Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/fVj56BW2A6f1dHqM8K-Xj_MO9yI.roa
File: fVj56BW2A6f1dHqM8K-Xj_MO9yI.roa (raw, json)
Hash identifier: R9OaT7Wb4zGZheKI6doEWzyX+npaSXYS/mh8X1G5Erw=
Subject key identifier: 7D:58:F9:E8:15:B6:03:A7:F5:74:7A:8C:F0:AF:97:8F:F3:0E:F7:22
Certificate issuer: /CN=826605b4d27f13968e8794e6ef091223748817d8
Certificate serial: 019FA2C394457833DF5F8B814431A665D382
Authority key identifier: 82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/fVj56BW2A6f1dHqM8K-Xj_MO9yI.roa
Signing time: Mon 27 Jul 2026 08:49:14 +0000
ROA not before: Mon 27 Jul 2026 08:49:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9009
IP address blocks: 92.50.14.0/24 maxlen: 24
92.50.15.0/24 maxlen: 24
92.50.16.0/24 maxlen: 24
92.50.17.0/24 maxlen: 24
92.50.18.0/24 maxlen: 24
92.50.19.0/24 maxlen: 24
92.50.20.0/24 maxlen: 24
92.50.21.0/24 maxlen: 24
92.50.22.0/24 maxlen: 24
92.50.23.0/24 maxlen: 24
92.50.24.0/24 maxlen: 24
92.50.25.0/24 maxlen: 24
92.50.26.0/24 maxlen: 24
92.50.27.0/24 maxlen: 24
92.50.28.0/24 maxlen: 24
92.50.29.0/24 maxlen: 24
92.50.30.0/24 maxlen: 24
92.50.31.0/24 maxlen: 24
92.50.32.0/24 maxlen: 24
92.50.33.0/24 maxlen: 24
92.50.34.0/24 maxlen: 24
92.50.35.0/24 maxlen: 24
92.50.36.0/24 maxlen: 24
92.50.37.0/24 maxlen: 24
92.50.38.0/24 maxlen: 24
92.50.39.0/24 maxlen: 24
92.50.40.0/24 maxlen: 24
92.50.41.0/24 maxlen: 24
92.50.42.0/24 maxlen: 24
92.50.43.0/24 maxlen: 24
92.50.44.0/24 maxlen: 24
92.50.45.0/24 maxlen: 24
92.50.46.0/24 maxlen: 24
92.50.47.0/24 maxlen: 24
92.50.48.0/24 maxlen: 24
92.50.49.0/24 maxlen: 24
92.50.50.0/24 maxlen: 24
92.50.51.0/24 maxlen: 24
92.50.52.0/24 maxlen: 24
92.50.53.0/24 maxlen: 24
92.50.54.0/24 maxlen: 24
92.50.55.0/24 maxlen: 24
92.50.56.0/24 maxlen: 24
92.50.57.0/24 maxlen: 24
92.50.58.0/24 maxlen: 24
92.50.59.0/24 maxlen: 24
92.50.60.0/24 maxlen: 24
92.50.61.0/24 maxlen: 24
92.50.62.0/24 maxlen: 24
92.50.63.0/24 maxlen: 24
168.199.138.0/24 maxlen: 24
168.199.141.0/24 maxlen: 24
168.199.143.0/24 maxlen: 24
168.199.145.0/24 maxlen: 24
168.199.158.0/24 maxlen: 24
168.199.159.0/24 maxlen: 24
168.199.166.0/24 maxlen: 24
168.199.174.0/24 maxlen: 24
168.199.192.0/24 maxlen: 24
168.199.193.0/24 maxlen: 24
168.199.202.0/24 maxlen: 24
168.199.203.0/24 maxlen: 24
168.199.204.0/24 maxlen: 24
168.199.206.0/24 maxlen: 24
168.199.208.0/24 maxlen: 24
168.199.211.0/24 maxlen: 24
168.199.216.0/24 maxlen: 24
168.199.217.0/24 maxlen: 24
168.199.218.0/24 maxlen: 24
168.199.222.0/24 maxlen: 24
168.199.228.0/24 maxlen: 24
168.199.240.0/24 maxlen: 24
168.199.241.0/24 maxlen: 24
168.199.242.0/24 maxlen: 24
168.199.243.0/24 maxlen: 24
168.199.244.0/24 maxlen: 24
168.199.245.0/24 maxlen: 24
168.199.246.0/24 maxlen: 24
168.199.247.0/24 maxlen: 24
168.199.248.0/24 maxlen: 24
168.199.249.0/24 maxlen: 24
168.199.250.0/24 maxlen: 24
168.199.251.0/24 maxlen: 24
168.199.252.0/24 maxlen: 24
168.199.253.0/24 maxlen: 24
168.199.254.0/24 maxlen: 24
