Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/xK4fn_mfKtpIKp5VERCVjRuMxiM.roa
File: xK4fn_mfKtpIKp5VERCVjRuMxiM.roa (raw, json)
Hash identifier: 3ND8IxYq5kLUwf+x2EWco+ad/FXb8dHWcq+E/M7/OjI=
Subject key identifier: C4:AE:1F:9F:F9:9F:2A:DA:48:2A:9E:55:11:10:95:8D:1B:8C:C6:23
Certificate issuer: /CN=826605b4d27f13968e8794e6ef091223748817d8
Certificate serial: 01A1BB817FA318320C5D8C554E745BB32C8E
Authority key identifier: 82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/xK4fn_mfKtpIKp5VERCVjRuMxiM.roa
Signing time: Sun 08 Nov 2026 14:13:08 +0000
ROA not before: Sun 08 Nov 2026 14:13:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198566
IP address blocks: 147.136.78.0/24 maxlen: 24
147.136.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:bb:81:7f:a3:18:32:0c:5d:8c:55:4e:74:5b:b3:2c:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=826605b4d27f13968e8794e6ef091223748817d8
Validity
Not Before: Nov 8 14:13:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c4ae1f9ff99f2ada482a9e551110958d1b8cc623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:b0:f9:0d:98:ca:e6:fc:b9:d8:30:51:72:fc:
b5:5b:9b:f6:e6:5d:ff:7c:ad:a5:a8:b3:f3:32:57:
55:ea:dc:5f:21:ea:fc:d8:06:be:45:2e:1d:46:d1:
16:7e:0c:78:26:58:e3:fe:cd:19:01:29:7a:3d:c3:
50:85:37:d9:70:7b:50:75:f0:78:e2:af:84:4a:f3:
21:db:3f:89:37:7e:06:2f:4e:94:64:c7:87:7a:fa:
c3:e3:13:79:10:ce:8d:63:e7:09:84:10:7b:2d:ae:
13:46:59:ef:6c:11:c3:76:64:6d:1b:8f:e6:34:99:
f8:3a:db:cd:d6:8b:f8:30:3a:a7:74:e2:fd:eb:a9:
9d:52:30:b6:6e:e0:df:b9:14:2c:6d:9c:99:a6:0d:
20:ac:08:57:d6:74:7e:eb:b3:a8:9f:43:82:a3:e9:
93:8f:6c:56:a2:14:2b:bd:f2:21:de:9c:38:09:15:
5a:cf:d3:83:ea:6f:2b:a7:e1:34:19:38:98:ca:cb:
fb:5c:49:68:72:5d:97:09:42:df:be:e5:1a:77:0e:
f1:9a:5f:54:84:c7:96:df:32:94:87:46:74:d9:92:
50:64:b8:cc:d9:8d:11:95:17:08:40:ca:5d:e2:6c:
e0:a7:d4:d1:a8:10:95:92:5f:3f:8f:3e:f7:c0:83:
5f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:AE:1F:9F:F9:9F:2A:DA:48:2A:9E:55:11:10:95:8D:1B:8C:C6:23
X509v3 Authority Key Identifier:
keyid:82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/xK4fn_mfKtpIKp5VERCVjRuMxiM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.136.78.0/24
147.136.84.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:41:03:58:03:f7:1c:4a:3a:fd:30:ac:72:ec:0c:9b:c2:4f:
9b:54:6f:fd:36:16:db:ee:07:7c:6b:23:65:0c:f4:9f:fc:9b:
f5:de:89:43:eb:17:46:32:02:77:4c:ad:b2:be:1e:69:bf:b6:
0a:76:04:35:14:37:c9:65:30:53:aa:76:e5:4f:1f:1d:20:0c:
40:f2:1b:74:78:76:29:a0:5c:5e:41:f1:0b:e0:c8:51:fd:c6:
29:43:8c:fd:f5:88:bb:2c:03:32:fa:3e:87:e6:d5:04:ad:12:
e7:f6:57:42:05:4e:7f:db:74:e2:7b:f3:a6:58:a0:15:25:e1:
f7:f6:7b:19:60:2b:66:55:a1:24:dc:3b:a6:80:fb:2c:23:55:
48:41:1e:db:8d:06:25:78:ac:91:5f:8e:a0:ec:90:f2:51:5b:
1c:58:7d:42:7d:39:5a:b0:d4:fe:ee:71:0a:e8:a3:91:7d:5f:
fb:80:b4:bc:84:c9:3e:e0:3f:81:ff:8a:6e:1b:f8:d1:25:20:
47:69:77:c8:e9:7b:20:ae:3c:05:c9:50:1a:4d:25:86:98:4e:
0f:21:22:b0:cf:d1:2f:9f:0f:09:c3:35:4f:88:a3:3d:04:1c:
a5:af:8d:1f:fb:39:de:30:6d:4a:ba:c2:9f:1f:33:4e:2b:49:
04:1f:a2:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 01:54:27 2026 by rpki-client