Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/3VIMZ8DX4eUWXSvminbUlyeNEUw.roa
File: 3VIMZ8DX4eUWXSvminbUlyeNEUw.roa (raw, json)
Hash identifier: SSpv+TbecMgtO944rstKTobME07WfytXg2M37HTXj78=
Subject key identifier: DD:52:0C:67:C0:D7:E1:E5:16:5D:2B:E6:8A:76:D4:97:27:8D:11:4C
Certificate issuer: /CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Certificate serial: 019D1A8F9154C5F003BC303B817D3DC46D4E
Authority key identifier: 5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/3VIMZ8DX4eUWXSvminbUlyeNEUw.roa
Signing time: Mon 23 Mar 2026 11:58:29 +0000
ROA not before: Mon 23 Mar 2026 11:58:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207019
IP address blocks: 87.232.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1a:8f:91:54:c5:f0:03:bc:30:3b:81:7d:3d:c4:6d:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Validity
Not Before: Mar 23 11:58:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dd520c67c0d7e1e5165d2be68a76d497278d114c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:38:7d:dd:cd:0f:51:34:40:ed:de:5a:aa:fb:
a7:8a:65:8b:42:4d:10:97:d6:de:47:cf:b8:cf:75:
8b:46:8d:f2:47:ee:8c:aa:2b:5a:72:2b:6c:ec:3d:
38:29:a8:32:77:b6:71:e9:b1:78:30:72:0c:fe:20:
68:4a:c5:1e:36:f5:26:ac:b1:e4:94:c4:cd:0e:29:
5d:ce:07:b2:d3:f4:76:30:db:7d:ea:51:86:25:f9:
14:c6:ac:06:ba:c7:d0:cc:16:eb:71:96:fc:97:bd:
62:8f:04:55:14:98:fc:03:ec:ce:b7:3a:72:53:ce:
cc:89:9a:2d:6d:e4:90:c9:82:6a:c8:09:24:64:e9:
16:55:79:df:5b:1d:41:ff:ce:7c:dc:c0:b9:43:87:
de:c4:6c:33:da:53:bb:97:8a:7d:2d:af:45:f4:8d:
fe:d4:8e:de:fe:82:d9:89:51:ff:33:b9:a7:1d:50:
33:e1:f0:69:e4:2e:18:f0:9b:dd:0a:ed:70:1b:1d:
e1:67:72:47:85:10:f5:d2:1a:06:ba:d4:af:cd:b6:
7b:55:ee:fa:fe:f2:65:88:1c:a7:b2:e7:c9:9d:b7:
7d:69:a4:87:48:f3:7d:bb:ee:c2:3a:a5:e0:7c:b6:
2a:f7:00:75:54:b9:dc:d8:e6:c4:01:86:97:3a:3c:
78:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:52:0C:67:C0:D7:E1:E5:16:5D:2B:E6:8A:76:D4:97:27:8D:11:4C
X509v3 Authority Key Identifier:
keyid:5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/3VIMZ8DX4eUWXSvminbUlyeNEUw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.232.86.0/24
Signature Algorithm: sha256WithRSAEncryption
22:3f:f2:1f:b2:90:04:e8:da:65:e9:08:74:93:d9:20:48:ad:
b1:ed:cd:e3:e9:80:36:34:16:8c:42:e7:42:0f:33:c9:42:dd:
e9:70:3e:40:51:2a:71:39:9f:ae:24:12:bb:10:54:49:9e:8b:
59:ee:5a:56:44:0a:af:a2:68:63:41:4f:9d:46:ea:7c:a0:f9:
32:ef:d1:af:58:96:d6:97:5e:fd:4c:bb:64:8a:a7:8e:40:c9:
87:21:76:dc:48:8a:b3:ad:70:8a:e9:75:32:40:64:a9:92:1a:
05:12:3f:cd:03:66:fc:bd:a2:42:df:7b:f1:8d:23:08:34:c9:
0e:ad:ec:fd:01:af:63:71:b3:20:f2:25:a2:d3:34:c7:ef:70:
d3:e5:03:58:e7:27:bd:03:9c:23:81:7a:29:c1:86:28:ce:65:
e3:44:27:03:06:22:fd:40:b8:6f:e6:7d:6a:62:fb:97:2a:20:
17:8a:a4:f3:73:ef:db:91:5f:e0:6a:37:cd:c5:b2:ed:07:2c:
c7:48:3e:be:25:3b:19:c7:3c:0a:ad:02:32:e5:65:85:0a:39:
e4:11:ed:75:86:22:12:3d:bb:45:97:cb:a0:6d:98:2f:15:64:
b8:59:ae:31:04:44:8f:8d:07:ec:e9:66:36:5b:76:fd:65:ad:
86:e6:cd:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:35:16 2026 by rpki-client