Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/j0uoN5YBgi_2OLXJRM1IqthbMEQ.roa
File: j0uoN5YBgi_2OLXJRM1IqthbMEQ.roa (raw, json)
Hash identifier: QPkEQUvlMIbZJ7e0t7t/pBbggGpASfcrKRBQTf261vE=
Subject key identifier: 8F:4B:A8:37:96:01:82:2F:F6:38:B5:C9:44:CD:48:AA:D8:5B:30:44
Certificate issuer: /CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Certificate serial: 019D19F797266B8F3FB61389D6D10A45A7C9
Authority key identifier: 5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/j0uoN5YBgi_2OLXJRM1IqthbMEQ.roa
Signing time: Mon 23 Mar 2026 09:12:29 +0000
ROA not before: Mon 23 Mar 2026 09:12:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63199
IP address blocks: 87.232.87.0/24 maxlen: 24
89.126.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:19:f7:97:26:6b:8f:3f:b6:13:89:d6:d1:0a:45:a7:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Validity
Not Before: Mar 23 09:12:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8f4ba8379601822ff638b5c944cd48aad85b3044
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:54:c2:79:42:7d:ba:b7:f7:1e:d3:84:bb:fb:
fa:56:bd:ec:02:c3:32:46:44:0c:68:06:6b:4b:6c:
ac:af:26:db:e9:bc:90:0a:48:5f:62:d3:59:d1:c1:
26:7e:eb:e0:7b:d2:f7:b5:0b:d9:22:2f:a9:53:61:
7e:3b:5c:3a:58:d5:97:fb:60:87:d8:36:4c:87:11:
a5:d2:dd:29:23:b9:a6:a1:8e:11:ef:0f:d0:db:17:
15:5f:aa:7f:87:8d:98:e3:88:8d:a9:13:60:9d:4c:
ff:56:d4:19:71:b5:2f:71:70:34:02:c2:be:ec:c3:
98:5c:6d:ed:e0:b1:a8:da:c9:b6:0c:c8:5d:53:00:
72:6b:c0:2a:4f:56:f9:8c:c7:a5:c1:ae:ec:57:b2:
22:c1:44:05:2a:92:f0:8e:c6:13:4c:57:eb:a6:b1:
7a:c5:9b:5b:c1:0e:82:06:60:8d:10:65:2e:ff:68:
f1:81:32:ea:ff:aa:00:cf:c9:3c:23:e0:cd:d2:2a:
f7:95:36:89:4b:9b:15:aa:64:35:67:e3:90:4c:9e:
0a:98:63:de:bc:eb:59:db:0a:6f:c4:0c:62:e2:35:
1e:0f:fc:13:22:f1:fd:e9:cd:32:b4:fb:4c:81:ee:
8e:7f:46:b0:d3:cd:c4:6f:27:5a:8c:06:6a:df:ce:
8f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:4B:A8:37:96:01:82:2F:F6:38:B5:C9:44:CD:48:AA:D8:5B:30:44
X509v3 Authority Key Identifier:
keyid:5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/j0uoN5YBgi_2OLXJRM1IqthbMEQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.232.87.0/24
89.126.226.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:80:76:c7:17:fb:f0:65:b7:cc:5f:b2:73:05:4c:af:e9:d9:
00:33:2b:c8:f9:ec:bb:65:a9:d0:d2:b7:e4:c4:5d:c5:38:b2:
2b:ab:b7:0b:74:93:50:92:4a:20:05:bc:9f:db:ca:d9:cb:47:
1c:c9:69:9f:ba:b8:0b:a4:16:a4:a8:2e:d7:71:9a:aa:f3:5d:
cb:59:84:04:81:c3:0b:6c:ab:4f:9d:b3:34:b0:ed:38:ab:a4:
4f:25:be:d8:6e:09:31:a1:b8:bd:72:3b:45:27:71:14:ed:a6:
27:e1:26:72:2b:51:ba:9d:cc:fc:25:ad:19:41:d8:89:83:4e:
c3:86:16:68:ca:2f:36:f4:29:0d:23:3f:6f:ab:ed:f4:06:d9:
24:30:53:e1:c4:c8:df:38:93:52:2d:f4:cf:9d:57:a1:a5:d0:
37:10:22:81:7c:d6:29:86:03:3b:0c:9c:b0:a1:fb:a5:c1:20:
9e:f5:9f:f7:1a:04:00:49:f0:71:5a:5b:c9:d3:b5:f3:09:98:
62:52:5c:2b:4c:a6:44:e3:31:c3:a5:72:12:9d:ce:7d:a7:30:
70:f7:3b:4c:6c:8e:93:d6:79:b1:cb:3a:9e:56:a8:eb:df:a3:
b6:21:57:8a:c7:34:37:10:39:41:8c:29:20:d3:69:5a:eb:9c:
50:b6:a2:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:35:16 2026 by rpki-client