Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/P4OtQvDUkCMuJskgBHh-vNxJu1I.roa
File: P4OtQvDUkCMuJskgBHh-vNxJu1I.roa (raw, json)
Hash identifier: yqqu/7j4s+Y4/ylDF+aywZRspIGl1aQhkK6q+AAIbdQ=
Subject key identifier: 3F:83:AD:42:F0:D4:90:23:2E:26:C9:20:04:78:7E:BC:DC:49:BB:52
Certificate issuer: /CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Certificate serial: 019DE90D7F8F45CE4FC18576C8E4E89C8418
Authority key identifier: 5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/P4OtQvDUkCMuJskgBHh-vNxJu1I.roa
Signing time: Sat 02 May 2026 14:17:49 +0000
ROA not before: Sat 02 May 2026 14:17:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51559
IP address blocks: 87.232.93.0/24 maxlen: 24
89.126.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 02:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:e9:0d:7f:8f:45:ce:4f:c1:85:76:c8:e4:e8:9c:84:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Validity
Not Before: May 2 14:17:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3f83ad42f0d490232e26c92004787ebcdc49bb52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f9:a0:3f:ae:12:cf:dc:44:12:33:c2:87:ff:
12:48:25:74:dc:c1:f3:e7:0b:22:8e:43:90:c4:3d:
88:1f:ae:ec:c2:c6:6f:4b:ef:9d:88:e8:06:14:1a:
b3:2d:75:66:0a:37:8c:e3:11:4e:2b:ee:96:db:16:
ef:da:54:c2:a4:79:47:90:c7:a8:ae:ac:81:c6:55:
74:dd:ee:b3:dd:7a:95:61:2a:dc:19:45:0c:9f:e1:
5c:aa:6d:24:ab:30:e8:e7:1b:7f:69:2f:56:f0:23:
d3:64:5b:99:1b:02:fe:89:80:6f:bf:86:b5:6e:54:
84:f0:39:cf:92:ae:56:f2:de:98:02:3e:d8:29:06:
16:3f:38:68:ce:28:f6:c2:26:4f:92:83:1e:10:73:
c7:97:ab:75:25:88:a2:29:2d:a0:d8:52:5b:a3:26:
c3:31:86:6c:76:a7:a4:78:fb:f0:3d:85:ed:c9:ab:
c8:85:0b:1c:31:2a:c0:7b:ff:9b:51:32:a0:fb:67:
fe:86:7d:44:b2:71:e2:83:e8:1d:eb:9d:ff:17:27:
e2:13:34:1a:d3:4a:0d:37:f2:23:da:1c:c5:0e:d9:
52:e7:56:4f:fe:7f:4c:33:85:51:ed:af:da:0c:8d:
19:4a:fd:bd:7f:ef:60:5b:79:00:93:f1:a6:26:88:
8e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:83:AD:42:F0:D4:90:23:2E:26:C9:20:04:78:7E:BC:DC:49:BB:52
X509v3 Authority Key Identifier:
keyid:5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/P4OtQvDUkCMuJskgBHh-vNxJu1I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.232.93.0/24
89.126.228.0/24
Signature Algorithm: sha256WithRSAEncryption
57:a7:8f:56:96:8b:6d:08:98:53:35:c8:e4:c8:0a:dd:61:4b:
38:32:00:44:1e:5f:df:4d:44:41:47:a5:e8:9e:3e:78:46:bd:
