Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/XNxe3vKUfc2mnoWqox5hdUzD4Yo.roa
File: XNxe3vKUfc2mnoWqox5hdUzD4Yo.roa (raw, json)
Hash identifier: HP4Xiz8TLDUV4ayqkQKwJotOB1HZtnv9lMiJdjw+vlA=
Subject key identifier: 5C:DC:5E:DE:F2:94:7D:CD:A6:9E:85:AA:A3:1E:61:75:4C:C3:E1:8A
Certificate issuer: /CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Certificate serial: 019D19FA56551617209CBDF692289D53E579
Authority key identifier: 5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/XNxe3vKUfc2mnoWqox5hdUzD4Yo.roa
Signing time: Mon 23 Mar 2026 09:15:29 +0000
ROA not before: Mon 23 Mar 2026 09:15:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 38854
IP address blocks: 87.232.88.0/24 maxlen: 24
87.232.89.0/24 maxlen: 24
87.232.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:19:fa:56:55:16:17:20:9c:bd:f6:92:28:9d:53:e5:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Validity
Not Before: Mar 23 09:15:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5cdc5edef2947dcda69e85aaa31e61754cc3e18a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:06:db:c5:b6:17:65:bc:3d:42:f3:4c:79:1c:
3f:4b:9a:93:0c:ed:b2:87:d1:65:3e:95:f9:ca:54:
a9:9b:24:a7:94:e3:af:3c:1d:29:d9:c5:6f:37:68:
d2:48:8a:ae:26:87:93:91:54:64:52:c6:a9:05:64:
49:fd:9a:a8:08:3b:cf:97:cb:2c:17:4b:dc:5d:8b:
b9:88:78:c3:08:75:90:ee:03:bb:a9:58:1e:d4:1b:
fe:d0:4c:4c:f7:c5:1e:79:99:ee:79:1c:e0:22:f7:
66:aa:97:1c:ca:a8:cc:6a:19:9b:80:42:31:3e:cb:
83:73:fa:b5:a7:b3:94:d7:87:cc:e0:35:43:49:b0:
48:fc:01:ca:ca:c8:fe:de:57:ff:cb:c9:76:ad:5a:
d9:e4:27:f2:87:a3:1f:67:e8:6a:65:47:2a:37:03:
9d:36:fa:b4:51:f9:6a:f6:fa:f1:91:3f:5a:d2:3a:
a4:2f:1d:82:dc:af:0c:7d:19:11:8d:d5:72:f5:f7:
6b:25:b9:df:db:15:ca:14:c4:ed:29:9f:28:5d:f1:
8c:94:16:f7:3b:6f:48:24:d7:9e:19:78:e1:d4:1f:
de:a1:1e:63:2d:21:ba:8d:75:ac:c2:05:27:e5:b6:
b8:7a:6b:e8:a1:35:b3:a7:32:6f:6a:bf:96:d8:42:
f3:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:DC:5E:DE:F2:94:7D:CD:A6:9E:85:AA:A3:1E:61:75:4C:C3:E1:8A
X509v3 Authority Key Identifier:
keyid:5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/XNxe3vKUfc2mnoWqox5hdUzD4Yo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.232.88.0-87.232.90.255
Signature Algorithm: sha256WithRSAEncryption
67:dd:8b:bf:ea:c3:72:9e:43:cd:04:14:71:53:ee:1c:64:c8:
02:21:f6:3a:59:b1:98:cd:5e:c5:3f:6c:af:b5:0b:77:75:1e:
4b:a0:a7:c3:c3:3c:ad:05:cf:47:57:00:66:c7:ea:20:98:af:
03:06:c7:31:cb:b3:65:dc:52:2d:6f:6b:2c:04:82:72:ea:3c:
c7:da:1b:79:a1:d5:61:3b:42:57:96:95:41:4d:31:e4:81:ef:
4e:53:7a:11:34:01:18:2b:42:01:95:f1:12:69:1c:2e:59:85:
fa:e4:fd:1a:5d:63:5e:9a:12:7e:90:a5:08:6f:1e:91:e2:56:
ab:b1:72:70:f1:07:59:09:35:8d:95:87:02:03:46:26:04:ff:
c6:f5:b0:1f:8e:91:08:ad:31:47:3d:52:fa:d6:ae:f9:b9:d0:
c5:a6:85:5b:b7:14:88:4e:19:6c:bd:86:30:eb:06:91:e5:71:
63:f0:4b:fd:25:b9:e9:04:88:02:89:c4:e2:c1:65:44:e9:5d:
22:72:4a:84:28:57:29:f7:9b:13:07:5a:09:fa:ee:f9:fc:6e:
29:27:5d:be:ed:ed:b2:5a:d8:eb:9a:be:42:89:4e:4b:29:94:
00:65:2a:77:30:cf:0f:f8:b9:ea:53:2f:15:17:ce:90:a9:5e:
47:36:f8:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:35:31 2026 by rpki-client