Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/xYl79rBUbdELQ6AMKSEtQnCQIN8.roa
File: xYl79rBUbdELQ6AMKSEtQnCQIN8.roa (raw, json)
Hash identifier: vQsd/qfiOWnQHHvOpAt49QM2u+39QxYO3Pw3tI/6McE=
Subject key identifier: C5:89:7B:F6:B0:54:6D:D1:0B:43:A0:0C:29:21:2D:42:70:90:20:DF
Certificate issuer: /CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Certificate serial: 019CF6B47DC24A5DE86ED2D3D76B74D7C7EF
Authority key identifier: 5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/xYl79rBUbdELQ6AMKSEtQnCQIN8.roa
Signing time: Mon 16 Mar 2026 12:52:29 +0000
ROA not before: Mon 16 Mar 2026 12:52:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402203
IP address blocks: 87.232.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f6:b4:7d:c2:4a:5d:e8:6e:d2:d3:d7:6b:74:d7:c7:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Validity
Not Before: Mar 16 12:52:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c5897bf6b0546dd10b43a00c29212d42709020df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:31:af:25:69:c8:06:90:b7:2e:c1:21:db:33:
7b:dc:53:c9:d7:b3:01:7a:0e:6c:d6:7c:17:65:64:
eb:56:27:75:e0:af:dd:62:f7:87:52:d2:5f:38:9b:
ef:8c:e0:70:c0:70:92:c3:a4:d8:35:e2:1d:d7:98:
45:07:e1:65:88:98:2e:fd:9e:0d:5e:eb:3c:af:f6:
b6:c0:86:80:14:ba:9e:76:60:df:04:88:b1:37:ac:
a5:7f:e0:dd:41:a5:86:af:29:bf:f1:ab:43:01:dd:
ac:51:1b:54:31:76:23:c3:c4:1f:fc:b3:0e:0b:0c:
fd:64:0b:6f:ad:5a:04:d6:8f:31:2a:0a:4c:94:8b:
d2:9f:50:c4:6b:97:5e:0e:11:eb:4a:2e:a6:03:5a:
df:81:04:14:aa:d7:cc:9d:1f:a2:38:1c:fe:58:04:
79:32:1e:57:7f:2b:00:b4:18:22:7d:eb:c7:d2:15:
a5:98:2a:58:9d:59:eb:1a:a4:51:b5:da:36:17:a1:
15:37:65:ed:fb:26:5c:93:dc:38:2f:4b:3b:cb:83:
f8:5d:19:35:b3:7f:90:b4:b2:a9:37:a0:cc:33:55:
98:7a:cc:ff:3e:78:e5:67:1a:91:c0:5f:1e:2c:b1:
4c:94:fb:53:fd:99:f0:74:01:78:c6:5f:bd:01:0b:
8d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:89:7B:F6:B0:54:6D:D1:0B:43:A0:0C:29:21:2D:42:70:90:20:DF
X509v3 Authority Key Identifier:
keyid:5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/xYl79rBUbdELQ6AMKSEtQnCQIN8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.232.92.0/24
Signature Algorithm: sha256WithRSAEncryption
46:82:ef:9e:1c:d4:18:4e:66:5a:98:28:cd:00:9c:52:c0:ed:
60:ff:38:3c:ac:aa:05:2d:25:0d:d6:d6:31:ff:86:4f:ac:c3:
85:d3:60:de:c7:e3:67:c0:8a:ee:a5:36:ae:45:e4:30:c5:19:
83:e6:f9:e4:96:d7:5a:c8:92:d5:86:d9:96:df:33:77:9e:9f:
c7:c4:29:7a:c8:56:42:ed:1e:85:6f:05:70:e1:f5:16:6a:ea:
42:19:57:ba:fc:e5:cd:8c:a2:81:33:d5:de:39:ad:75:e5:91:
b4:3f:cc:31:0b:2a:0b:f3:70:ca:e8:4d:03:15:91:3b:7b:d9:
00:59:af:30:9d:39:59:e2:92:db:3e:97:c5:da:1e:3b:59:4e:
dc:8d:c0:f1:54:8a:73:28:d9:38:ad:a1:26:c9:ce:de:9a:23:
c3:95:5c:da:58:23:17:75:cb:ea:39:f1:3e:05:f8:0d:3c:f4:
80:3c:a8:0d:19:e3:ca:4c:86:f8:b6:b6:be:ae:d8:82:ad:01:
c5:ec:5c:d2:b6:5b:ac:9d:53:b4:e9:fe:25:8b:1c:b8:52:99:
f8:55:7a:11:4d:2f:de:ae:79:3b:82:dc:3f:41:77:bb:a0:27:
d2:3a:b9:46:f4:77:54:9a:30:ae:a9:89:9b:c4:27:f3:14:5c:
29:56:45:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:35:30 2026 by rpki-client