8b:c1:62:e6:c9:dd:61:2c:ed:2b:36:39:b1:29:8c:6e:5e:b3:
41:a8:e7:96:59:12:d6:1f:4b:8f:12:bd:26:91:a6:81:04:2d:
c0:24:5b:b3:a1:84:e4:e9:67:72:93:dd:1a:19:00:99:67:57:
25:bb:bd:06:e6:37:af:8e:24:a8:be:7e:ab:9e:0a:54:66:71:
6d:43:a4:51:a8:ba:04:46:4e:de:40:3f:65:81:fc:1d:91:f1:
f8:1d:ce:6c:f6:3a:40:67:04:ee:e2:32:52:28:3b:75:da:66:
2f:93:30:50:37:1d:92:c1:68:67:2f:e6:af:e2:d8:92:5f:1f:
72:13:26:3e:9e:94:25:26:9f:5f:4a:25:3f:68:3f:92:59:0e:
fa:a8:d5:5c:ab:b5:02:c1:a8:d7:f5:1a:ca:c6:f2:2b:f3:b8:
1a:a6:60:12:5d:86:c7:cc:44:f0:aa:68:fc:5c:1b:e2:8d:7e:
bd:38:4b:c4:0f:97:23:9c:55:23:28:2a:e7:b8:3a:90:82:db:
f3:c2:e1:ef:f0:e4:34:c4:42:26:5a:66:9d:ba:7b:60:7e:0f:
09:5d:93:99
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ3pDX+PRc5PwYV2yOTonIQYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmZTUzYzBiZmMzYzhmYjU2YjgxMTkxMzE3MTQ0NDQzZTBl
MjlkMjUwHhcNMjYwNTAyMTQxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZjgzYWQ0MmYwZDQ5MDIzMmUyNmM5MjAwNDc4N2ViY2RjNDliYjUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/mgP64Sz9xEEjPCh/8SSCV03MHz
5wsijkOQxD2IH67swsZvS++diOgGFBqzLXVmCjeM4xFOK+6W2xbv2lTCpHlHkMeo
rqyBxlV03e6z3XqVYSrcGUUMn+Fcqm0kqzDo5xt/aS9W8CPTZFuZGwL+iYBvv4a1
blSE8DnPkq5W8t6YAj7YKQYWPzhozij2wiZPkoMeEHPHl6t1JYiiKS2g2FJboybD
MYZsdqekePvwPYXtyavIhQscMSrAe/+bUTKg+2f+hn1EsnHig+gd653/FyfiEzQa
00oNN/Ij2hzFDtlS51ZP/n9MM4VR7a/aDI0ZSv29f+9gW3kAk/GmJoiO1QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFD+DrULw1JAjLibJIAR4frzcSbtSMB8GA1UdIwQY
MBaAFF/lPAv8PI+1a4EZExcUREPg4p0lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWC1VOENfdzhqN1ZyZ1JrVEZ4UkVRLURpblNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9iYzYwODktM2Q5MC00NTI5LWJiNDct
NWNmNTZlZTQzNWIzLzEvUDRPdFF2RFVrQ011SnNrZ0JIaC12TnhKdTFJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC9iYzYwODktM2Q5MC00NTI5LWJiNDctNWNmNTZlZTQzNWIz
LzEvWC1VOENfdzhqN1ZyZ1JrVEZ4UkVRLURpblNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAV+hdAwQA
WX7kMA0GCSqGSIb3DQEBCwUAA4IBAQBXp49WlottCJhTNcjkyArdYUs4MgBEHl/f
TURBR6Xonj54Rr2LwWLmyd1hLO0rNjmxKYxuXrNBqOeWWRLWH0uPEr0mkaaBBC3A
JFuzoYTk6Wdyk90aGQCZZ1clu70G5jevjiSovn6rngpUZnFtQ6RRqLoERk7eQD9l
gfwdkfH4Hc5s9jpAZwTu4jJSKDt12mYvkzBQNx2SwWhnL+av4tiSXx9yEyY+npQl
Jp9fSiU/aD+SWQ76qNVcq7UCwajX9RrKxvIr87gapmASXYbHzETwqmj8XBvijX69
OEvED5cjnFUjKCrnuDqQgtvzwuHv8OQ0xEImWmaduntgfg8JXZOZ
-----END CERTIFICATE-----
Generated at Wed May 13 10:36:08 2026 by rpki-client