Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/J6o4H1HPlI6wds_ZND4sQVLV34g.roa
File: J6o4H1HPlI6wds_ZND4sQVLV34g.roa (raw, json)
Hash identifier: QzMikH8ejXDAf7zUZVEaAceKeAKNGlhkm+3m8Dwc6iY=
Subject key identifier: 27:AA:38:1F:51:CF:94:8E:B0:76:CF:D9:34:3E:2C:41:52:D5:DF:88
Certificate issuer: /CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Certificate serial: 019F8B3C5334039FE72BB97ACAAAA6EFB583
Authority key identifier: 5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/J6o4H1HPlI6wds_ZND4sQVLV34g.roa
Signing time: Wed 22 Jul 2026 19:10:14 +0000
ROA not before: Wed 22 Jul 2026 19:10:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 87.232.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8b:3c:53:34:03:9f:e7:2b:b9:7a:ca:aa:a6:ef:b5:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Validity
Not Before: Jul 22 19:10:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=27aa381f51cf948eb076cfd9343e2c4152d5df88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:32:85:c6:cc:7a:09:45:94:0f:30:e9:e6:c4:
b7:4b:2a:04:47:04:91:3d:b8:42:c7:c1:0d:8f:2f:
93:29:19:ca:e7:55:2b:97:34:a6:9f:a8:1c:25:9e:
a8:9e:69:29:d6:0b:de:b0:34:b8:34:31:b8:3c:9c:
42:1f:3c:ec:14:8c:f4:e0:64:50:0f:d9:9a:ef:27:
89:88:06:21:71:80:1f:3d:49:b1:a9:1b:1d:cc:97:
f8:19:72:c4:b9:24:b9:40:c7:5d:a3:e1:69:a2:56:
69:f5:25:a6:ff:a2:66:f9:84:15:21:2a:70:47:4f:
49:14:bd:e2:3d:42:ae:9b:13:4b:9e:a1:ff:8f:eb:
a4:ce:fe:fb:0d:5e:7d:2e:ef:64:cf:c2:4f:9e:1d:
c0:6d:83:77:30:aa:75:69:03:7e:ad:d2:c1:e9:29:
f1:5b:8d:c4:09:fb:5a:0f:d1:14:a6:1a:92:5f:d7:
75:12:77:03:d7:5d:75:8a:8b:f1:b6:02:8e:aa:c4:
a4:89:14:1b:86:0a:8c:34:c1:c4:cd:a6:e6:81:fd:
0a:99:a0:09:9f:d0:70:0c:42:5e:a8:fd:9e:2a:46:
48:fe:cc:b8:c4:b8:16:8f:a9:cd:5a:81:bd:c6:50:
47:8d:2b:6b:2c:55:be:e1:a1:64:7a:01:57:b4:b8:
8c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:AA:38:1F:51:CF:94:8E:B0:76:CF:D9:34:3E:2C:41:52:D5:DF:88
X509v3 Authority Key Identifier:
keyid:5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/J6o4H1HPlI6wds_ZND4sQVLV34g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.232.85.0/24
Signature Algorithm: sha256WithRSAEncryption
44:3c:7a:cf:a4:3b:ca:52:9c:e4:62:0d:5e:9c:4e:7c:ba:b1:
70:e7:3c:a8:e0:25:42:56:f0:cc:76:4c:33:0c:dd:98:5a:8d:
92:f3:9f:2e:4a:c7:3b:f6:8f:66:97:5b:d8:77:d8:a2:7b:e8:
b5:70:3b:c7:c6:e5:97:87:68:e8:d6:36:81:c1:30:9a:0a:4b:
ea:01:af:2b:f9:e9:6b:b1:76:4c:cb:d3:dd:96:e0:ce:0d:eb:
12:9e:40:9a:1a:2e:5d:cf:11:15:fe:03:67:43:f8:20:cd:9d:
76:34:35:af:11:69:f6:77:75:a1:59:19:20:1c:3e:21:01:ae:
c0:28:40:7c:54:cf:d5:7e:d1:ab:e0:4d:46:af:39:38:2a:ad:
3d:60:93:41:df:ff:f7:f5:27:48:b5:da:db:fb:f6:bc:58:34:
af:7e:22:b5:11:fe:51:f3:39:d0:12:99:f3:9a:f6:52:f7:d4:
9f:8e:10:61:9d:63:1a:1b:30:05:e4:a3:fc:d7:7f:90:28:de:
a6:25:36:24:74:fe:a8:79:dc:06:da:cb:65:d1:92:78:d5:df:
aa:cc:47:f8:9d:71:b3:09:69:04:06:cc:38:57:82:af:4e:57:
5c:5a:a1:6e:7d:eb:48:3b:fd:71:2b:4c:f6:45:f0:32:e7:5e:
eb:bb:26:e5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ+LPFM0A5/nK7l6yqqm77WDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmZTUzYzBiZmMzYzhmYjU2YjgxMTkxMzE3MTQ0NDQzZTBl
MjlkMjUwHhcNMjYwNzIyMTkxMDE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyN2FhMzgxZjUxY2Y5NDhlYjA3NmNmZDkzNDNlMmM0MTUyZDVkZjg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2TKFxsx6CUWUDzDp5sS3SyoERwSR
PbhCx8ENjy+TKRnK51UrlzSmn6gcJZ6onmkp1gvesDS4NDG4PJxCHzzsFIz04GRQ
D9ma7yeJiAYhcYAfPUmxqRsdzJf4GXLEuSS5QMddo+FpolZp9SWm/6Jm+YQVISpw
R09JFL3iPUKumxNLnqH/j+ukzv77DV59Lu9kz8JPnh3AbYN3MKp1aQN+rdLB6Snx
W43ECftaD9EUphqSX9d1EncD1111iovxtgKOqsSkiRQbhgqMNMHEzabmgf0KmaAJ
n9BwDEJeqP2eKkZI/sy4xLgWj6nNWoG9xlBHjStrLFW+4aFkegFXtLiMkQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCeqOB9Rz5SOsHbP2TQ+LEFS1d+IMB8GA1UdIwQY
MBaAFF/lPAv8PI+1a4EZExcUREPg4p0lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWC1VOENfdzhqN1ZyZ1JrVEZ4UkVRLURpblNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9iYzYwODktM2Q5MC00NTI5LWJiNDct
NWNmNTZlZTQzNWIzLzEvSjZvNEgxSFBsSTZ3ZHNfWk5ENHNRVkxWMzRnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC9iYzYwODktM2Q5MC00NTI5LWJiNDctNWNmNTZlZTQzNWIz
LzEvWC1VOENfdzhqN1ZyZ1JrVEZ4UkVRLURpblNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV+hVMA0G
CSqGSIb3DQEBCwUAA4IBAQBEPHrPpDvKUpzkYg1enE58urFw5zyo4CVCVvDMdkwz
DN2YWo2S858uSsc79o9ml1vYd9iie+i1cDvHxuWXh2jo1jaBwTCaCkvqAa8r+elr
sXZMy9PdluDODesSnkCaGi5dzxEV/gNnQ/ggzZ12NDWvEWn2d3WhWRkgHD4hAa7A
KEB8VM/VftGr4E1Grzk4Kq09YJNB3//39SdItdrb+/a8WDSvfiK1Ef5R8znQEpnz
mvZS99SfjhBhnWMaGzAF5KP813+QKN6mJTYkdP6oedwG2stl0ZJ41d+qzEf4nXGz
CWkEBsw4V4KvTldcWqFufetIO/1xK0z2RfAy517ruybl
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:35:19 2026 by rpki-client