Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/tNc8lG4ab6VMRM9eqy1DmQopJKk.roa
File: tNc8lG4ab6VMRM9eqy1DmQopJKk.roa (raw, json)
Hash identifier: /q+q6GJme4wDgpdO0tKuEImt+ywsENNfM3j/DZS/xgE=
Subject key identifier: B4:D7:3C:94:6E:1A:6F:A5:4C:44:CF:5E:AB:2D:43:99:0A:29:24:A9
Certificate issuer: /CN=e5e03354666c4cb2abfd51411eca5d524b0d5be5
Certificate serial: 019F0D156EDEA1318CC8B012BEAE3AFB61F4
Authority key identifier: E5:E0:33:54:66:6C:4C:B2:AB:FD:51:41:1E:CA:5D:52:4B:0D:5B:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5eAzVGZsTLKr_VFBHspdUksNW-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/tNc8lG4ab6VMRM9eqy1DmQopJKk.roa
Signing time: Sun 28 Jun 2026 07:15:36 +0000
ROA not before: Sun 28 Jun 2026 07:15:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199454
IP address blocks: 87.232.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/5eAzVGZsTLKr_VFBHspdUksNW-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 15:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:0d:15:6e:de:a1:31:8c:c8:b0:12:be:ae:3a:fb:61:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5e03354666c4cb2abfd51411eca5d524b0d5be5
Validity
Not Before: Jun 28 07:15:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b4d73c946e1a6fa54c44cf5eab2d43990a2924a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c5:44:4d:2a:c4:de:db:16:64:98:31:b1:82:
15:3a:35:39:76:79:08:83:90:5c:2e:3d:4b:5a:fa:
8a:c5:0a:2d:34:bd:de:0e:ad:bb:92:62:59:5c:bc:
92:30:9a:17:e9:59:49:79:a4:cf:65:45:0d:18:db:
0c:66:35:64:f9:42:66:3c:0c:e4:3d:36:18:83:78:
f3:c3:12:b1:5e:04:71:61:a8:96:7d:c1:e3:a2:9e:
5d:d5:a3:ba:b3:99:da:8e:34:b7:f5:7d:af:18:1a:
dd:c8:b0:1e:c6:54:2f:9d:03:a8:d0:8f:ec:61:bc:
fa:51:85:4c:ec:1b:8e:8b:57:af:10:6c:3e:af:01:
6d:24:47:9d:24:3b:fe:a1:7b:53:73:84:1d:48:34:
4b:21:7f:f1:fd:26:11:3b:d5:ab:0e:7c:84:f4:a2:
40:49:cb:74:a7:54:cc:0b:ba:53:66:3e:08:1b:c8:
87:8c:68:5c:b7:c4:5f:ae:69:bf:f5:da:a0:32:2f:
e8:87:31:84:a1:7f:c4:00:93:c5:ac:dd:7b:30:2b:
3b:a1:db:d5:30:92:cf:39:48:d1:c4:25:2b:6b:56:
eb:aa:da:42:7e:f8:9d:7f:ed:4e:2e:82:2c:db:49:
89:d2:06:66:18:49:55:94:8e:ec:39:48:97:20:33:
24:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:D7:3C:94:6E:1A:6F:A5:4C:44:CF:5E:AB:2D:43:99:0A:29:24:A9
X509v3 Authority Key Identifier:
keyid:E5:E0:33:54:66:6C:4C:B2:AB:FD:51:41:1E:CA:5D:52:4B:0D:5B:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5eAzVGZsTLKr_VFBHspdUksNW-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/tNc8lG4ab6VMRM9eqy1DmQopJKk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.232.73.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:f9:7d:9a:32:83:27:c4:e5:80:1a:51:9d:76:36:f5:ab:69:
