Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/a07834-5fa3-4b40-bb9e-75e3cbb04b60/1/50y8wGZItELb-KAO-Xri2PFoY5c.roa
File: 50y8wGZItELb-KAO-Xri2PFoY5c.roa (raw, json)
Hash identifier: vsbFlFjDo1dOM6Prh7pc5ZSnF15uQakMrtx3HqlIavU=
Subject key identifier: E7:4C:BC:C0:66:48:B4:42:DB:F8:A0:0E:F9:7A:E2:D8:F1:68:63:97
Certificate issuer: /CN=072f815e7c1607d0bd3b399fba9a353fec544315
Certificate serial: 019FD335017DB66220CF15968202C62C25F3
Authority key identifier: 07:2F:81:5E:7C:16:07:D0:BD:3B:39:9F:BA:9A:35:3F:EC:54:43:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/By-BXnwWB9C9Ozmfupo1P-xUQxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a07834-5fa3-4b40-bb9e-75e3cbb04b60/1/50y8wGZItELb-KAO-Xri2PFoY5c.roa
Signing time: Wed 05 Aug 2026 18:34:54 +0000
ROA not before: Wed 05 Aug 2026 18:34:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 65.87.128.0/24 maxlen: 24
65.87.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a07834-5fa3-4b40-bb9e-75e3cbb04b60/1/By-BXnwWB9C9Ozmfupo1P-xUQxU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/a07834-5fa3-4b40-bb9e-75e3cbb04b60/1/By-BXnwWB9C9Ozmfupo1P-xUQxU.mft
rsync://rpki.ripe.net/repository/DEFAULT/By-BXnwWB9C9Ozmfupo1P-xUQxU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d3:35:01:7d:b6:62:20:cf:15:96:82:02:c6:2c:25:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=072f815e7c1607d0bd3b399fba9a353fec544315
Validity
Not Before: Aug 5 18:34:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e74cbcc06648b442dbf8a00ef97ae2d8f1686397
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:4e:d3:c6:27:81:1b:06:28:ea:b7:c2:4d:e2:
93:db:cb:d2:a8:4b:8a:08:cb:80:a3:54:7a:8e:99:
5e:5b:a3:96:fb:ee:e6:cc:35:c3:af:6a:94:c0:1d:
87:70:a4:d2:d1:f7:27:e7:22:05:9d:e6:f8:24:8e:
09:0b:4f:d4:22:3c:7a:db:f3:e3:c6:3b:23:e9:93:
e6:95:4d:17:a4:2a:01:0e:f3:dd:db:b7:7c:65:83:
fb:57:91:f4:36:04:a0:81:98:0f:da:95:40:a3:1a:
b4:0f:45:20:3e:17:7a:96:8a:fd:34:61:d8:08:b7:
60:4e:89:44:50:f1:c0:3c:bd:13:14:f9:a3:99:aa:
2b:c8:2b:32:41:b9:cf:8c:1a:84:6f:84:ac:f6:c9:
98:1e:9c:ae:37:6c:25:0c:b1:d1:84:c6:98:44:1f:
21:33:62:a3:f2:ef:1c:7d:af:43:e6:75:83:d3:17:
b5:36:1a:64:81:a1:d8:12:0f:22:6c:d4:0d:b8:66:
b1:3c:e9:8a:38:dd:01:fb:e9:eb:fc:32:e4:fb:e4:
b5:b4:6b:e0:a4:d0:e3:82:73:b6:e7:05:c2:fb:b8:
6b:4b:17:5f:ea:76:5a:47:54:56:bb:68:a1:0f:0f:
74:52:a3:bb:c9:33:f8:89:73:de:75:f2:72:c6:cf:
de:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:4C:BC:C0:66:48:B4:42:DB:F8:A0:0E:F9:7A:E2:D8:F1:68:63:97
X509v3 Authority Key Identifier:
keyid:07:2F:81:5E:7C:16:07:D0:BD:3B:39:9F:BA:9A:35:3F:EC:54:43:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/By-BXnwWB9C9Ozmfupo1P-xUQxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a07834-5fa3-4b40-bb9e-75e3cbb04b60/1/50y8wGZItELb-KAO-Xri2PFoY5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a07834-5fa3-4b40-bb9e-75e3cbb04b60/1/By-BXnwWB9C9Ozmfupo1P-xUQxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
65.87.128.0/24
65.87.133.0/24
Signature Algorithm: sha256WithRSAEncryption
20:80:8f:69:3b:23:5b:82:0a:41:f6:4f:ec:35:12:39:b9:96:
5f:54:0e:75:a8:93:bd:e6:c0:c5:8e:49:1f:d9:6f:a1:33:2e:
94:20:9c:f3:76:dc:34:2d:65:e3:4e:4c:2e:22:6b:81:15:f7:
63:7e:12:02:70:29:21:71:50:3c:be:54:0a:6d:39:73:99:4a:
ef:fa:9d:b9:e5:88:64:0f:bf:5c:39:04:d4:b6:da:7a:bf:3f:
f5:2a:c6:39:29:9d:99:2f:7a:af:87:4b:24:2b:89:1c:a4:59:
b3:92:b8:da:63:8e:8f:c9:79:00:4f:d0:23:ca:6e:ba:62:d8:
1b:e8:1b:06:7e:1d:3f:f7:c1:00:36:20:31:b1:fc:72:aa:a2:
9c:11:e0:87:37:44:f0:16:4b:4b:ba:11:43:13:6b:28:fe:aa:
2a:16:86:04:0c:96:13:e6:7e:80:5a:c1:56:ce:f0:93:b8:61:
17:f6:59:6a:5f:9b:b1:ea:a9:7c:bd:fa:59:d2:5e:1e:e0:07:
da:4c:4d:e8:ff:ae:dc:13:1b:e1:2c:12:27:d6:86:a1:70:8e:
e7:2d:53:b6:6d:9d:b5:1f:46:58:cd:2c:11:14:d4:42:0e:8d:
bd:12:52:ac:57:ee:45:77:30:a1:6d:a4:60:05:be:cd:6d:e5:
96:03:86:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:49:28 2026 by rpki-client