Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/50fRZ_9ljoxREyT_TdBgZknmvJI.roa
File: 50fRZ_9ljoxREyT_TdBgZknmvJI.roa (raw, json)
Hash identifier: /U9b7J/FTxe76b/ItHXeMk6ppBPAZYgHjV7XAHQ3/no=
Subject key identifier: E7:47:D1:67:FF:65:8E:8C:51:13:24:FF:4D:D0:60:66:49:E6:BC:92
Certificate issuer: /CN=505127723ea0cfd0724713b291734caa353e20ea
Certificate serial: 01A0B54CC971EBC53A3674AD78EAE70A656C
Authority key identifier: 50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/50fRZ_9ljoxREyT_TdBgZknmvJI.roa
Signing time: Fri 18 Sep 2026 16:15:03 +0000
ROA not before: Fri 18 Sep 2026 16:15:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 64267
IP address blocks: 160.238.97.0/24 maxlen: 24
160.238.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 19:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b5:4c:c9:71:eb:c5:3a:36:74:ad:78:ea:e7:0a:65:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505127723ea0cfd0724713b291734caa353e20ea
Validity
Not Before: Sep 18 16:15:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e747d167ff658e8c511324ff4dd0606649e6bc92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:16:b7:fe:f5:c5:34:f8:3f:70:b9:17:30:62:
e0:9e:7c:f6:07:3a:c5:44:89:85:5a:2c:15:87:21:
ca:97:74:22:e4:af:2d:08:a6:dc:a4:ad:9c:94:fc:
98:44:19:f1:fd:ca:dc:08:a7:c1:de:3d:6e:57:24:
b5:98:75:33:b1:68:78:ef:2c:5b:bf:91:12:f6:82:
fc:d6:97:20:2d:39:77:46:1f:b8:51:78:d7:e2:20:
e7:a9:e2:e8:dc:a0:5c:ee:2b:3d:79:94:10:37:3b:
47:cf:09:9f:cb:4d:57:f9:64:a5:45:41:a2:a2:09:
41:94:19:c5:4f:de:e2:6c:24:0e:d9:4e:d1:39:0c:
61:bd:de:d4:c9:6b:9f:3e:12:c4:a5:fa:1c:a6:ec:
35:92:4a:36:68:72:11:10:10:b2:c6:52:1f:04:f9:
6d:a3:1e:8a:a2:40:be:ef:c7:89:08:c5:6b:4f:9e:
37:8b:77:0a:64:50:c9:af:34:d6:ea:84:52:b8:48:
39:ea:4a:5e:28:ce:b7:b4:4a:0b:43:6c:7e:78:03:
9e:f6:fc:ba:ad:cd:cb:1a:48:63:b3:19:c0:97:8b:
e0:a1:17:cd:66:f0:2b:61:0c:4c:e1:be:a3:14:12:
0d:7a:69:5f:60:07:63:87:43:9a:9f:c5:c3:bc:7a:
b9:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:47:D1:67:FF:65:8E:8C:51:13:24:FF:4D:D0:60:66:49:E6:BC:92
X509v3 Authority Key Identifier:
keyid:50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/50fRZ_9ljoxREyT_TdBgZknmvJI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.238.97.0-160.238.98.255
Signature Algorithm: sha256WithRSAEncryption
25:1d:51:a1:8f:5e:18:7a:a4:81:e1:12:09:0e:00:fe:0f:7b:
5a:af:3c:20:1c:f5:3f:16:9c:74:ad:f5:eb:e8:2b:39:ed:a7:
2f:d5:9d:9e:6d:9f:92:dd:40:72:9c:f0:5b:2a:4b:2a:01:07:
04:dd:ac:a7:3f:7b:6f:11:5d:da:bf:7b:c8:ab:f1:82:1e:18:
c2:8f:0c:b8:2f:28:9f:d0:0e:59:f8:d5:2e:3d:06:9d:f1:5f:
bd:a5:82:0b:dd:b9:b7:c1:df:de:08:3e:ad:50:7d:05:b3:e8:
8d:de:cc:d6:de:74:1f:4d:48:7c:95:5a:e3:5b:2c:4e:de:0e:
ff:70:ad:8b:6d:fe:0f:32:21:d8:26:2e:8f:33:a9:53:fe:35:
2f:0f:5d:d0:3d:4f:9c:d9:1f:29:69:b3:b4:fd:8d:fb:57:32:
20:78:f3:3c:36:69:e2:dd:f5:8a:40:5e:55:a6:7b:74:7c:97:
33:e5:ba:2c:e4:db:8d:b3:c2:86:2e:7e:34:65:6b:68:47:c4:
95:a6:05:c7:99:91:06:07:ce:61:fc:e8:d9:f2:f0:a3:b4:b4:
ac:ec:b3:32:06:a6:07:7e:13:de:3b:47:2f:5b:e0:bf:04:a6:
f8:17:bb:20:e7:6e:91:30:64:24:78:f4:8d:d5:8b:f1:8a:de:
2f:b7:2c:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 05:54:18 2026 by rpki-client