Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/wP2DpHi7I3zFcr5xvl3u0u3xN6k.roa
File: wP2DpHi7I3zFcr5xvl3u0u3xN6k.roa (raw, json)
Hash identifier: k7PGNZedFj0rT65uiyBNvBygGXkDgj6lzVDn6zgb8qc=
Subject key identifier: C0:FD:83:A4:78:BB:23:7C:C5:72:BE:71:BE:5D:EE:D2:ED:F1:37:A9
Certificate issuer: /CN=826605b4d27f13968e8794e6ef091223748817d8
Certificate serial: 01A13E43CDBF2B0C38FD6CF90F876F2179CA
Authority key identifier: 82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/wP2DpHi7I3zFcr5xvl3u0u3xN6k.roa
Signing time: Thu 15 Oct 2026 06:33:13 +0000
ROA not before: Thu 15 Oct 2026 06:33:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402642
IP address blocks: 92.50.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 20:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:43:cd:bf:2b:0c:38:fd:6c:f9:0f:87:6f:21:79:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=826605b4d27f13968e8794e6ef091223748817d8
Validity
Not Before: Oct 15 06:33:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c0fd83a478bb237cc572be71be5deed2edf137a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:d9:10:86:13:c1:7c:8f:f1:9a:3f:d4:64:66:
49:5d:36:77:d1:12:34:9f:ab:42:db:84:b6:6c:b5:
cb:fe:76:9d:e6:62:4f:a5:9b:14:18:23:49:44:e0:
ba:98:e7:0e:ab:3e:47:9b:49:d9:63:57:59:0d:8e:
be:7a:4f:53:16:fb:cb:1e:b0:c7:d3:54:c7:8e:44:
c5:ba:3b:29:8f:d0:cf:46:4a:76:35:ea:79:45:71:
11:64:09:c9:66:57:dc:af:07:42:47:3c:df:e9:c2:
79:6e:f0:12:93:9e:39:49:67:44:4b:00:a3:f3:45:
2c:2f:82:4d:3a:76:2c:58:34:f2:91:7b:8c:c1:26:
ab:33:af:6a:d1:02:fc:57:9d:63:bc:72:82:32:4e:
6f:00:1a:1f:c8:ca:e2:31:eb:ef:9a:1b:40:a5:17:
c2:33:d0:0f:e0:03:b1:53:7c:35:1b:f9:7e:74:75:
9b:f8:11:72:42:c7:72:b8:e5:f7:ae:65:5d:37:37:
37:e6:f3:c0:6f:08:6c:5e:53:5b:36:cf:8f:f8:ff:
2b:e8:fa:07:f8:2c:f8:18:0b:59:2c:d4:ba:95:39:
fd:79:0f:ca:e0:1b:bb:cf:34:53:15:20:4a:53:e6:
50:38:64:85:e3:55:e1:0e:6e:1e:eb:bc:e2:24:3f:
32:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:FD:83:A4:78:BB:23:7C:C5:72:BE:71:BE:5D:EE:D2:ED:F1:37:A9
X509v3 Authority Key Identifier:
keyid:82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/wP2DpHi7I3zFcr5xvl3u0u3xN6k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.50.1.0/24
Signature Algorithm: sha256WithRSAEncryption
57:59:17:97:25:d3:2e:1f:9c:69:7d:28:23:f0:70:3e:6c:64:
57:34:c0:9b:10:6f:c7:76:04:0a:3e:70:da:5e:c7:fd:61:5a:
