Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/niBnbMVkqFMwm26EVgCw4EKo_bU.roa
File: niBnbMVkqFMwm26EVgCw4EKo_bU.roa (raw, json)
Hash identifier: JT24uuA3eMkhOdW2lEUEMqsdJUmG+tYUXEw08dTPMoY=
Subject key identifier: 9E:20:67:6C:C5:64:A8:53:30:9B:6E:84:56:00:B0:E0:42:A8:FD:B5
Certificate issuer: /CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Certificate serial: 019F8E75370533D2051DE362D596DFD438B1
Authority key identifier: 5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/niBnbMVkqFMwm26EVgCw4EKo_bU.roa
Signing time: Thu 23 Jul 2026 10:11:14 +0000
ROA not before: Thu 23 Jul 2026 10:11:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219522
IP address blocks: 87.232.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 10:11:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:75:37:05:33:d2:05:1d:e3:62:d5:96:df:d4:38:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Validity
Not Before: Jul 23 10:11:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9e20676cc564a853309b6e845600b0e042a8fdb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0b:24:be:46:4e:0e:dc:35:da:7a:36:30:88:
43:f0:20:21:06:7c:3d:76:a2:c9:9e:f1:f6:ba:2c:
6e:e2:a4:7a:61:7c:63:c8:f2:aa:1c:3f:0c:af:e4:
b9:67:ca:55:62:19:da:21:cd:6c:6b:24:bb:8a:a3:
18:25:19:f4:58:19:26:d3:76:8b:23:10:f3:36:ab:
9f:b1:7c:d6:c6:2d:46:0e:50:1a:34:a2:78:06:40:
7c:74:db:f7:9f:fe:6d:46:24:11:7d:d6:12:5e:ec:
93:fd:ec:c9:fc:00:3a:19:5c:48:3a:29:d9:d9:1d:
2d:3b:60:eb:87:3f:52:f5:34:a8:37:39:e1:76:54:
35:3a:d4:fb:43:99:22:0b:73:14:fc:32:2b:7d:9a:
cd:fb:23:e0:c1:f0:f8:fc:61:7a:87:e8:64:06:aa:
97:23:40:dc:79:8c:14:22:44:96:92:df:eb:6d:a2:
ec:88:bb:5a:45:a3:31:a8:d0:7b:e6:45:a9:c8:00:
99:c3:c8:ec:eb:bd:42:85:b4:f1:eb:fd:1f:9e:90:
dc:ea:68:01:4b:9f:90:0e:fa:80:77:38:f2:5a:0d:
9d:ad:61:46:a9:ca:61:21:54:29:a0:b4:17:75:b1:
98:07:56:6e:b0:d2:89:6b:19:da:20:56:0a:51:a8:
cd:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:20:67:6C:C5:64:A8:53:30:9B:6E:84:56:00:B0:E0:42:A8:FD:B5
X509v3 Authority Key Identifier:
keyid:5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/niBnbMVkqFMwm26EVgCw4EKo_bU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.232.91.0/24
Signature Algorithm: sha256WithRSAEncryption
03:d0:72:e9:e4:60:76:3e:b2:2e:04:16:61:8a:5b:f4:30:7c:
a5:2f:d8:97:6c:20:31:61:24:42:5d:38:85:dd:b2:81:c1:41:
a0:2a:80:b7:96:c6:75:d1:8e:91:93:e1:52:28:da:0a:98:e4:
4a:31:93:95:cd:db:94:db:43:fc:07:1a:ad:71:38:4c:fb:a3:
99:de:47:f4:28:c3:fe:eb:a2:67:5d:05:8c:3d:f2:1e:b5:82:
07:8a:80:5d:46:12:c6:94:15:da:7d:24:1f:13:e4:8d:b2:ec:
fa:4a:44:8a:1b:85:d1:9a:24:dd:1e:c3:39:2a:65:af:39:57:
ac:98:b0:47:75:d0:a4:89:71:dd:89:63:86:3a:9a:91:0a:aa:
0f:67:1e:19:b7:a8:64:83:d4:9d:12:8f:96:cc:ae:13:79:be:
18:c3:d7:7f:ca:cd:f7:ac:60:6e:ac:ef:15:03:a0:72:1c:6c:
41:a5:99:24:d9:78:f4:24:dd:e2:14:24:31:96:47:9d:23:05:
6e:6a:89:3d:4d:a7:f3:13:8f:00:5f:f3:a0:64:9a:25:fe:b4:
9f:eb:ee:ca:ac:9f:32:38:1c:26:5c:84:1d:f7:f9:60:3c:47:
cf:0d:4e:8e:c8:ea:9d:70:3e:a4:01:1a:a3:8f:cd:48:d1:84:
5c:d2:a3:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:00:34 2026 by rpki-client