Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/STFeiZzJ0pbgntMqVztfPrfVpgU.roa
File: STFeiZzJ0pbgntMqVztfPrfVpgU.roa (raw, json)
Hash identifier: IJzvnAl7Ojduvh2hm7TtJCdmz3/6O7TtPz7sI+ifsKw=
Subject key identifier: 49:31:5E:89:9C:C9:D2:96:E0:9E:D3:2A:57:3B:5F:3E:B7:D5:A6:05
Certificate issuer: /CN=826605b4d27f13968e8794e6ef091223748817d8
Certificate serial: 01A12DDF5C738E63C8BB108B14041FBA84D3
Authority key identifier: 82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/STFeiZzJ0pbgntMqVztfPrfVpgU.roa
Signing time: Mon 12 Oct 2026 02:09:35 +0000
ROA not before: Mon 12 Oct 2026 02:09:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 399682
IP address blocks: 92.50.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 20:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2d:df:5c:73:8e:63:c8:bb:10:8b:14:04:1f:ba:84:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=826605b4d27f13968e8794e6ef091223748817d8
Validity
Not Before: Oct 12 02:09:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=49315e899cc9d296e09ed32a573b5f3eb7d5a605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:a7:32:73:70:a9:97:13:f2:84:0c:f5:f7:ca:
d1:0b:1a:97:f6:73:f2:c0:8c:7c:67:21:ab:2f:e1:
92:4f:9c:72:bc:04:2c:26:79:39:7f:1a:de:cf:45:
be:ad:e5:11:95:0e:c2:57:83:d4:16:4e:7b:5e:99:
14:57:05:5c:c1:e9:5d:17:bc:ff:13:ee:e6:59:9b:
e7:c9:16:88:39:cd:18:7b:f9:c0:08:b7:3e:83:a4:
eb:fd:35:49:2a:83:1b:e3:0f:42:a2:bd:55:d0:20:
2e:43:3e:14:c1:a2:0e:b7:b5:f4:fe:6d:a6:d3:63:
8f:57:cc:f4:e8:d2:51:6e:67:d0:d8:7b:25:2c:0c:
73:18:12:2c:54:42:14:89:4c:93:23:8c:b4:6c:9d:
24:b5:3e:39:a2:a5:c5:4c:12:bb:62:41:06:05:4c:
d2:68:5b:b4:74:e4:d4:17:ba:47:00:1c:58:2e:c0:
9e:9f:af:69:66:8b:f0:0d:d2:82:47:a9:be:9b:27:
ac:a1:79:fc:b0:ad:12:e0:a8:81:3c:a6:82:78:ff:
96:73:f2:19:74:2c:18:20:96:9d:c8:61:63:6d:ad:
53:77:41:b1:97:b1:a2:f8:4d:0d:03:8a:71:4c:e5:
ef:2c:d5:3a:c3:95:4b:76:92:a3:a4:ab:b7:a3:24:
b0:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:31:5E:89:9C:C9:D2:96:E0:9E:D3:2A:57:3B:5F:3E:B7:D5:A6:05
X509v3 Authority Key Identifier:
keyid:82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/STFeiZzJ0pbgntMqVztfPrfVpgU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.50.10.0/24
Signature Algorithm: sha256WithRSAEncryption
88:dd:80:16:ee:88:1b:93:1d:ec:4e:5d:0d:69:6f:b0:76:ec:
2d:d6:97:92:3e:b4:8c:78:1e:dc:bc:03:b1:7c:2d:64:c3:db:
ea:72:21:4a:f1:f7:e6:f2:28:15:53:4d:e1:69:d0:92:c7:b1:
a8:a5:58:bf:2f:32:cc:73:f3:d1:73:f5:e8:b7:ba:0d:31:21:
8d:3e:1c:eb:d9:7d:32:35:ee:d7:59:3d:b0:53:f1:22:a0:2a:
8a:ee:a3:8d:06:89:92:31:dd:b9:98:9e:c4:e3:fc:11:a2:a1:
5c:61:6b:83:5f:ed:4b:1d:ac:13:08:77:23:38:85:24:08:dd:
59:26:6c:40:69:dc:07:18:6e:f8:c7:92:4e:ef:36:ff:c5:9e:
02:24:46:71:7c:fe:3b:3b:1d:32:21:d0:3a:71:5e:86:aa:36:
49:d9:a1:20:d3:2f:73:9f:d3:5e:93:e0:9d:c9:5e:95:2a:a7:
d1:ee:8f:79:a9:be:17:19:3c:da:02:a3:2f:78:9c:19:99:71:
57:67:0b:9c:5d:d9:44:b4:c5:18:2c:06:b4:ac:68:4d:b2:eb:
87:8c:52:a0:cd:b5:07:0b:df:d5:c2:82:00:77:7d:3e:45:a7:
2a:22:aa:ff:52:72:03:9f:64:ed:5c:c9:d7:56:7e:bd:b0:a4:
14:23:90:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 06:11:12 2026 by rpki-client