Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/F4AmU3EzfmEPKnPdDeAdjOBi5sw.roa
File: F4AmU3EzfmEPKnPdDeAdjOBi5sw.roa (raw, json)
Hash identifier: d9cgFR8dcnVHj5p1eh9xiq2JNOHAnevZT0Xn7COk7IA=
Subject key identifier: 17:80:26:53:71:33:7E:61:0F:2A:73:DD:0D:E0:1D:8C:E0:62:E6:CC
Certificate issuer: /CN=826605b4d27f13968e8794e6ef091223748817d8
Certificate serial: 01A1175719450A6FE278C3DF90941310EC86
Authority key identifier: 82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/F4AmU3EzfmEPKnPdDeAdjOBi5sw.roa
Signing time: Wed 07 Oct 2026 17:09:06 +0000
ROA not before: Wed 07 Oct 2026 17:09:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215728
IP address blocks: 147.136.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:17:57:19:45:0a:6f:e2:78:c3:df:90:94:13:10:ec:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=826605b4d27f13968e8794e6ef091223748817d8
Validity
Not Before: Oct 7 17:09:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1780265371337e610f2a73dd0de01d8ce062e6cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d5:e7:e9:36:5c:ef:e4:33:ab:c4:4d:26:ae:
09:bd:f9:52:20:82:9e:19:41:91:9b:85:76:f8:54:
c4:06:81:14:8a:7c:e2:af:f1:5e:f8:83:66:4b:fd:
d1:9b:92:3e:9e:fc:9c:cc:e5:2c:e0:4d:ed:74:32:
81:bf:7a:26:07:ea:c3:20:0b:39:0a:e6:6f:7d:a1:
0b:c3:f1:f2:27:29:4b:de:0b:4e:75:7d:f0:ec:6c:
3e:6f:4c:b8:aa:31:a1:19:9f:3b:6a:fa:b5:05:15:
85:95:cb:33:ae:b8:5d:d8:e9:e2:d3:d1:41:9c:a0:
4b:0a:a3:16:50:6c:21:27:ed:ee:4d:4c:fd:20:26:
db:8e:7f:2b:f1:70:d9:5c:cd:09:00:28:5e:af:7e:
05:0e:56:79:8c:ef:e5:50:62:35:d6:73:f9:26:ba:
a2:ff:2d:fe:ed:c8:b0:fd:db:ac:91:01:30:70:e0:
b1:6c:16:9b:5d:12:2f:e0:dc:ec:7b:a7:70:cf:50:
a5:a9:5f:01:db:9e:55:d8:8a:10:30:6a:03:76:d9:
56:16:31:b2:3c:f7:f9:54:90:80:59:23:1d:c2:2e:
4b:3b:fe:fc:6f:96:1d:40:f9:30:89:20:6e:a6:88:
12:67:29:75:a1:b4:0f:77:e6:84:cc:7d:58:2f:a3:
b6:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:80:26:53:71:33:7E:61:0F:2A:73:DD:0D:E0:1D:8C:E0:62:E6:CC
X509v3 Authority Key Identifier:
keyid:82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/F4AmU3EzfmEPKnPdDeAdjOBi5sw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.136.90.0/24
Signature Algorithm: sha256WithRSAEncryption
21:55:5b:2c:6c:7c:16:1d:ff:64:4b:04:12:c1:55:ea:fe:f4:
8b:ac:a7:77:c3:13:2d:f6:9b:f4:db:49:79:12:fc:e4:04:1d:
9a:f5:e6:52:c3:6a:13:0b:26:15:dd:f7:c0:51:3b:ff:c2:f0:
