Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/K_U4KVVXvMI-5z0OiE2wvJX2aK8.roa
File: K_U4KVVXvMI-5z0OiE2wvJX2aK8.roa (raw, json)
Hash identifier: cu6mfelhUsVV1WH0+MpXmWdJdRHGXpm6kAGQ0t49Sxk=
Subject key identifier: 2B:F5:38:29:55:57:BC:C2:3E:E7:3D:0E:88:4D:B0:BC:95:F6:68:AF
Certificate issuer: /CN=826605b4d27f13968e8794e6ef091223748817d8
Certificate serial: 01A17706555E488FE3C13840BD095D0B31C9
Authority key identifier: 82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/K_U4KVVXvMI-5z0OiE2wvJX2aK8.roa
Signing time: Mon 26 Oct 2026 07:04:25 +0000
ROA not before: Mon 26 Oct 2026 07:04:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152606
IP address blocks: 92.50.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:77:06:55:5e:48:8f:e3:c1:38:40:bd:09:5d:0b:31:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=826605b4d27f13968e8794e6ef091223748817d8
Validity
Not Before: Oct 26 07:04:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2bf538295557bcc23ee73d0e884db0bc95f668af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:cb:c9:78:f7:91:b7:93:8c:6a:b7:f0:b0:d6:
7a:2c:e3:ee:36:41:dd:65:61:f2:1b:10:78:b7:28:
59:7c:e2:da:28:6b:c4:da:72:f4:ef:82:cf:42:98:
8a:14:66:a6:a1:ee:00:6b:60:fd:b4:f8:25:96:ce:
5b:cb:c8:0e:37:c3:2d:a2:16:3c:b5:ea:b7:65:e5:
3e:ee:bf:32:70:4a:b0:d3:c7:c6:7e:c2:a0:16:4b:
ba:01:ab:c8:9d:fa:51:a3:ba:99:c2:5f:5b:0a:9f:
e3:e7:d9:74:9c:2d:76:4f:bf:a1:91:45:f0:06:5b:
4d:98:b6:66:02:28:dc:21:d3:c3:48:65:9f:1e:6f:
ff:8c:51:f2:da:63:e9:50:36:2e:cd:8b:27:05:4a:
9f:9b:56:cf:d2:bd:8b:44:c8:71:6c:11:07:db:c9:
b6:09:91:e3:eb:41:a4:23:39:59:8e:b9:bc:ad:44:
51:b6:ed:fc:ec:e9:a1:c9:c3:f8:69:39:45:74:d4:
10:8d:0d:79:25:8c:0d:10:8e:48:d2:77:76:6d:4e:
87:57:ae:d3:7a:ca:52:79:96:c3:0d:72:8b:d7:d4:
f0:d8:9a:bb:3a:de:49:d7:30:fd:f7:95:00:97:89:
eb:49:00:27:10:b8:73:d3:42:f4:34:f9:4a:0d:e3:
eb:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:F5:38:29:55:57:BC:C2:3E:E7:3D:0E:88:4D:B0:BC:95:F6:68:AF
X509v3 Authority Key Identifier:
keyid:82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/K_U4KVVXvMI-5z0OiE2wvJX2aK8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.50.2.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:4b:7d:74:d9:8e:b0:9a:76:b6:f9:9f:6e:ee:eb:87:56:9a:
9c:ae:8d:90:e8:52:d9:2d:59:a5:43:6e:e8:17:d0:01:7d:82:
c3:67:89:70:43:f0:6e:48:5c:59:05:cd:50:58:21:5d:a9:c7:
a8:e2:1a:92:3c:3f:2a:b2:32:0b:de:ad:20:52:19:0a:ef:48:
cb:ff:36:0f:5b:e9:a1:f8:b7:2d:25:00:7c:43:50:25:87:68:
7f:df:98:41:60:79:c2:28:9a:ef:5d:f1:cf:56:77:72:e3:a4:
75:5d:8d:12:05:14:25:ef:b4:7c:be:9a:66:a2:96:02:d1:be:
3b:55:96:f7:d1:7d:79:c7:60:fd:19:f0:73:4d:5f:d5:15:41:
ba:55:96:4d:fe:7b:61:0a:90:47:90:2d:a9:57:f6:72:5b:7f:
55:c6:06:ef:bc:69:65:ff:70:16:a2:fd:8b:f6:a1:2f:04:f6:
4f:03:70:b9:f3:3a:28:dc:c7:ae:b1:3a:cf:43:50:6c:6b:80:
27:27:f8:5a:9d:9f:6d:1e:49:63:46:10:61:7e:9a:5e:47:70:
d6:98:34:23:35:9a:90:0d:22:cb:f6:1f:61:23:f5:07:99:05:
15:85:7f:2d:07:77:cf:7c:04:44:1b:12:c1:3e:81:8f:fd:1d:
a1:ad:fa:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 07:35:17 2026 by rpki-client