Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/vZDwvLPyCKz4WNWrNZjpbkzMgiY.roa
File: vZDwvLPyCKz4WNWrNZjpbkzMgiY.roa (raw, json)
Hash identifier: 9raZsWHEg+j7k0+WB68XXRIlxWYLmVI+MnsfHQj+Jfk=
Subject key identifier: BD:90:F0:BC:B3:F2:08:AC:F8:58:D5:AB:35:98:E9:6E:4C:CC:82:26
Certificate issuer: /CN=826605b4d27f13968e8794e6ef091223748817d8
Certificate serial: 01A1D49B5B81BAFC78AE7433D501083BCACD
Authority key identifier: 82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/vZDwvLPyCKz4WNWrNZjpbkzMgiY.roa
Signing time: Fri 13 Nov 2026 11:11:53 +0000
ROA not before: Fri 13 Nov 2026 11:11:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 92.50.0.0/19 maxlen: 19
92.50.0.0/24 maxlen: 24
92.50.10.0/24 maxlen: 24
92.50.32.0/19 maxlen: 19
147.136.68.0/22 maxlen: 24
147.136.76.0/22 maxlen: 24
147.136.84.0/22 maxlen: 24
147.136.86.0/24 maxlen: 24
168.199.128.0/22 maxlen: 24
168.199.134.0/24 maxlen: 24
168.199.135.0/24 maxlen: 24
168.199.160.0/22 maxlen: 24
168.199.192.0/22 maxlen: 24
168.199.212.0/23 maxlen: 23
168.199.220.0/24 maxlen: 24
168.199.221.0/24 maxlen: 24
168.199.223.0/24 maxlen: 24
168.199.224.0/24 maxlen: 24
168.199.229.0/24 maxlen: 24
168.199.232.0/24 maxlen: 24
185.101.244.0/23 maxlen: 24
185.101.246.0/23 maxlen: 24
185.101.246.0/24 maxlen: 24
185.101.247.0/24 maxlen: 24
185.101.252.0/23 maxlen: 23
185.101.254.0/23 maxlen: 23
185.171.252.0/23 maxlen: 23
185.171.253.0/24 maxlen: 24
185.171.254.0/23 maxlen: 23
185.226.204.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:d4:9b:5b:81:ba:fc:78:ae:74:33:d5:01:08:3b:ca:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=826605b4d27f13968e8794e6ef091223748817d8
Validity
Not Before: Nov 13 11:11:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bd90f0bcb3f208acf858d5ab3598e96e4ccc8226
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d7:f1:6c:65:f4:48:6b:41:4f:db:cf:1a:3b:
46:a5:7f:93:4d:0f:a9:8b:e9:94:43:52:78:44:89:
e4:2b:30:d4:b0:80:35:80:fe:1e:dd:ff:09:9e:fe:
4b:4b:21:18:2a:8f:5b:6b:5c:a9:e7:01:fc:73:1e:
e9:57:55:57:a9:aa:c2:35:f6:11:0c:ce:52:3d:e7:
b4:77:4e:9a:b7:ac:b5:0a:d9:4c:eb:3e:4c:36:e7:
6d:0f:31:24:ba:43:6f:26:0a:83:0e:64:46:e2:89:
e3:55:d4:78:64:84:e5:db:e6:8c:b1:07:a0:ca:1e:
21:d0:c4:e6:dc:72:fb:00:03:9e:a6:7f:a0:b5:de:
2a:53:74:4e:4e:a2:5f:9b:49:c2:75:26:33:5c:b1:
cc:14:d4:c6:3a:ab:03:9a:89:88:08:8b:7e:71:35:
5b:a9:b5:0f:02:63:7e:03:3c:4c:95:3b:3b:cd:ab:
08:26:c1:d2:81:e3:f0:4b:5a:05:80:84:95:f2:f8:
12:72:f5:ff:42:7c:ac:22:8e:2d:6e:82:6c:46:2b:
97:cc:ac:db:d7:39:b6:04:10:fd:dd:99:a1:fd:2b:
cb:cc:d7:2e:df:9d:92:5a:4f:34:6c:14:6a:7e:9b:
35:c7:0f:86:3f:7b:08:6c:86:18:98:3e:28:76:11:
90:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:90:F0:BC:B3:F2:08:AC:F8:58:D5:AB:35:98:E9:6E:4C:CC:82:26
X509v3 Authority Key Identifier:
keyid:82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/vZDwvLPyCKz4WNWrNZjpbkzMgiY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.50.0.0/18
147.136.68.0/22
147.136.76.0/22
147.136.84.0/22
168.199.128.0/22
168.199.134.0/23
168.199.160.0/22
168.199.192.0/22
168.199.212.0/23
168.199.220.0/23
168.199.223.0-168.199.224.255
168.199.229.0/24
168.199.232.0/24
185.101.244.0/22
185.101.252.0/22
185.171.252.0/22
185.226.204.0/23
Signature Algorithm: sha256WithRSAEncryption
4e:41:73:2b:40:e8:05:fb:1d:b7:09:90:09:0e:f1:b6:72:3f:
cb:76:95:c7:6a:92:36:b0:fd:b2:e4:0e:17:22:9f:ef:d3:9a:
18:04:14:47:63:c1:d1:78:a8:5c:c8:a1:db:86:57:5b:28:41:
4d:19:12:06:d7:42:5a:e8:48:b9:bf:00:4b:6f:1a:66:2c:3a:
ff:6a:85:48:9e:c6:fb:cd:a9:08:25:b4:73:df:0a:04:e2:76:
a3:f1:2f:0c:56:f1:4c:73:b1:5f:9a:25:07:00:63:d4:a5:50:
84:e3:97:ef:ac:e4:8a:4f:59:ab:92:7e:b4:63:1b:a8:c9:1f:
46:06:92:5a:ee:cd:9c:1f:3a:75:17:db:23:4c:56:85:f0:09:
7d:04:b2:1e:51:f1:bf:73:6e:78:16:a5:41:8f:8d:ba:0a:1e:
73:00:5f:84:8c:fa:98:78:a3:ca:e7:1e:03:fc:d3:7c:3c:87:
3f:ba:92:65:13:51:82:6f:b6:50:92:bc:d7:9a:23:8f:2e:36:
67:72:ff:a8:c0:17:a3:0d:a5:f8:83:30:b9:9c:f3:c2:15:fb:
91:58:93:49:e9:86:8f:9f:90:a0:b8:b2:dd:50:6e:c4:95:62:
91:52:1b:f8:7f:1f:10:a1:a0:cb:03:c5:a7:8c:ef:cb:51:e5:
cc:70:9c:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 04:34:03 2026 by rpki-client