Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/T1Yedvd69rx9OZdsCZZ-E3E3F6g.roa
File: T1Yedvd69rx9OZdsCZZ-E3E3F6g.roa (raw, json)
Hash identifier: Lbr2h0WW9kfCIl+Z2IVGVdY6+L9EmtCScK6grkBe+L0=
Subject key identifier: 4F:56:1E:76:F7:7A:F6:BC:7D:39:97:6C:09:96:7E:13:71:37:17:A8
Certificate issuer: /CN=e5e03354666c4cb2abfd51411eca5d524b0d5be5
Certificate serial: 019CF3735C2392A3D2870BED9DC8D0D865FD
Authority key identifier: E5:E0:33:54:66:6C:4C:B2:AB:FD:51:41:1E:CA:5D:52:4B:0D:5B:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5eAzVGZsTLKr_VFBHspdUksNW-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/T1Yedvd69rx9OZdsCZZ-E3E3F6g.roa
Signing time: Sun 15 Mar 2026 21:42:29 +0000
ROA not before: Sun 15 Mar 2026 21:42:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 87.232.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/5eAzVGZsTLKr_VFBHspdUksNW-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f3:73:5c:23:92:a3:d2:87:0b:ed:9d:c8:d0:d8:65:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5e03354666c4cb2abfd51411eca5d524b0d5be5
Validity
Not Before: Mar 15 21:42:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4f561e76f77af6bc7d39976c09967e13713717a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:2a:76:59:04:66:99:bf:24:3c:71:9b:b4:15:
60:07:a0:0b:16:8a:cb:47:47:d2:ef:d8:cb:8b:aa:
0a:c2:90:2e:e7:21:10:e1:f5:ed:de:75:89:5d:62:
95:3a:b6:a4:7b:df:43:cf:d0:d1:d8:be:6c:64:73:
b6:49:aa:1e:64:d8:30:f5:97:0b:2c:d9:2a:50:8f:
19:ec:89:c4:cb:7d:47:64:98:7c:0e:4b:6f:40:ba:
fa:31:77:d6:81:ac:db:bd:fd:da:85:5a:8c:05:55:
04:24:1e:cb:82:16:73:43:8b:c6:03:51:43:09:ea:
40:ef:2c:dc:e3:0f:eb:92:7c:36:a9:b5:7d:2f:cf:
24:af:40:74:54:e5:19:b0:2b:04:99:96:f3:66:a6:
53:c2:2c:36:10:14:98:08:a4:e2:b7:db:c3:a6:a2:
49:1d:b4:70:0b:66:4e:f9:db:01:57:8b:58:99:1d:
14:18:38:9f:ad:f6:6e:10:7f:b1:21:d6:83:33:a3:
9f:d2:24:b9:2f:dd:7a:1a:e9:3f:85:c5:b2:ef:69:
f6:2d:d4:52:7d:e3:86:47:74:17:7f:e7:57:80:e4:
a0:4c:60:cb:95:0e:a3:f9:03:0d:a8:c0:79:f1:6c:
20:18:15:df:ec:7c:bb:71:06:0e:e4:96:dc:5b:4e:
ed:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:56:1E:76:F7:7A:F6:BC:7D:39:97:6C:09:96:7E:13:71:37:17:A8
X509v3 Authority Key Identifier:
keyid:E5:E0:33:54:66:6C:4C:B2:AB:FD:51:41:1E:CA:5D:52:4B:0D:5B:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5eAzVGZsTLKr_VFBHspdUksNW-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/T1Yedvd69rx9OZdsCZZ-E3E3F6g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.232.78.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:41:03:b1:a7:ac:b6:da:49:21:63:f5:49:f2:c8:ef:ff:69:
dc:fa:01:77:e9:31:74:d3:25:5e:7f:2c:ef:9b:c9:09:de:61:
a6:8e:b0:35:6c:7c:74:95:26:c6:38:7c:7d:db:b0:aa:fc:b8:
da:44:9d:68:58:1c:75:92:e0:ee:1a:d6:1e:77:ed:f5:9f:e2:
84:00:ff:94:18:e7:06:d7:7e:c9:bd:f2:d3:f9:29:b6:68:4e:
a3:3a:30:95:2b:1c:fd:39:a1:0a:e4:15:6d:bd:8a:98:47:86:
e8:dd:6c:39:85:ff:a2:2b:7f:ba:41:f0:a9:96:9e:2a:71:c0:
81:47:36:1b:47:c2:69:01:d1:26:35:fb:81:4b:b6:ea:3f:97:
b3:93:f4:de:93:a5:ca:0b:f2:ff:8b:b8:89:49:56:a9:28:07:
98:01:70:37:71:f1:54:d6:d8:36:14:4c:c0:7b:60:b9:6f:b8:
b3:62:10:4a:20:31:fe:a9:3d:c5:03:60:1c:7c:f1:35:d1:d3:
6d:9c:f4:e7:13:18:6d:97:b7:62:8d:71:18:04:67:7e:54:00:
e0:e2:24:5a:74:d2:15:41:b7:f4:1d:78:ab:fb:09:7b:b1:68:
8e:74:68:65:fa:5e:b7:79:3d:a8:4c:84:de:41:d5:7d:5a:04:
ce:fb:db:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:36:22 2026 by rpki-client