e0:5a:b2:ce:d9:88:4f:a7:c7:8f:fd:b9:b6:c7:24:b4:22:13:
83:20:d3:0e:a8:98:e9:2c:f0:1e:4b:cb:d3:ca:c2:d0:01:9b:
c4:84:f1:da:6a:64:65:f9:f6:cd:24:9a:37:ce:b2:b3:18:db:
73:d0:29:60:d2:49:58:ee:92:b6:da:7f:be:85:4d:e9:10:8c:
d3:b0:23:88:40:ce:40:24:3b:22:f8:71:61:26:c9:ff:a8:5f:
29:8e:ed:4d:89:e5:b6:ed:60:5b:d3:51:4e:38:9d:12:2c:df:
b8:31:ff:5e:c1:2c:e7:4e:92:ff:14:b4:60:16:f3:7f:70:07:
df:ab:59:47:d2:84:71:a6:cd:a8:14:f3:5d:e7:c5:e2:e5:cc:
7d:9c:4d:5c:b2:61:90:fd:ed:27:a3:f6:7f:11:15:87:59:ea:
bf:90:25:ca:b3:73:80:4e:c5:ed:2b:0b:dc:ed:95:ab:99:4b:
e9:f2:1d:c5:98:bf:05:4e:9d:ce:4c:ef:ea:6f:ee:0d:b6:65:
21:e1:cf:ad:95:5b:b3:1c:61:79:38:fd:b0:56:9d:19:95:76:
05:1e:11:45:01:42:64:e6:7a:89:b9:7b:f5:a8:96:3a:13:ca:
37:94:3c:66
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8NFW7eoTGMyLASvq46+2H0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1ZTAzMzU0NjY2YzRjYjJhYmZkNTE0MTFlY2E1ZDUyNGIw
ZDViZTUwHhcNMjYwNjI4MDcxNTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNGQ3M2M5NDZlMWE2ZmE1NGM0NGNmNWVhYjJkNDM5OTBhMjkyNGE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMVETSrE3tsWZJgxsYIVOjU5dnkI
g5BcLj1LWvqKxQotNL3eDq27kmJZXLySMJoX6VlJeaTPZUUNGNsMZjVk+UJmPAzk
PTYYg3jzwxKxXgRxYaiWfcHjop5d1aO6s5najjS39X2vGBrdyLAexlQvnQOo0I/s
Ybz6UYVM7BuOi1evEGw+rwFtJEedJDv+oXtTc4QdSDRLIX/x/SYRO9WrDnyE9KJA
Sct0p1TMC7pTZj4IG8iHjGhct8Rfrmm/9dqgMi/ohzGEoX/EAJPFrN17MCs7odvV
MJLPOUjRxCUra1brqtpCfvidf+1OLoIs20mJ0gZmGElVlI7sOUiXIDMkXQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLTXPJRuGm+lTETPXqstQ5kKKSSpMB8GA1UdIwQY
MBaAFOXgM1RmbEyyq/1RQR7KXVJLDVvlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWVBelZHWnNUTEtyX1ZGQkhzcGRVa3NOVy1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS85YjYyNWQtMGI2Mi00NWQ5LTk5ZWYt
NjBmYjBmOTE5OTdlLzEvdE5jOGxHNGFiNlZNUk05ZXF5MURtUW9wSktrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS85YjYyNWQtMGI2Mi00NWQ5LTk5ZWYtNjBmYjBmOTE5OTdl
LzEvNWVBelZHWnNUTEtyX1ZGQkhzcGRVa3NOVy1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV+hJMA0G
CSqGSIb3DQEBCwUAA4IBAQCO+X2aMoMnxOWAGlGddjb1q2ngWrLO2YhPp8eP/bm2
xyS0IhODINMOqJjpLPAeS8vTysLQAZvEhPHaamRl+fbNJJo3zrKzGNtz0Clg0klY
7pK22n++hU3pEIzTsCOIQM5AJDsi+HFhJsn/qF8pju1NieW27WBb01FOOJ0SLN+4
Mf9ewSznTpL/FLRgFvN/cAffq1lH0oRxps2oFPNd58Xi5cx9nE1csmGQ/e0no/Z/
ERWHWeq/kCXKs3OATsXtKwvc7ZWrmUvp8h3FmL8FTp3OTO/qb+4NtmUh4c+tlVuz
HGF5OP2wVp0ZlXYFHhFFAUJk5nqJuXv1qJY6E8o3lDxm
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:48:21 2026 by rpki-client