Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/_1Ym3DQxPSAkKurGfjBzXK9MOhQ.roa
File: _1Ym3DQxPSAkKurGfjBzXK9MOhQ.roa (raw, json)
Hash identifier: kfNgZpEzaJm8FQ0NeRkgxhzR9ojmXch13nfc7Vaxlfg=
Subject key identifier: FF:56:26:DC:34:31:3D:20:24:2A:EA:C6:7E:30:73:5C:AF:4C:3A:14
Certificate issuer: /CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Certificate serial: 019D1FEC14E7DFB2F5D4BA2CE7102CF3E673
Authority key identifier: 5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/_1Ym3DQxPSAkKurGfjBzXK9MOhQ.roa
Signing time: Tue 24 Mar 2026 12:57:38 +0000
ROA not before: Tue 24 Mar 2026 12:57:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402186
IP address blocks: 87.232.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1f:ec:14:e7:df:b2:f5:d4:ba:2c:e7:10:2c:f3:e6:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Validity
Not Before: Mar 24 12:57:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ff5626dc34313d20242aeac67e30735caf4c3a14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6e:9d:10:04:fb:8b:5e:2c:5e:d3:a4:44:cc:
d3:ce:10:61:66:af:4c:87:da:15:9a:ab:a9:b9:24:
4f:79:a9:db:5f:35:2f:7e:56:4b:94:4f:fa:d1:82:
02:a4:97:65:e9:aa:40:fe:fc:5a:26:e4:95:44:21:
93:d7:0e:a6:e1:79:a0:0a:d2:ec:48:7f:f3:eb:e8:
c5:db:be:04:0f:88:93:66:fd:98:e4:60:54:05:3d:
db:6e:d6:ef:ec:40:ab:c2:64:79:61:ff:8a:e3:f5:
a5:77:05:1e:7b:fe:aa:53:e1:e1:e1:7a:98:47:33:
a5:c0:12:e1:f9:b8:5a:2b:1f:f5:67:fd:ea:cb:41:
7e:0f:ef:36:51:cc:f6:28:e1:03:97:ca:18:d0:26:
8c:df:e0:97:a8:c4:61:99:24:06:9c:76:f8:57:0c:
b3:b9:d2:2c:42:03:4d:f2:74:e2:95:30:0b:11:94:
ab:35:b0:6e:68:e8:d2:3b:02:3f:92:a3:5f:04:cc:
c7:f9:c7:65:f4:88:f7:4c:cb:cd:83:33:b0:a3:b7:
13:01:1e:4c:39:c6:fb:91:a0:b4:4e:32:93:97:9f:
de:77:64:aa:39:41:0f:8f:2b:b6:24:b6:7f:f8:c0:
ce:3a:f0:18:a6:02:ab:88:1e:ab:f5:1c:6d:76:f2:
43:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:56:26:DC:34:31:3D:20:24:2A:EA:C6:7E:30:73:5C:AF:4C:3A:14
X509v3 Authority Key Identifier:
keyid:5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/_1Ym3DQxPSAkKurGfjBzXK9MOhQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.232.93.0/24
Signature Algorithm: sha256WithRSAEncryption
30:e1:89:c5:e5:f7:81:b6:be:c9:b1:8f:43:2a:e5:26:fe:ef:
b5:77:fc:b5:46:b2:79:5d:f1:89:e4:a4:3d:c4:9c:96:c9:c5:
da:e0:7e:03:57:8f:86:c9:19:8d:69:4f:84:7b:ad:e1:96:fe:
4b:d3:3c:88:ec:12:fc:0b:2a:df:41:44:ba:3a:83:6a:1d:ad:
04:14:b6:b9:17:39:38:32:5a:35:52:a2:1a:57:2c:fd:6a:42:
30:52:8f:bf:a9:52:5d:01:88:53:67:a6:df:40:0c:e3:58:bb:
da:9f:cd:fa:77:9b:c6:d0:db:b5:8b:aa:48:98:33:d7:b6:67:
1a:a9:d9:a3:31:ce:ff:ab:66:df:ef:36:61:53:83:c5:a0:c1:
a4:2e:7c:52:43:6a:06:1b:a4:8f:b4:10:9e:44:3a:aa:02:bb:
ff:3c:98:d0:68:c2:d8:9f:0b:14:55:9f:ec:eb:dd:8a:f2:10:
bc:30:dd:e4:70:2d:cd:51:93:b2:10:49:70:71:4d:71:a9:0a:
1a:57:f3:b9:4d:8a:5e:ca:2c:2b:09:68:c3:c5:5b:8b:8f:84:
58:e3:4c:4e:07:45:5f:56:69:48:26:3f:2f:40:56:b0:55:90:
93:7a:e4:75:00:a0:55:1a:c4:6d:d7:0a:b8:d6:94:49:df:f6:
a7:06:dd:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:35:15 2026 by rpki-client