Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/IUUPXmdbsU4DzvIlNR4ERrgQOz4.roa
File: IUUPXmdbsU4DzvIlNR4ERrgQOz4.roa (raw, json)
Hash identifier: w+CGT5V7vFDp8nPwcceaxFFRaARmjF21xzHIzl6fqPo=
Subject key identifier: 21:45:0F:5E:67:5B:B1:4E:03:CE:F2:25:35:1E:04:46:B8:10:3B:3E
Certificate issuer: /CN=826605b4d27f13968e8794e6ef091223748817d8
Certificate serial: 01A11BE491AFFB36FC97CFC01799621F5E29
Authority key identifier: 82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/IUUPXmdbsU4DzvIlNR4ERrgQOz4.roa
Signing time: Thu 08 Oct 2026 14:22:06 +0000
ROA not before: Thu 08 Oct 2026 14:22:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198566
IP address blocks: 147.136.78.0/24 maxlen: 24
147.136.79.0/24 maxlen: 24
147.136.84.0/24 maxlen: 24
168.199.133.0/24 maxlen: 24
168.199.134.0/24 maxlen: 24
168.199.135.0/24 maxlen: 24
185.101.245.0/24 maxlen: 24
185.101.246.0/24 maxlen: 24
185.101.247.0/24 maxlen: 24
185.171.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 14:43:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1b:e4:91:af:fb:36:fc:97:cf:c0:17:99:62:1f:5e:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=826605b4d27f13968e8794e6ef091223748817d8
Validity
Not Before: Oct 8 14:22:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=21450f5e675bb14e03cef225351e0446b8103b3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:42:94:b2:91:64:6e:ae:f3:82:d1:da:eb:4d:
21:9c:7d:d7:a9:9f:ee:49:07:c0:60:4a:49:52:e5:
66:d6:61:2e:04:25:d9:1a:9c:6c:4e:0e:21:26:b2:
b0:ba:6b:6d:08:00:28:e8:46:3b:b6:03:71:2c:40:
a1:93:b9:42:1c:39:f2:55:1c:10:6c:58:a8:aa:9f:
3c:e7:71:81:75:a7:f3:40:c4:41:ac:fd:75:40:d4:
3f:18:9a:ac:0b:b6:f8:fe:c7:9a:7d:9a:e0:b5:4e:
5e:4d:1e:32:ac:35:4e:86:9d:83:3b:ac:c5:11:26:
1c:6c:64:4c:99:ae:9c:97:a2:15:dc:af:a6:1a:40:
da:91:ca:d9:11:cc:4f:8c:ee:d3:09:cc:c5:10:a8:
d5:c6:f1:0f:c1:5c:13:6e:81:8f:fb:55:7a:1b:f7:
f7:b1:b7:6d:fe:4e:84:da:3d:49:7f:8f:d9:81:69:
14:f6:ac:7f:8a:3f:b6:a3:64:52:96:86:cf:9f:13:
af:12:7d:91:22:16:1b:f6:5d:63:cf:11:cc:d5:ad:
51:3d:ab:4a:b5:4a:e6:89:c3:ef:0d:ec:cc:04:4b:
bd:8b:44:b8:dd:d3:fc:19:96:6a:6e:df:07:f5:4e:
90:8d:43:11:31:78:fc:d7:88:ea:f0:9d:da:5f:6a:
85:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:45:0F:5E:67:5B:B1:4E:03:CE:F2:25:35:1E:04:46:B8:10:3B:3E
X509v3 Authority Key Identifier:
keyid:82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/IUUPXmdbsU4DzvIlNR4ERrgQOz4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.136.78.0/23
147.136.84.0/24
168.199.133.0-168.199.135.255
185.101.245.0-185.101.247.255
185.171.253.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:f8:4d:f5:5e:b3:66:2d:57:e6:14:f2:20:72:ba:8d:eb:e5:
e6:93:ef:8b:a8:9d:cc:a4:34:4d:b4:31:24:9a:91:78:4c:a1:
22:eb:af:12:ba:75:1d:81:d2:6e:52:d8:dd:3c:d7:39:1e:09:
56:a0:0c:df:91:ad:44:45:6b:01:b3:02:33:e8:23:ef:56:db:
57:55:69:85:21:be:50:ff:db:11:f5:63:39:e8:38:da:7d:29:
91:b0:54:ca:43:3f:98:fa:a1:07:66:b0:09:b9:4d:89:f3:71:
71:bc:ed:4c:0c:9a:bd:9e:87:ed:2d:52:c5:50:9b:ce:95:9d:
70:69:e8:48:a0:06:c6:fd:48:dc:0c:e5:cc:37:07:94:8f:35:
d0:b0:d6:9e:fb:eb:45:2e:f5:dd:8d:1d:14:f3:d9:95:ce:0a:
b2:63:d5:86:a8:1e:7e:16:8b:6a:42:56:52:65:ce:67:d0:55:
a7:2c:66:98:73:76:67:36:81:03:e7:7c:02:14:c4:4d:db:eb:
97:2e:21:d9:97:1c:9d:cc:08:6d:32:b5:9a:3d:ad:a0:99:4f:
56:af:e3:ef:00:18:ea:1e:bc:be:06:99:22:6f:a4:13:01:b0:
e6:04:0f:77:f3:a0:5a:11:78:e8:ff:cf:da:5f:b3:49:bc:52:
a1:2d:a3:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 21:52:24 2026 by rpki-client