:87:00:66:d0:42:ad:12:60:f4:f8:58:8b:f1:cf:ae:3a:4a:
5c:49:bd:7f:b3:e2:2a:14:c3:c2:4f:e5:47:d7:05:f1:72:0c:
e7:1b:64:66:51:fe:95:ee:7e:7c:ff:21:63:9c:2b:df:e8:fa:
96:c7:4f:de:1e:90:87:bd:b6:39:83:0e:22:01:8c:82:50:7e:
cb:05:ea:77:d8:71:15:d7:fe:aa:af:e8:f9:d0:c7:c4:7c:1f:
f2:6d:84:38:ce:23:c0:f7:44:63:92:5e:b7:32:9b:3e:c5:79:
02:44:5b:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:36:11 2026 by rpki-client