Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/3Y-eHCCgunD3UqlvqBOXGz_h0B0.roa
File: 3Y-eHCCgunD3UqlvqBOXGz_h0B0.roa (raw, json)
Hash identifier: 5gPJOtrd7/FR9Rg8PU5TgNYEDSQkiUigOipqFHdBnGw=
Subject key identifier: DD:8F:9E:1C:20:A0:BA:70:F7:52:A9:6F:A8:13:97:1B:3F:E1:D0:1D
Certificate issuer: /CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Certificate serial: 01A0C8830E5E2D2C800773231BB0D53F24EF
Authority key identifier: 5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/3Y-eHCCgunD3UqlvqBOXGz_h0B0.roa
Signing time: Tue 22 Sep 2026 09:47:07 +0000
ROA not before: Tue 22 Sep 2026 09:47:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34346
IP address blocks: 87.232.89.0/24 maxlen: 24
87.232.90.0/24 maxlen: 24
89.126.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:83:0e:5e:2d:2c:80:07:73:23:1b:b0:d5:3f:24:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Validity
Not Before: Sep 22 09:47:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dd8f9e1c20a0ba70f752a96fa813971b3fe1d01d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:59:4b:34:c5:b0:60:00:9f:97:45:5d:84:ad:
dc:fd:74:4e:24:bf:5b:b5:64:f7:96:84:8a:09:93:
62:27:84:39:5e:2f:8d:90:23:27:42:e6:6d:9b:72:
77:8d:28:77:0b:86:7a:1c:88:6b:1c:f8:fe:82:08:
7a:36:27:38:54:a6:c9:de:b4:d6:29:5a:49:bc:79:
5c:4f:1a:4a:a1:cb:1e:2b:40:8e:cd:05:e5:77:07:
f0:11:fc:cf:cf:fc:96:dd:e8:ea:a8:b1:2b:8a:1c:
57:2a:71:2a:60:9b:b6:47:8a:7b:6b:54:34:65:38:
cc:03:cf:4f:e0:8c:1b:4b:6f:d6:19:38:f7:79:1a:
2e:39:80:3c:05:5f:40:14:a3:69:a1:bf:28:07:d8:
36:1e:64:ca:27:62:bd:58:e3:0d:1c:e2:69:ed:f9:
72:54:4e:c2:b4:fc:28:56:50:b2:c0:16:3b:16:36:
53:a2:ec:4d:1c:94:f6:76:37:73:d3:8e:dd:bd:87:
7f:47:2c:62:8f:77:dc:f1:05:37:48:a7:1e:ac:e9:
8c:8a:5a:50:7e:57:4a:c0:f9:59:d1:19:76:89:29:
b9:3e:4d:dc:1f:66:bd:d9:8e:04:f9:ba:ae:4a:22:
19:53:3e:b8:b0:e6:9f:b4:c9:4a:7f:5b:ab:e3:09:
72:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:8F:9E:1C:20:A0:BA:70:F7:52:A9:6F:A8:13:97:1B:3F:E1:D0:1D
X509v3 Authority Key Identifier:
keyid:5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/3Y-eHCCgunD3UqlvqBOXGz_h0B0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.232.89.0-87.232.90.255
89.126.229.0/24
Signature Algorithm: sha256WithRSAEncryption
24:2f:8e:f7:44:93:61:0d:d6:51:1d:4c:7c:7e:a4:d3:e6:4d:
d9:bf:18:2a:31:60:d8:f5:53:52:04:fc:71:0b:9f:37:a2:9b:
b3:67:36:00:c8:02:0c:ae:63:70:9e:b1:5e:ff:18:9d:3f:9c:
91:ff:32:66:f5:fa:09:6b:bb:7c:49:4f:94:2d:a3:50:86:e5:
16:79:5e:60:af:b7:2d:8b:0b:b7:fb:94:08:19:dd:d0:77:a0:
88:f1:12:aa:07:2d:18:51:d9:c7:f6:ab:22:99:4a:00:b2:73:
fd:3a:62:9f:86:5f:e4:b3:14:3f:f7:21:a1:d5:c1:4d:81:e2:
ba:8a:c1:64:48:c9:c7:56:b9:94:63:f5:a9:c4:2c:f9:00:40:
da:79:e0:c6:71:99:b1:9e:45:cd:78:29:a3:48:d1:53:14:62:
cf:7f:48:a1:ff:bb:5f:a8:42:cf:48:88:68:6f:5a:7a:d0:07:
cf:b7:5f:65:8b:d6:9b:19:82:c6:67:1e:fb:ef:e0:36:56:56:
39:b4:47:8d:ab:c1:66:be:4c:91:50:55:be:81:71:fe:a2:c6:
cc:c2:be:bb:45:68:df:81:8c:20:e6:e4:03:cb:5e:84:fb:b0:
20:dc:ca:5b:c3:19:fe:fe:8a:78:2f:be:2c:59:de:7c:1b:48:
8f:06:c6:c7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Sep 24 04:49:57 2026 by rpki-client