Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/_k8DEzrDGMjX2okhJZaU2LT2oz8.roa
File: _k8DEzrDGMjX2okhJZaU2LT2oz8.roa (raw, json)
Hash identifier: iuLXJjc5QDiQTjCx5usBxr4B2lgrFRO7LDfUsbNnhrk=
Subject key identifier: FE:4F:03:13:3A:C3:18:C8:D7:DA:89:21:25:96:94:D8:B4:F6:A3:3F
Certificate issuer: /CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Certificate serial: 019D063378D23FBC4C2AAF63620FD2577967
Authority key identifier: 5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/_k8DEzrDGMjX2okhJZaU2LT2oz8.roa
Signing time: Thu 19 Mar 2026 13:05:29 +0000
ROA not before: Thu 19 Mar 2026 13:05:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 400866
IP address blocks: 87.232.88.0/24 maxlen: 24
87.232.89.0/24 maxlen: 24
87.232.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:06:33:78:d2:3f:bc:4c:2a:af:63:62:0f:d2:57:79:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Validity
Not Before: Mar 19 13:05:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fe4f03133ac318c8d7da8921259694d8b4f6a33f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2d:f9:b7:e1:fa:f3:e2:e9:be:3f:d1:2c:c1:
52:8a:41:e8:4b:2b:ba:3e:f1:3b:70:ff:36:b7:ef:
08:d8:61:92:fa:d1:f5:11:db:b7:96:10:8c:b7:fb:
c6:43:9f:2e:04:67:7d:c3:83:c8:70:d8:c8:79:43:
fc:da:82:83:f3:13:b8:84:d8:9e:1d:65:8a:d7:71:
aa:a9:35:90:40:ff:c3:87:0e:cb:9a:e0:fc:e1:80:
bf:35:26:52:95:0c:73:9f:1f:bc:e2:a5:20:8c:32:
1d:60:6f:0d:59:cd:c9:bd:83:ac:9a:f8:50:fc:70:
e6:8e:83:73:e8:a2:55:0d:60:77:4e:82:fc:d3:fc:
60:fd:c4:41:68:66:b4:df:01:9f:f3:80:70:64:ed:
97:70:56:1c:d9:f0:21:a2:99:f3:d1:85:13:3b:00:
da:bb:25:77:6e:6f:cc:42:ce:31:1d:41:b7:46:53:
97:b6:c1:1d:64:b0:c0:6c:da:55:b3:31:59:a3:d2:
19:4f:01:2d:07:0b:d0:ac:e3:d2:b5:d6:8a:39:73:
7b:b6:c7:98:79:4a:8b:7e:ba:17:56:5f:cd:93:74:
52:97:e5:d0:05:a9:5b:91:f5:47:1b:04:da:8d:23:
e7:cb:ff:5e:ca:76:f6:3e:4e:5d:17:2b:6e:8c:00:
15:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:4F:03:13:3A:C3:18:C8:D7:DA:89:21:25:96:94:D8:B4:F6:A3:3F
X509v3 Authority Key Identifier:
keyid:5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/_k8DEzrDGMjX2okhJZaU2LT2oz8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.232.88.0-87.232.90.255
Signature Algorithm: sha256WithRSAEncryption
4c:76:c5:08:75:a8:30:1d:30:87:05:c7:58:c6:4d:8f:d8:8f:
f8:d4:cb:4b:a4:ef:ce:92:29:04:11:45:fd:20:aa:af:77:b7:
d1:51:c1:bd:48:e9:90:da:b7:58:ac:56:57:27:1d:1a:1a:ae:
d2:09:92:66:3c:d1:d8:25:ee:f0:c0:6e:69:89:41:e6:60:be:
f6:b0:49:95:1e:39:d8:3a:ae:e9:5e:a3:6f:dc:e6:80:a8:d1:
6b:26:65:90:3c:f7:21:d8:12:74:4b:ed:b4:85:1d:db:15:d3:
9f:8a:eb:14:87:53:60:ac:08:ea:f3:d3:8b:16:94:d5:a3:02:
87:9f:33:01:01:58:f6:1e:b9:58:f6:d7:ea:73:6b:ad:19:b7:
53:89:61:72:f4:07:2a:59:31:5d:58:c4:22:3f:86:ce:26:7b:
c1:ff:12:53:78:58:d6:54:a9:f7:f6:3c:6e:ae:a0:45:47:a2:
88:9a:e5:53:b2:33:de:b0:aa:99:76:82:8f:25:2e:11:d8:e4:
59:6d:b4:11:0c:35:3c:f3:58:0c:a0:59:80:ab:a8:65:20:5f:
d4:d1:89:ad:06:e4:75:09:3b:9d:ca:2a:04:72:24:27:04:af:
49:a0:69:17:5d:05:10:ed:af:86:99:e5:55:27:f5:fe:ee:af:
b5:b2:4a:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:35:30 2026 by rpki-client