Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/wPh6X2lybcXm89gTLv5Fobj0gAg.roa
File: wPh6X2lybcXm89gTLv5Fobj0gAg.roa (raw, json)
Hash identifier: a43DoKBqtxHvy4b2LAbu/ZCBoBqYdsyl9NCD8CBy22I=
Subject key identifier: C0:F8:7A:5F:69:72:6D:C5:E6:F3:D8:13:2E:FE:45:A1:B8:F4:80:08
Certificate issuer: /CN=826605b4d27f13968e8794e6ef091223748817d8
Certificate serial: 01A134F988AE60A454646E09019BBC0853C4
Authority key identifier: 82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/wPh6X2lybcXm89gTLv5Fobj0gAg.roa
Signing time: Tue 13 Oct 2026 11:15:31 +0000
ROA not before: Tue 13 Oct 2026 11:15:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152726
IP address blocks: 92.50.0.0/24 maxlen: 24
147.136.86.0/24 maxlen: 24
168.199.137.0/24 maxlen: 24
185.101.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 15:02:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:34:f9:88:ae:60:a4:54:64:6e:09:01:9b:bc:08:53:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=826605b4d27f13968e8794e6ef091223748817d8
Validity
Not Before: Oct 13 11:15:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c0f87a5f69726dc5e6f3d8132efe45a1b8f48008
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a3:e6:ee:95:2e:7c:f1:50:68:9f:64:83:6d:
f2:45:d0:82:76:b4:a9:4f:8c:f9:1c:38:43:1f:73:
18:90:92:8a:3e:b5:95:18:5d:7a:57:77:3a:db:54:
79:e7:92:75:e4:ff:c1:4a:24:52:3d:44:b1:a6:fc:
e1:34:ab:68:0e:cd:3a:12:e0:0d:f6:9c:57:e7:d8:
3c:61:7b:0a:a3:fe:a4:cb:24:22:03:3c:33:f0:1e:
3f:86:39:9d:8a:ca:7c:0e:ec:f0:d4:f6:8f:70:3a:
f2:df:78:ba:12:51:cc:a9:df:8b:39:c5:d3:59:d3:
2e:3b:12:78:fe:bd:d8:4d:ae:3d:a3:36:54:94:68:
56:67:d3:71:1a:c2:9e:2b:a5:b4:3b:96:5e:ad:03:
0e:aa:42:f3:49:21:93:0e:48:36:83:4d:c1:1d:bc:
15:32:aa:89:2c:c5:ef:94:30:9d:74:d8:af:f8:44:
1f:b0:5b:34:88:00:0a:b3:d5:a6:dd:c9:51:f9:8e:
0c:f6:31:20:31:f4:89:37:c0:ef:98:9a:a7:f8:c1:
6a:af:7c:42:f0:80:6d:38:96:0d:d7:e6:bc:c4:ed:
db:a2:aa:b6:15:b5:98:e0:52:8a:57:ee:bc:29:a5:
3f:29:1b:4f:b3:39:fa:b3:c2:76:dd:ef:4d:c7:b2:
53:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:F8:7A:5F:69:72:6D:C5:E6:F3:D8:13:2E:FE:45:A1:B8:F4:80:08
X509v3 Authority Key Identifier:
keyid:82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/wPh6X2lybcXm89gTLv5Fobj0gAg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.50.0.0/24
147.136.86.0/24
168.199.137.0/24
185.101.244.0/24
Signature Algorithm: sha256WithRSAEncryption
86:e3:37:e0:4f:5e:64:b2:88:33:e1:56:cc:d3:b6:02:d3:da:
37:3d:f9:2b:80:7e:96:21:3a:9a:ae:c2:66:db:57:ef:29:19:
20:7c:14:3b:29:a1:5f:7a:9d:00:33:9a:19:05:d1:1e:fe:54:
79:33:9e:12:6f:8c:cc:a1:81:7a:0c:d8:f6:a9:fd:f8:90:00:
6b:c9:6b:f8:0b:ae:56:c4:92:63:74:7e:db:93:6a:4d:5d:ff:
53:fc:a5:52:c7:5a:da:c5:37:bc:b0:5c:60:73:9b:e9:73:8c:
1e:ea:fc:9a:f2:be:2b:ec:4e:80:d4:76:70:f0:bb:28:80:e5:
1a:07:cb:25:c5:70:4c:c3:5a:ad:fb:63:24:df:1b:1f:41:87:
7d:f8:44:bb:09:83:5a:35:16:5f:ba:42:91:f4:b1:e5:ee:01:
de:92:64:c9:06:51:6b:46:34:fe:37:9a:9d:c6:b9:81:63:f8:
85:a9:cd:b7:90:6e:3b:85:0b:dc:66:22:dc:7f:0a:51:76:1e:
d5:80:fd:21:69:af:e6:97:89:65:7d:b8:01:a5:82:df:e0:94:
ae:04:28:07:7f:a0:8b:33:31:94:1d:9a:8d:4c:d3:8b:2c:06:
99:a4:93:39:eb:c2:f3:aa:d1:2a:47:e1:e1:16:31:1f:ee:8f:
9d:71:ce:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 00:12:10 2026 by rpki-client