5f:5d:f0:01:c0:8a:35:d3:65:05:ad:6e:83:8b:e0:d3:9c:95:
d2:43:22:aa:af:55:c5:f3:f7:13:d4:d8:8c:f1:95:b3:fa:da:
d4:31:e4:ee:dd:1b:6b:13:47:28:8c:e2:74:42:de:12:42:b6:
97:00:e2:80:a9:f9:52:3e:ca:2f:a1:a4:11:de:3a:34:56:ad:
f5:51:1f:02:2d:e3:6f:56:35:e4:a5:af:f5:5c:c1:a9:8f:9b:
57:ef:82:5f:f0:18:e0:de:62:3b:a1:fc:eb:dd:13:36:f4:74:
35:98:23:cd:89:60:7f:dc:66:73:4f:ec:6d:4a:65:e2:60:11:
d6:7e:22:a5:bd:b3:c8:b3:45:98:d2:6d:d4:f6:31:c0:f0:33:
53:b3:73:8c:49:08:35:be:d0:e6:9d:87:9a:f2:34:33:34:f5:
c5:9a:2e:e1:e8:59:16:bc:3b:4a:ba:93:b4:ea:5b:47:08:03:
8f:a4:f6:2f:e1:69:aa:cb:8c:36:1c:9d:66:29:76:20:b9:fd:
f2:c3:d2:08:0a:20:f3:e6:79:18:ab:6b:65:2b:58:7e:46:b5:
f2:56:96:e4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaE+Q82/Kww4/Wz5D4dvIXnKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyNjYwNWI0ZDI3ZjEzOTY4ZTg3OTRlNmVmMDkxMjIzNzQ4
ODE3ZDgwHhcNMjYxMDE1MDYzMzEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMGZkODNhNDc4YmIyMzdjYzU3MmJlNzFiZTVkZWVkMmVkZjEzN2E5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5NkQhhPBfI/xmj/UZGZJXTZ30RI0
n6tC24S2bLXL/nad5mJPpZsUGCNJROC6mOcOqz5Hm0nZY1dZDY6+ek9TFvvLHrDH
01THjkTFujspj9DPRkp2Nep5RXERZAnJZlfcrwdCRzzf6cJ5bvASk545SWdESwCj
80UsL4JNOnYsWDTykXuMwSarM69q0QL8V51jvHKCMk5vABofyMriMevvmhtApRfC
M9AP4AOxU3w1G/l+dHWb+BFyQsdyuOX3rmVdNzc35vPAbwhsXlNbNs+P+P8r6PoH
+Cz4GAtZLNS6lTn9eQ/K4Bu7zzRTFSBKU+ZQOGSF41XhDm4e67ziJD8yiQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMD9g6R4uyN8xXK+cb5d7tLt8TepMB8GA1UdIwQY
MBaAFIJmBbTSfxOWjoeU5u8JEiN0iBfYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ21ZRnROSl9FNWFPaDVUbTd3a1NJM1NJRjlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9mYmNjMzItMzNjOC00MWZmLTg5ZmEt
MmQxOTE4YmExYzBlLzEvd1AyRHBIaTdJM3pGY3I1eHZsM3UwdTN4TjZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny9mYmNjMzItMzNjOC00MWZmLTg5ZmEtMmQxOTE4YmExYzBl
LzEvZ21ZRnROSl9FNWFPaDVUbTd3a1NJM1NJRjlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXDIBMA0G
CSqGSIb3DQEBCwUAA4IBAQBXWReXJdMuH5xpfSgj8HA+bGRXNMCbEG/HdgQKPnDa
Xsf9YVpfXfABwIo102UFrW6Di+DTnJXSQyKqr1XF8/cT1NiM8ZWz+trUMeTu3Rtr
E0cojOJ0Qt4SQraXAOKAqflSPsovoaQR3jo0Vq31UR8CLeNvVjXkpa/1XMGpj5tX
74Jf8Bjg3mI7ofzr3RM29HQ1mCPNiWB/3GZzT+xtSmXiYBHWfiKlvbPIs0WY0m3U
9jHA8DNTs3OMSQg1vtDmnYea8jQzNPXFmi7h6FkWvDtKupO06ltHCAOPpPYv4Wmq
y4w2HJ1mKXYguf3yw9IICiDz5nkYq2tlK1h+RrXyVpbk
-----END CERTIFICATE-----
Generated at Sat Oct 17 06:11:58 2026 by rpki-client