Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/50pBY5FsS6Zcas6QSp3dpbJVEeo.roa
File: 50pBY5FsS6Zcas6QSp3dpbJVEeo.roa (raw, json)
Hash identifier: 23VqVdiw5oST9GqSJsBYFBrowKmFyyJAuGfSDpMC474=
Subject key identifier: E7:4A:41:63:91:6C:4B:A6:5C:6A:CE:90:4A:9D:DD:A5:B2:55:11:EA
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 019C4D53091459E1AEBD98181AAD42C76A1D
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/50pBY5FsS6Zcas6QSp3dpbJVEeo.roa
Signing time: Wed 11 Feb 2026 15:30:13 +0000
ROA not before: Wed 11 Feb 2026 15:30:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25198
IP address blocks: 82.197.202.0/24 maxlen: 24
84.245.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:4d:53:09:14:59:e1:ae:bd:98:18:1a:ad:42:c7:6a:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Feb 11 15:30:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e74a4163916c4ba65c6ace904a9ddda5b25511ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:27:40:5b:46:57:5d:e0:86:1f:e4:10:00:e7:
d5:6e:be:c8:bf:e1:cb:43:02:36:39:29:ad:c4:3f:
5f:2f:f1:6d:05:07:97:f6:37:64:38:9f:ea:50:d0:
0d:d5:1f:9a:e0:05:05:e9:25:5b:a0:49:84:14:34:
df:76:87:72:48:ee:b5:ff:a3:ad:82:76:f2:b8:1d:
c6:cc:92:8d:ac:a5:18:45:d9:06:f7:ba:83:83:b5:
33:ec:fd:1f:74:d9:7b:30:d1:4e:cc:9a:96:7c:5f:
c5:f8:36:21:b4:2c:c6:47:d3:0c:15:1d:6b:9b:40:
41:4e:2a:de:8d:a4:c1:0f:05:78:19:77:b6:c3:99:
70:04:df:8a:3c:e7:45:07:7a:a1:3e:c5:99:f8:f5:
72:8c:ac:bf:3a:00:81:db:f5:6f:c2:28:56:7b:1d:
19:c5:d5:1d:02:93:b1:c4:f9:0e:a3:4b:3c:6a:a3:
bc:6c:8a:6c:68:49:32:23:4f:20:56:d4:df:a4:59:
26:06:5c:b3:2c:65:73:10:a1:8d:63:55:84:69:48:
68:04:04:73:e0:d4:78:54:16:81:20:70:8f:0f:5a:
90:eb:13:e1:f4:1f:ed:80:79:c0:fa:86:db:b5:61:
d3:ec:51:f7:4f:08:cc:67:48:a0:20:41:64:18:1f:
13:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:4A:41:63:91:6C:4B:A6:5C:6A:CE:90:4A:9D:DD:A5:B2:55:11:EA
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/50pBY5FsS6Zcas6QSp3dpbJVEeo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.197.202.0/24
84.245.18.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:43:4e:1f:82:c1:85:17:fc:21:34:95:6f:71:5b:c1:54:87:
98:99:8f:b4:f7:c7:4e:ed:75:a6:fb:3e:66:c0:86:6a:90:ef:
6e:a4:4b:85:91:b4:05:0d:bd:c2:1e:05:bd:c7:d5:a6:05:ce:
5a:88:c7:c8:16:06:e9:a3:cb:fa:57:d3:e2:95:de:56:6a:c6:
a6:a9:a2:ed:08:71:53:bc:1a:22:75:8c:c8:d0:88:13:41:d4:
d6:f8:f1:de:f6:7b:9f:c0:69:49:2d:01:62:30:c7:7e:55:7d:
e1:2e:f7:37:7a:68:20:6f:96:12:38:fe:e1:22:04:1f:26:4d:
59:37:65:ee:01:af:d9:5c:49:4a:89:50:57:b5:42:f7:78:c3:
4d:bf:6b:66:f1:44:79:76:6e:ba:95:19:e6:c4:84:2f:00:17:
2b:1e:95:0b:5f:0b:d1:34:47:0a:ec:9d:fd:3b:94:b3:c7:05:
38:d3:50:2c:60:ab:a5:a4:89:da:2e:8e:93:57:82:a5:44:66:
b4:44:8b:4e:ce:9e:e2:be:19:90:1c:d4:c1:8d:96:25:a5:f3:
60:d5:7f:ba:a3:a9:9c:bd:06:cc:49:28:44:71:0a:37:a9:22:
f3:06:36:5c:da:ad:24:be:69:88:65:bd:3a:41:dd:ad:66:3f:
19:9d:8d:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:31:32 2026 by rpki-client