3f:46:77:bd:57:2a:b3:43:19:80:39:00:b5:e8:07:17:ac:45:
56:81:cb:b8:c9:8a:17:a2:78:b0:3d:33:89:9a:25:8c:c6:66:
6c:d5:57:9a:34:fb:47:1c:5f:db:64:93:a3:af:e7:00:2c:e0:
1e:9c:72:59:aa:09:07:02:dc:cb:34:3b:2d:eb:38:db:cb:92:
40:fb:81:da:b3:35:9b:ec:99:d0:e8:05:66:62:6b:91:01:f6:
c8:66:1d:ce:e6:14:51:86:53:6c:be:5b:84:f4:d1:c9:9e:87:
c6:f6:7a:d7:4b:77:6e:7b:f9:fa:ea:e0:cf:ef:50:ce:66:55:
0a:d0:36:9b:1d:5f:c2:be:4e:53:1f:06:b6:c7:eb:c8:09:9b:
f7:8f:13:20:b0:c5:eb:63:11:c7:88:01:f0:e8:a1:9d:cd:80:
0f:4a:e0:d5:87:b7:0a:bc:2e:76:c9:c1:b8:f5:fc:bf:48:b2:
cd:d7:ca:cb:98:ac:b0:c7:d5:c5:b4:92:1d:01:06:e9:49:0e:
02:52:4d:e8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaEXVxlFCm/ieMPfkJQTEOyGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyNjYwNWI0ZDI3ZjEzOTY4ZTg3OTRlNmVmMDkxMjIzNzQ4
ODE3ZDgwHhcNMjYxMDA3MTcwOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNzgwMjY1MzcxMzM3ZTYxMGYyYTczZGQwZGUwMWQ4Y2UwNjJlNmNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdXn6TZc7+Qzq8RNJq4JvflSIIKe
GUGRm4V2+FTEBoEUinzir/Fe+INmS/3Rm5I+nvyczOUs4E3tdDKBv3omB+rDIAs5
CuZvfaELw/HyJylL3gtOdX3w7Gw+b0y4qjGhGZ87avq1BRWFlcszrrhd2Oni09FB
nKBLCqMWUGwhJ+3uTUz9ICbbjn8r8XDZXM0JACher34FDlZ5jO/lUGI11nP5Jrqi
/y3+7ciw/duskQEwcOCxbBabXRIv4Nzse6dwz1ClqV8B255V2IoQMGoDdtlWFjGy
PPf5VJCAWSMdwi5LO/78b5YdQPkwiSBupogSZyl1obQPd+aEzH1YL6O2fQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBeAJlNxM35hDypz3Q3gHYzgYubMMB8GA1UdIwQY
MBaAFIJmBbTSfxOWjoeU5u8JEiN0iBfYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ21ZRnROSl9FNWFPaDVUbTd3a1NJM1NJRjlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9mYmNjMzItMzNjOC00MWZmLTg5ZmEt
MmQxOTE4YmExYzBlLzEvRjRBbVUzRXpmbUVQS25QZERlQWRqT0JpNXN3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny9mYmNjMzItMzNjOC00MWZmLTg5ZmEtMmQxOTE4YmExYzBl
LzEvZ21ZRnROSl9FNWFPaDVUbTd3a1NJM1NJRjlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk4haMA0G
CSqGSIb3DQEBCwUAA4IBAQAhVVssbHwWHf9kSwQSwVXq/vSLrKd3wxMt9pv020l5
EvzkBB2a9eZSw2oTCyYV3ffAUTv/wvA/Rne9VyqzQxmAOQC16AcXrEVWgcu4yYoX
oniwPTOJmiWMxmZs1VeaNPtHHF/bZJOjr+cALOAenHJZqgkHAtzLNDst6zjby5JA
+4HaszWb7JnQ6AVmYmuRAfbIZh3O5hRRhlNsvluE9NHJnofG9nrXS3due/n66uDP
71DOZlUK0DabHV/Cvk5THwa2x+vICZv3jxMgsMXrYxHHiAHw6KGdzYAPSuDVh7cK
vC52ycG49fy/SLLN18rLmKywx9XFtJIdAQbpSQ4CUk3o
-----END CERTIFICATE-----
Generated at Tue Oct 13 08:08:06 2026 by rpki-client