Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/T50C-DbO69bkRbIaWhwMYd2FZgI.roa
File: T50C-DbO69bkRbIaWhwMYd2FZgI.roa (raw, json)
Hash identifier: ApEBmHxOi4b9nbcBs1a7m2y81kSTfHQtMQXnRNaqMbQ=
Subject key identifier: 4F:9D:02:F8:36:CE:EB:D6:E4:45:B2:1A:5A:1C:0C:61:DD:85:66:02
Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Certificate serial: 019DC6BF6B5D6295914CFA35450543EA7F47
Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/T50C-DbO69bkRbIaWhwMYd2FZgI.roa
Signing time: Sat 25 Apr 2026 22:25:26 +0000
ROA not before: Sat 25 Apr 2026 22:25:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6079
IP address blocks: 194.38.48.0/24 maxlen: 24
194.38.49.0/24 maxlen: 24
194.38.50.0/24 maxlen: 24
194.38.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:c6:bf:6b:5d:62:95:91:4c:fa:35:45:05:43:ea:7f:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Validity
Not Before: Apr 25 22:25:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4f9d02f836ceebd6e445b21a5a1c0c61dd856602
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ad:87:b4:79:36:db:28:8b:63:07:7b:5c:5a:
4f:36:eb:93:5c:0a:c7:80:a9:0d:2b:d5:9a:c2:f6:
1c:38:1b:e8:0f:19:51:5e:c6:5a:d2:2e:ea:40:b2:
47:5e:cc:7c:06:a8:f0:dd:8b:c1:2b:f2:df:52:2b:
19:4b:32:b3:26:d7:a4:a0:b4:fd:6a:0e:b4:c0:75:
eb:b2:fb:c5:3b:20:06:38:45:b6:28:d8:bc:4a:35:
d3:65:fd:17:bf:27:f2:94:df:9c:99:56:b7:0f:bf:
f0:f2:05:93:30:4e:7f:3e:a0:d7:26:12:91:a3:38:
cd:9a:66:e9:99:0c:b4:f1:72:51:06:fd:2a:fb:27:
ca:01:42:38:bc:9c:a5:f5:2a:2c:f1:a8:5a:cb:4b:
8f:ea:71:e8:f7:84:5d:9c:bc:f3:33:62:66:f9:3d:
f8:22:00:34:d2:33:4a:c8:f2:f4:ad:f9:49:fa:97:
32:ab:94:55:f9:e5:c2:9a:c5:06:3d:a7:2b:59:aa:
d4:9c:a6:a1:f0:67:d5:e7:54:50:a3:16:97:48:ca:
a6:f5:91:08:43:8c:89:95:e0:e1:38:c1:8c:69:19:
17:ce:e5:d5:db:30:ad:7e:ef:dc:92:6a:26:f1:b6:
8c:07:fa:2a:33:7a:f2:40:c0:6b:31:55:03:46:59:
ef:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:9D:02:F8:36:CE:EB:D6:E4:45:B2:1A:5A:1C:0C:61:DD:85:66:02
X509v3 Authority Key Identifier:
keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/T50C-DbO69bkRbIaWhwMYd2FZgI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.38.48.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:08:6c:67:f8:15:2d:d0:9b:42:79:cc:7a:60:87:bd:46:b2:
5f:b6:ae:fb:f6:b6:0a:5b:c3:f5:6c:8c:e3:7b:8c:5a:05:04:
60:52:67:a9:76:a8:76:dd:24:6b:fe:71:b8:f3:8a:b1:9f:48:
28:51:ea:71:d9:4b:6f:24:6a:ad:c6:3a:11:42:96:3f:fb:cb:
5d:06:ab:0a:1e:4c:c4:f7:62:de:88:5e:01:80:90:3f:a7:46:
1d:13:ed:7c:68:38:e6:e2:30:77:49:df:b5:7f:a1:4a:1a:14:
5a:45:3e:eb:91:c4:34:09:37:65:fb:05:dc:c1:08:e0:f2:d2:
23:c8:a7:b2:2c:26:84:fa:81:27:6f:c6:8c:77:20:d0:b8:42:
5e:47:25:c6:6c:99:a7:ee:38:47:eb:25:3a:cc:af:18:ca:fe:
f3:8a:af:44:ee:8c:4d:6f:5e:80:a2:5d:63:fa:86:41:56:bd:
06:13:5f:30:51:99:55:f4:9a:86:f0:46:82:ed:00:c2:c2:10:
b7:31:9a:52:72:6b:20:cd:c1:95:74:f8:f0:b3:9e:fa:d1:aa:
34:2a:bb:8c:34:7a:aa:af:ed:b8:80:4f:88:9e:79:a4:5a:60:
ef:fb:fe:c1:94:6f:11:aa:8a:fb:69:e4:ce:18:d2:61:5a:7e:
21:05:84:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:46:00 2026 by rpki-client