Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/29xDYkCvFIOzgDytEmmpqgFjiyQ.roa
File: 29xDYkCvFIOzgDytEmmpqgFjiyQ.roa (raw, json)
Hash identifier: ZDZmmg+DFCTvdmtzC0x0T5Q8WaAKkev3vOwXc8BZ9Kg=
Subject key identifier: DB:DC:43:62:40:AF:14:83:B3:80:3C:AD:12:69:A9:AA:01:63:8B:24
Certificate issuer: /CN=826605b4d27f13968e8794e6ef091223748817d8
Certificate serial: 019FA2B6D906BB7D9B67D5A4EA3DE8CCDE73
Authority key identifier: 82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/29xDYkCvFIOzgDytEmmpqgFjiyQ.roa
Signing time: Mon 27 Jul 2026 08:35:19 +0000
ROA not before: Mon 27 Jul 2026 08:35:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 40676
IP address blocks: 92.50.4.0/24 maxlen: 24
92.50.9.0/24 maxlen: 24
147.136.72.0/22 maxlen: 24
147.136.80.0/22 maxlen: 24
147.136.92.0/22 maxlen: 24
185.171.253.0/24 maxlen: 24
192.95.92.0/24 maxlen: 24
192.95.93.0/24 maxlen: 24
192.95.94.0/24 maxlen: 24
192.95.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 11:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:b6:d9:06:bb:7d:9b:67:d5:a4:ea:3d:e8:cc:de:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=826605b4d27f13968e8794e6ef091223748817d8
Validity
Not Before: Jul 27 08:35:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dbdc436240af1483b3803cad1269a9aa01638b24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:82:83:4a:72:1b:73:33:2a:12:7a:fd:9b:d8:
80:3f:5c:c6:9e:15:6b:d8:c5:da:cc:69:f3:71:7d:
f5:23:29:ef:77:73:38:d7:8d:26:df:f2:e9:a0:3b:
5f:d0:4e:b6:b9:b5:27:17:06:c1:3e:22:80:3e:b8:
b7:db:83:aa:54:05:c5:22:78:c6:cc:f3:be:da:35:
68:0d:94:3a:5a:a9:eb:63:36:a2:e3:05:05:b7:3a:
fa:ea:9e:cb:50:73:c1:b5:36:8d:02:d7:03:c5:72:
10:30:39:bf:1d:fe:76:a3:6d:48:43:4b:07:e5:75:
ca:11:7f:26:66:aa:2e:ac:51:2b:31:21:71:be:14:
32:84:0b:27:fa:2c:1c:6a:69:e7:cb:5c:74:06:53:
b3:4d:cf:d7:70:6b:89:25:d8:49:5d:ea:fd:16:21:
56:b1:b8:47:e3:b3:f4:ba:28:a2:cc:c9:c9:d5:a7:
33:0d:7f:ae:e6:13:5c:f9:f3:54:3b:4f:18:5b:f6:
19:65:86:3d:e6:b4:80:a3:a4:29:1c:16:54:2f:12:
39:10:4d:9a:dd:e1:01:11:8b:91:32:47:11:63:f9:
eb:dc:d6:af:42:40:0f:09:5d:9a:b4:5b:99:bf:ec:
99:fb:de:7e:6d:a8:f0:a6:0e:9b:65:ae:a3:5a:99:
b8:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:DC:43:62:40:AF:14:83:B3:80:3C:AD:12:69:A9:AA:01:63:8B:24
X509v3 Authority Key Identifier:
keyid:82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/29xDYkCvFIOzgDytEmmpqgFjiyQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.50.4.0/24
92.50.9.0/24
147.136.72.0/22
147.136.80.0/22
147.136.92.0/22
185.171.253.0/24
192.95.92.0/22
Signature Algorithm: sha256WithRSAEncryption
11:85:99:1b:3e:48:99:b6:db:d8:67:be:73:25:42:30:1c:72:
da:c2:25:b8:bd:36:8e:92:4b:84:9e:6c:ad:b9:47:8c:17:a8:
b7:95:8f:93:a4:03:57:bc:13:6c:6e:4f:1f:4c:0e:8d:3f:e1:
ed:3e:21:22:12:7a:78:8f:ee:99:72:fa:c5:ad:4a:b6:ea:00:
02:01:b5:9b:33:93:a7:b0:87:40:93:86:7c:a2:a7:36:27:24:
2e:e2:ef:78:2b:e8:61:ae:85:b0:af:d6:d5:8c:5e:c6:44:2a:
80:b7:f6:79:36:01:cb:f1:be:42:f0:b8:a2:de:50:7b:03:03:
46:2e:63:da:13:76:fd:8f:b6:d2:18:3e:8d:68:8f:2b:fe:69:
9a:c0:d8:a9:9f:91:78:04:a9:b1:78:6e:c6:e5:be:0b:b2:f0:
83:fd:cd:4d:5f:cc:40:2e:cf:52:29:93:85:f8:55:fb:04:34:
14:5d:5a:40:ec:6e:25:40:7e:23:c2:84:37:55:c2:27:0a:12:
24:ff:50:62:d7:33:b7:66:d9:dd:49:28:72:27:7e:99:d7:61:
6a:2e:e7:2b:2a:0f:16:8b:f5:e5:f2:c1:43:06:be:4a:09:93:
54:b2:d4:63:e0:40:23:6f:af:eb:37:28:bb:4b:f6:e2:40:7c:
be:56:37:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:06:24 2026 by rpki-client