168.199.255.0/24 maxlen: 24
185.100.58.0/24 maxlen: 24
192.95.85.0/24 maxlen: 24
192.95.86.0/24 maxlen: 24
192.95.91.0/24 maxlen: 24
2001:678:8b4::/48 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 20:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:c3:94:45:78:33:df:5f:8b:81:44:31:a6:65:d3:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=826605b4d27f13968e8794e6ef091223748817d8
Validity
Not Before: Jul 27 08:49:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7d58f9e815b603a7f5747a8cf0af978ff30ef722
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b5:6a:4a:e8:9e:6f:85:2a:d1:dc:69:f1:5c:
06:23:70:c3:ef:80:ce:fa:35:0a:4c:55:8c:38:f3:
2b:e2:c5:a7:61:b2:99:7e:32:a5:6d:fc:cf:5f:64:
2a:bb:9e:48:19:02:d6:ba:aa:fa:46:47:9e:e2:cc:
2c:c2:1b:1f:05:bf:4d:00:b4:66:6a:01:77:19:51:
98:b8:53:6b:ad:d2:61:a4:24:79:5e:39:3e:a8:14:
ff:a2:09:c2:4d:bf:76:cb:49:6f:a1:98:03:bd:a7:
cc:9e:bf:6c:c4:47:7a:5f:a8:7b:73:ce:b9:ea:05:
45:22:af:c4:0a:4e:d5:9f:da:90:47:45:0e:13:88:
7e:66:04:47:79:60:92:f7:fd:b3:a5:35:b6:35:ce:
79:40:b6:4e:2c:5a:b0:30:0f:61:15:cf:c7:b3:a5:
ed:b0:75:3f:c2:84:1c:a9:49:88:8a:2d:5d:4b:f6:
ca:cc:f8:7d:83:a8:1b:1a:63:c5:6f:c1:51:8e:33:
f8:92:1d:f2:d9:7d:13:85:65:d0:b8:6a:58:40:a2:
1a:4e:34:85:ba:21:54:20:34:a2:fe:2d:f5:cd:ec:
b9:4c:80:21:17:22:c6:9d:4a:f6:b4:7b:90:2f:d9:
43:1b:8b:cb:53:7a:d1:df:85:88:c0:a5:73:87:83:
77:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:58:F9:E8:15:B6:03:A7:F5:74:7A:8C:F0:AF:97:8F:F3:0E:F7:22
X509v3 Authority Key Identifier:
keyid:82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/fVj56BW2A6f1dHqM8K-Xj_MO9yI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.50.14.0-92.50.63.255
168.199.138.0/24
168.199.141.0/24
168.199.143.0/24
168.199.145.0/24
168.199.158.0/23
168.199.166.0/24
168.199.174.0/24
168.199.192.0/23
168.199.202.0-168.199.204.255
168.199.206.0/24
168.199.208.0/24
168.199.211.0/24
168.199.216.0-168.199.218.255
168.199.222.0/24
168.199.228.0/24
168.199.240.0/20
185.100.58.0/24
192.95.85.0-192.95.86.255
192.95.91.0/24
IPv6:
2001:678:8b4::/48
Signature Algorithm: sha256WithRSAEncryption
79:5d:30:20:0a:b0:03:97:e1:0d:a0:49:20:f2:c3:8e:c6:41:
92:b4:56:89:ee:0b:09:31:02:82:45:ef:57:5a:3c:13:4d:11:
8a:5c:e5:a4:0a:8c:e2:f2:c2:f2:a7:e6:7d:a4:24:a3:f2:d3:
76:cb:89:ec:44:7f:53:27:e6:61:f1:be:14:b7:cd:2f:42:b2:
fd:c1:d1:92:e0:d0:a8:4e:60:60:1a:bd:1f:c9:64:43:5b:d9:
6d:7a:1c:95:d5:25:a4:9f:57:d5:92:50:8f:ef:f8:9c:f9:71:
63:00:8c:6c:6d:c2:7a:66:d0:29:17:56:73:ac:54:55:52:1e:
e4:79:38:4b:e7:1b:47:20:6b:9a:4b:44:ce:25:58:2b:14:c9:
77:1b:da:ed:36:76:e0:6d:e0:cc:ec:71:ba:20:71:ea:e5:a9:
e1:9c:53:58:47:54:66:f9:ed:c4:a4:0f:f5:da:f5:39:c9:30:
ce:82:3d:0b:ed:92:6a:41:bc:b1:2f:18:69:aa:29:06:f4:71:
23:77:cf:32:72:f0:aa:9a:b7:4b:46:9e:d2:85:bd:38:a5:c0:
26:dd:d5:07:94:ca:c3:c1:df:f1:b5:3d:51:5a:2b:9c:32:63:
13:2b:1a:4b:41:2a:9a:6b:56:d9:ef:04:8e:fd:41:c8:34:1d:
9c:76:54:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:37:43 2026 by rpki-client