Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/CCcx8lAFtquZMrwbmsjTX-zeZw0.roa
File: CCcx8lAFtquZMrwbmsjTX-zeZw0.roa (raw, json)
Hash identifier: U4RNHmGnqQAnD9g+3L+LJGPOzfInjokovZZ9FXZj3h8=
Subject key identifier: 08:27:31:F2:50:05:B6:AB:99:32:BC:1B:9A:C8:D3:5F:EC:DE:67:0D
Certificate issuer: /CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Certificate serial: 019F90F52B3531E8C79189446AD57A9C20AA
Authority key identifier: 5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/CCcx8lAFtquZMrwbmsjTX-zeZw0.roa
Signing time: Thu 23 Jul 2026 21:50:14 +0000
ROA not before: Thu 23 Jul 2026 21:50:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34346
IP address blocks: 87.232.82.0/24 maxlen: 24
87.232.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:f5:2b:35:31:e8:c7:91:89:44:6a:d5:7a:9c:20:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Validity
Not Before: Jul 23 21:50:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=082731f25005b6ab9932bc1b9ac8d35fecde670d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d8:21:17:ee:ea:67:70:c5:82:fd:f5:29:d4:
54:02:48:f3:fc:74:1c:e6:eb:0d:a0:dd:d0:b3:72:
f8:5d:7e:06:96:4d:fc:41:18:f5:9b:35:8c:0a:cf:
fa:11:52:72:5d:b5:ce:b9:fa:93:8d:c5:c8:8d:8c:
59:da:98:9b:f4:b8:5b:70:7e:3f:6c:35:9f:2a:c2:
ac:da:75:89:8a:95:19:a7:2d:6b:b0:f2:59:98:51:
9c:65:7e:5b:f2:cf:02:1e:b7:14:5e:79:28:55:01:
8a:57:dc:6e:5e:8b:ea:39:4d:71:3b:fa:be:ef:a1:
b4:e7:31:a0:c0:65:27:4a:d2:55:fb:de:05:db:dc:
84:16:c5:06:ed:49:ca:fa:be:a0:ec:15:55:5c:78:
ee:d1:91:20:fc:ea:75:16:a1:c8:15:e4:46:3f:94:
53:c3:38:68:25:ee:9d:8b:e0:b5:6f:a9:fc:a2:25:
81:02:7b:80:32:3b:62:7c:ef:c6:78:89:a0:6d:f7:
bd:ca:9e:fe:6d:57:72:71:a2:19:3c:b4:c1:37:05:
ba:c1:01:d1:90:f0:83:7d:43:e9:7b:5a:4b:b8:05:
d0:1c:45:4c:bd:40:40:80:4f:c1:9a:c0:2a:a4:69:
b6:9b:ab:87:1f:8b:19:b4:81:27:46:f8:22:70:e1:
24:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:27:31:F2:50:05:B6:AB:99:32:BC:1B:9A:C8:D3:5F:EC:DE:67:0D
X509v3 Authority Key Identifier:
keyid:5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/CCcx8lAFtquZMrwbmsjTX-zeZw0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.232.82.0/24
87.232.94.0/24
Signature Algorithm: sha256WithRSAEncryption
88:90:c1:a0:aa:cf:52:3b:db:3f:07:51:88:a5:22:54:db:f6:
6c:1b:f4:92:23:22:3e:30:d5:98:e4:ae:f9:82:2e:be:4a:df:
46:fd:d8:39:43:f1:20:24:25:4c:d2:8a:93:88:b2:dc:bc:e2:
8e:00:15:b2:25:29:f3:29:83:4c:f3:ad:f8:c7:80:e2:fe:d9:
36:cf:a4:b1:a6:7a:86:8d:4e:37:b2:6e:ba:ce:29:3d:a5:11:
3f:55:52:c0:2f:c9:21:8a:21:4e:c4:c3:5b:84:e8:ed:38:a0:
f7:1a:74:f1:2c:88:d5:86:0a:90:ce:e2:f2:a0:52:8a:92:21:
35:6f:86:65:22:5d:3c:bf:19:2d:4c:7d:fd:f7:e1:71:99:39:
8d:3e:74:ba:43:89:ba:a5:1a:4e:fd:c3:bd:e0:ce:32:46:ca:
8b:1e:a1:4c:56:54:b5:79:6a:40:00:e3:fc:61:80:12:fe:5b:
d3:f0:3e:36:62:2c:19:bf:af:04:a9:84:18:48:da:b7:b9:7e:
6d:42:55:5d:60:37:37:d8:18:b8:02:33:c7:19:17:96:0e:b7:
a6:3b:07:77:d0:ef:11:0b:85:5a:8c:ca:22:18:99:98:f5:01:
c8:3f:91:4c:4c:50:7b:33:2d:7b:5a:1c:1d:72:be:ff:c8:99:
c7:82:f2:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:37:16 2026 by rpki-client