Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/_xx4Uv79h8on-SPqZdq4LTLlIB4.roa
File: _xx4Uv79h8on-SPqZdq4LTLlIB4.roa (raw, json)
Hash identifier: 2CALQG4yltmGRbvUOsCvmLmfgwCIoezmX9L7mIXRSGo=
Subject key identifier: FF:1C:78:52:FE:FD:87:CA:27:F9:23:EA:65:DA:B8:2D:32:E5:20:1E
Certificate issuer: /CN=826605b4d27f13968e8794e6ef091223748817d8
Certificate serial: 01A18090578EC736C8B684C10EB5CF09CC3A
Authority key identifier: 82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/_xx4Uv79h8on-SPqZdq4LTLlIB4.roa
Signing time: Wed 28 Oct 2026 03:31:45 +0000
ROA not before: Wed 28 Oct 2026 03:31:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 137410
IP address blocks: 147.136.87.0/24 maxlen: 24
168.199.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 22:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:90:57:8e:c7:36:c8:b6:84:c1:0e:b5:cf:09:cc:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=826605b4d27f13968e8794e6ef091223748817d8
Validity
Not Before: Oct 28 03:31:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ff1c7852fefd87ca27f923ea65dab82d32e5201e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:6d:3b:92:3b:6f:3a:98:c0:2d:47:5a:c0:37:
7c:69:49:98:59:19:7e:9d:55:b7:ec:5f:4a:cf:a6:
19:a6:55:f0:53:93:8f:b8:62:ee:02:49:45:49:77:
d3:50:f0:ce:d1:74:33:72:21:8e:a5:89:4c:ef:a4:
09:f2:a5:74:35:74:75:ff:fa:fe:f7:53:69:e5:c8:
bf:95:25:5a:ff:67:4c:b5:90:8b:56:bc:d5:bf:5a:
f5:ca:0f:31:dd:12:d8:a4:e0:1f:54:2c:88:b4:e7:
03:69:18:3b:5c:8b:f1:38:b3:22:75:13:c5:d2:51:
c2:3e:42:8d:b3:ad:75:a9:a4:65:d5:f3:3c:d3:a0:
82:04:5a:67:09:b6:cf:b7:9a:de:1d:5f:27:6c:9f:
e8:de:30:6b:9d:cf:df:42:54:31:ad:71:c0:1a:12:
0d:5d:25:4d:ac:30:85:77:ed:54:c3:b4:f1:3d:e2:
51:00:dc:b1:1d:f1:97:ca:dd:6f:9a:33:30:31:6d:
ee:33:a0:e5:9f:67:21:9f:62:fe:44:b1:38:0c:25:
86:02:f5:ec:4e:fe:62:d2:ec:a0:c6:9e:2c:b1:bb:
ee:6d:93:cc:b2:ec:3d:ef:6a:ff:c6:9a:53:40:74:
d9:17:dd:35:2e:33:48:4d:70:6e:59:b0:31:f0:53:
c4:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:1C:78:52:FE:FD:87:CA:27:F9:23:EA:65:DA:B8:2D:32:E5:20:1E
X509v3 Authority Key Identifier:
keyid:82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/_xx4Uv79h8on-SPqZdq4LTLlIB4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.136.87.0/24
168.199.139.0/24
Signature Algorithm: sha256WithRSAEncryption
56:e1:38:5e:c0:3f:d9:49:02:88:96:38:84:b3:35:4b:4c:79:
9e:be:69:93:8c:6f:23:5a:88:6b:ad:74:73:3c:a3:17:28:d6:
81:f3:6b:73:2f:d7:85:4c:94:7b:11:34:7d:6a:3b:f6:0e:f0:
a6:b6:62:d3:12:49:bd:38:5e:b4:80:04:ab:44:88:be:ff:16:
75:ac:cb:75:e9:10:eb:bc:cd:be:34:ca:4b:2c:ce:f7:3c:06:
a9:1a:ee:50:ed:44:7c:0e:5a:1c:69:43:7e:de:71:fa:c7:c9:
05:40:2c:73:8b:02:f7:5d:14:a4:1b:c8:03:f1:84:bc:bb:e8:
e2:fe:f2:85:3e:fa:7a:73:08:3b:b0:01:6a:2b:3e:f5:5b:44:
35:f3:83:97:d3:e6:1e:af:33:56:a8:84:e6:b8:e0:73:51:03:
2d:d7:43:63:13:fb:a2:8a:e0:48:05:6e:5f:0e:bc:e3:f5:31:
c0:a3:31:4e:ec:85:1c:f9:f2:f9:99:b2:28:62:68:a3:88:78:
a5:08:41:52:2f:b8:6e:66:4e:bb:c8:f0:fd:a8:0e:25:77:79:
d1:13:6a:ab:58:e3:e5:46:23:a7:d8:7c:83:70:d5:54:e1:92:
1f:a0:60:21:6a:33:36:1a:ca:c0:dd:e8:06:7b:5f:f1:cf:cf:
28:a8:6f:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 08:37:30 2026 by rpki-client