Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/I5yg6BH79KAr51RALcQWKDDowJg.roa
File: I5yg6BH79KAr51RALcQWKDDowJg.roa (raw, json)
Hash identifier: YB3gxPGcriG2Mc6APKYWabuDKvaSrM7OGVQBH2A5xhY=
Subject key identifier: 23:9C:A0:E8:11:FB:F4:A0:2B:E7:54:40:2D:C4:16:28:30:E8:C0:98
Certificate issuer: /CN=505127723ea0cfd0724713b291734caa353e20ea
Certificate serial: 01A12294206AB0CC8DD86113A48A0387C3C3
Authority key identifier: 50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/I5yg6BH79KAr51RALcQWKDDowJg.roa
Signing time: Fri 09 Oct 2026 21:31:35 +0000
ROA not before: Fri 09 Oct 2026 21:31:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152726
IP address blocks: 185.202.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 17:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:22:94:20:6a:b0:cc:8d:d8:61:13:a4:8a:03:87:c3:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505127723ea0cfd0724713b291734caa353e20ea
Validity
Not Before: Oct 9 21:31:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=239ca0e811fbf4a02be754402dc4162830e8c098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f0:6d:4d:94:3c:43:8d:95:1c:b3:3e:aa:69:
4e:1b:a2:cd:8a:a3:92:41:7f:2e:6d:35:78:ff:98:
cf:ae:01:c6:71:15:63:57:84:7e:20:86:41:eb:d4:
5c:e0:6f:ac:a2:e2:f7:6c:d5:45:00:70:b3:d1:50:
05:73:b9:d0:11:64:65:a7:cc:c7:00:f3:66:82:17:
57:09:b6:ad:da:38:16:0c:7e:58:63:ee:3c:f6:76:
53:bb:53:5a:57:0a:a3:31:59:5c:6c:04:ef:98:68:
78:5b:8c:2d:2b:8e:2c:4e:02:ec:02:cb:ec:54:2d:
3d:b4:40:a6:13:43:de:83:44:f9:88:5d:23:64:02:
48:e8:d0:41:70:c7:03:84:3d:53:0d:b9:aa:d7:4e:
44:f9:9a:9e:04:c8:70:70:7a:fa:c2:29:35:5c:db:
c9:ca:b0:51:66:2d:68:ce:4b:2c:64:1b:21:59:ed:
75:3d:9a:81:9f:f1:07:34:65:bb:e9:0f:11:bb:ca:
24:be:4d:f5:7e:e5:c7:4d:3d:fe:74:28:0f:c8:81:
02:4a:eb:3a:9a:9a:4f:bd:0b:d5:d8:82:de:4e:ce:
90:f8:d3:ea:fe:d9:0f:4a:01:10:f4:2a:d9:6f:53:
39:dd:e5:80:d9:cd:2f:3a:8b:8c:a4:48:fa:09:2c:
d7:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:9C:A0:E8:11:FB:F4:A0:2B:E7:54:40:2D:C4:16:28:30:E8:C0:98
X509v3 Authority Key Identifier:
keyid:50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/I5yg6BH79KAr51RALcQWKDDowJg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.202.47.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:93:3c:1a:35:6c:be:eb:c1:9a:fc:56:b9:eb:45:a3:7d:52:
1b:b6:f0:a3:11:38:af:d4:16:5e:a9:ba:10:5b:fc:68:a5:46:
94:2a:34:aa:58:1a:23:a9:49:a0:96:8a:c8:cf:08:c5:3c:83:
ee:1f:8c:ee:0d:44:e4:9c:3f:35:44:a5:cb:d2:7c:2c:b0:56:
31:80:d8:61:fb:34:15:8b:dc:cc:33:cb:45:a0:c1:a3:61:b9:
7b:f2:cf:0b:60:e8:87:cd:40:dc:8e:05:9b:4d:e3:fc:bc:8c:
08:75:40:46:bb:b1:a2:a1:35:7a:45:7f:9a:80:46:c6:81:c3:
37:39:73:39:83:48:a4:87:79:03:68:39:3b:e8:11:8e:61:b3:
52:1d:67:97:1e:c7:b4:a3:74:f9:65:54:4e:3b:e9:bd:e7:02:
ba:6d:31:3d:c1:9b:56:3a:f1:fa:48:8b:d7:eb:39:0f:e1:4f:
f4:3e:b7:30:6a:e8:2f:76:92:52:6e:5d:1b:6a:da:9b:fe:56:
52:3d:ed:b4:21:2f:69:7a:18:7e:fe:58:da:3b:ee:1e:a3:f6:
2f:ab:1b:8d:b5:ad:3d:69:8e:83:1d:7a:98:ee:4f:75:38:5d:
c9:a2:21:9b:09:03:fa:a5:41:69:e4:12:6c:0f:d0:4d:d7:57:
28:46:5c:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 22:05:48 2026 by rpki-client