Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/b1Eo-fOdQzyuofjKzvkrE9pKZYU.roa
File: b1Eo-fOdQzyuofjKzvkrE9pKZYU.roa (raw, json)
Hash identifier: pmbxRSN9Mm0tkGtDLOm0eEFk/daE966pFfGO8V8GA58=
Subject key identifier: 6F:51:28:F9:F3:9D:43:3C:AE:A1:F8:CA:CE:F9:2B:13:DA:4A:65:85
Certificate issuer: /CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Certificate serial: 019DCF9A4529AC487D5776BAF69393C77D47
Authority key identifier: 5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/b1Eo-fOdQzyuofjKzvkrE9pKZYU.roa
Signing time: Mon 27 Apr 2026 15:41:27 +0000
ROA not before: Mon 27 Apr 2026 15:41:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215287
IP address blocks: 87.232.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:9a:45:29:ac:48:7d:57:76:ba:f6:93:93:c7:7d:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Validity
Not Before: Apr 27 15:41:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6f5128f9f39d433caea1f8cacef92b13da4a6585
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:72:d4:ae:12:49:d2:c3:cb:16:6b:5f:c7:09:
25:c0:68:44:ff:e5:82:00:bd:52:01:29:28:44:12:
9c:90:1a:8a:e2:7f:6c:4b:84:79:0f:1d:3f:b7:f0:
25:dd:65:a6:c9:f4:59:a5:f8:c9:0a:16:7d:5d:cb:
a1:25:08:4f:3e:a6:78:79:52:a4:ae:f8:84:55:5b:
4e:5f:dc:8c:37:81:71:00:1b:cd:a7:92:a2:42:bc:
59:16:8d:7e:a8:9a:ac:72:2b:6b:4a:c4:c1:18:34:
a2:78:23:18:a3:8a:2d:d4:19:d4:40:dc:99:00:d1:
c4:3e:c3:7a:1a:a7:fc:68:86:30:e8:31:39:66:cd:
2d:01:da:46:d6:92:5a:28:a3:5b:50:ac:85:c3:81:
78:c4:4f:3a:55:11:02:03:b6:40:26:97:b6:b9:b3:
6d:d7:b5:eb:a1:13:26:37:85:23:7c:7c:c0:ac:1f:
d5:2b:64:15:83:d4:6c:42:5d:63:af:7a:e4:b4:e7:
91:a5:b8:82:b9:05:67:68:d8:d2:43:a3:04:11:22:
78:2b:d4:a4:8c:30:7b:3c:2e:fe:78:cd:15:75:8f:
28:92:7f:ea:cd:ec:95:04:f3:c7:e4:32:92:84:97:
37:b8:a5:c4:1c:32:d6:b1:f8:ac:80:4a:e5:6d:c6:
42:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:51:28:F9:F3:9D:43:3C:AE:A1:F8:CA:CE:F9:2B:13:DA:4A:65:85
X509v3 Authority Key Identifier:
keyid:5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/b1Eo-fOdQzyuofjKzvkrE9pKZYU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.232.86.0/24
Signature Algorithm: sha256WithRSAEncryption
42:bd:b2:1f:99:47:f2:5b:e2:e8:6c:5d:5b:f1:65:06:91:7d:
df:d7:33:7b:ac:13:3a:86:b4:aa:41:0a:28:c5:b5:a1:c2:d4:
47:71:70:61:99:2d:b9:dc:d1:6b:ac:03:99:b7:8f:f3:b3:50:
cf:22:47:34:bd:bd:c4:55:d4:fc:8a:36:48:88:8d:84:84:99:
8e:3d:92:54:9b:2c:3c:f8:b3:cb:92:9e:d2:6d:11:b9:2a:ed:
c6:de:58:4a:a8:59:fc:2b:59:ad:e1:74:9b:d7:9d:fa:6f:1f:
14:a2:7e:01:3d:02:5b:04:9a:30:ff:d6:4f:e1:93:24:6b:4c:
14:da:45:ea:b1:aa:e9:d3:bf:e2:a9:0e:dd:4b:8f:0d:3f:47:
3e:18:b2:26:65:38:0d:b5:47:90:21:c3:6b:cd:84:7a:6e:5b:
eb:b1:b8:53:8a:a7:28:22:32:64:e5:93:52:1c:b6:6a:d4:ca:
81:ad:4d:a3:54:6d:3f:3a:90:23:ad:b0:32:d4:5d:75:34:21:
a5:3b:f2:ca:66:69:ce:c1:65:c9:c2:09:76:76:a4:f4:88:09:
51:e3:06:c2:32:54:0f:44:b8:2d:28:1f:f5:2c:af:d5:cd:8e:
5f:d6:38:51:a1:8f:23:20:be:a8:12:be:67:c4:90:2b:aa:8d:
58:ee:fe:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:41:32 2026 by rpki-client