Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/U_NSMLG6xRjNHvQqLv4sSdrMj6g.roa
File: U_NSMLG6xRjNHvQqLv4sSdrMj6g.roa (raw, json)
Hash identifier: Lcs96/KeQbbV0PYiU+5eXr9BjnqbEF6UxXOt8NrMfTM=
Subject key identifier: 53:F3:52:30:B1:BA:C5:18:CD:1E:F4:2A:2E:FE:2C:49:DA:CC:8F:A8
Certificate issuer: /CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Certificate serial: 01A1A1802C7983BF5248F17AF8268185D664
Authority key identifier: 5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/U_NSMLG6xRjNHvQqLv4sSdrMj6g.roa
Signing time: Tue 03 Nov 2026 13:01:34 +0000
ROA not before: Tue 03 Nov 2026 13:01:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56466
IP address blocks: 87.247.179.0/24 maxlen: 24
89.235.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a1:80:2c:79:83:bf:52:48:f1:7a:f8:26:81:85:d6:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Validity
Not Before: Nov 3 13:01:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=53f35230b1bac518cd1ef42a2efe2c49dacc8fa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:72:0f:a6:ae:2b:f6:4a:c8:8c:6f:42:29:b8:
1b:84:7c:0d:f7:8d:f1:52:56:6b:a9:0f:aa:1c:ff:
81:32:85:07:71:7c:52:0b:ec:44:73:87:e9:46:72:
47:fc:88:20:d9:b1:8e:29:d3:c9:a6:54:20:52:11:
6f:ec:69:0a:48:89:cb:e2:f0:ca:e6:8f:a8:fc:d2:
98:08:ed:f4:72:ce:9d:1d:bf:92:d3:49:92:ac:3a:
8c:98:dc:92:92:3a:2e:b8:25:ca:ab:b8:df:cb:37:
4a:0a:f6:3d:c1:72:12:9e:e6:44:24:54:d3:4e:89:
91:0e:7c:12:50:ec:ff:da:cc:dc:b6:55:d3:f5:dc:
10:e6:4c:7c:7b:6f:ae:a7:21:dc:49:43:1b:97:cc:
00:76:7e:59:c4:40:a4:19:1d:02:7f:24:ff:32:a9:
60:c8:58:5d:e8:28:ca:2b:e3:d4:15:4a:28:5d:f9:
c8:ee:84:d2:7a:70:f7:7a:06:03:e1:a3:5e:f4:06:
51:3a:57:0e:00:39:c0:98:74:1a:55:c1:45:49:08:
94:53:0d:e3:8e:24:3b:d6:8d:df:e4:e7:70:2c:3b:
57:6d:cb:fe:2b:f1:d7:8d:9c:da:2d:43:5c:9d:19:
ba:0d:61:4f:62:78:28:58:6f:f1:5f:ec:46:91:57:
05:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:F3:52:30:B1:BA:C5:18:CD:1E:F4:2A:2E:FE:2C:49:DA:CC:8F:A8
X509v3 Authority Key Identifier:
keyid:5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/U_NSMLG6xRjNHvQqLv4sSdrMj6g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.247.179.0/24
89.235.77.0/24
Signature Algorithm: sha256WithRSAEncryption
59:7c:90:83:76:87:b2:c6:e1:9f:dd:25:9f:65:ad:48:dc:f7:
ef:17:20:00:a2:d8:df:dc:58:27:b7:ca:40:19:7f:1b:5f:a1:
06:41:83:2a:9a:32:08:83:5d:b0:75:1f:e7:26:af:2b:91:0e:
70:fa:e7:f3:8d:6f:23:f3:d0:a7:2e:72:14:22:b8:af:1b:ce:
37:f8:da:87:13:4c:c7:f3:01:3b:56:06:4b:dd:6d:20:8c:5c:
d2:f5:79:57:1d:42:7a:8e:98:cd:fb:91:cb:93:b1:43:5e:fb:
09:be:b7:2c:f5:1b:2b:c0:ce:aa:2e:77:d5:71:7b:a1:bd:f0:
c6:77:20:37:e2:64:a0:a2:3b:0d:67:cc:65:b7:b2:77:a7:a6:
85:c6:a9:04:65:2a:7c:05:2d:fd:ad:e1:2b:ed:bf:2a:f6:46:
50:67:c6:bb:9e:cd:ec:a7:01:32:0c:80:ab:2a:7f:33:8f:b1:
5b:b4:9b:c4:75:ad:c6:f7:71:c3:52:c2:ea:56:53:7a:f9:34:
af:be:70:e2:fd:11:da:57:89:46:38:a2:23:16:70:6f:36:37:
81:70:db:4e:2a:c5:27:d8:1e:f6:65:4d:5e:0a:02:11:79:cf:
cc:3c:c4:12:af:e8:ae:ed:78:1c:62:1d:e0:1a:f2:a7:c1:49:
01:b1:e6:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 13:34:57 2026 by rpki-client