Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/Ax1pYyiI1Kh31sWnTvVAdZaJNoQ.roa
File: Ax1pYyiI1Kh31sWnTvVAdZaJNoQ.roa (raw, json)
Hash identifier: hOu3F65GSVqc5I4/dXssCAG1aFXkcQFWbCb+ZRzPjfQ=
Subject key identifier: 03:1D:69:63:28:88:D4:A8:77:D6:C5:A7:4E:F5:40:75:96:89:36:84
Certificate issuer: /CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Certificate serial: 01A1B103A489B4505E8C7B154F8E5B984B2D
Authority key identifier: 0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/Ax1pYyiI1Kh31sWnTvVAdZaJNoQ.roa
Signing time: Fri 06 Nov 2026 13:19:28 +0000
ROA not before: Fri 06 Nov 2026 13:19:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218721
IP address blocks: 87.58.204.0/24 maxlen: 24
87.58.205.0/24 maxlen: 24
87.58.213.0/24 maxlen: 24
87.58.220.0/24 maxlen: 24
150.251.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:b1:03:a4:89:b4:50:5e:8c:7b:15:4f:8e:5b:98:4b:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Validity
Not Before: Nov 6 13:19:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=031d69632888d4a877d6c5a74ef5407596893684
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:37:06:0c:b8:02:ff:a9:23:94:85:29:af:62:
09:09:f1:42:f9:4d:04:77:27:5b:b0:92:6e:17:c2:
df:da:9b:2a:25:49:3d:61:c2:fa:e1:3a:6f:b2:79:
df:28:46:c3:14:5c:f1:3c:68:e5:c9:27:12:db:6f:
6e:a2:64:ce:ad:86:71:c9:9b:a1:1a:ef:14:66:8c:
1a:57:2b:bf:29:da:97:87:05:80:a7:39:ba:c3:c6:
de:c3:7b:1f:38:e5:e5:cf:8a:60:b4:96:0b:0c:50:
f0:9f:93:bb:cb:41:c4:f5:bd:c0:c5:d2:39:54:da:
04:fb:d2:27:01:ae:f2:65:da:7e:d3:a4:1e:0d:a7:
e1:5e:b3:f8:10:f3:31:6e:78:e0:db:09:e0:0b:d4:
d9:3d:86:93:bb:dc:8a:f2:b3:a3:61:e7:80:4b:90:
b2:29:8f:56:04:cb:c0:6c:70:88:cc:41:42:5c:9d:
c9:cf:fd:0d:05:1d:b7:6c:4c:30:d4:a7:49:1a:cc:
0a:0a:38:40:1c:e5:3b:28:2c:27:98:80:22:28:d6:
45:4d:66:2d:0f:00:b0:66:ae:9c:58:ce:d2:dc:57:
1f:ac:2b:9d:9e:b8:ea:b8:4f:a6:19:a7:30:8a:a6:
d0:a1:66:81:38:00:b7:31:2a:4d:44:4b:6c:4e:bd:
aa:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:1D:69:63:28:88:D4:A8:77:D6:C5:A7:4E:F5:40:75:96:89:36:84
X509v3 Authority Key Identifier:
keyid:0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/Ax1pYyiI1Kh31sWnTvVAdZaJNoQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.58.204.0/23
87.58.213.0/24
87.58.220.0/24
150.251.152.0/24
Signature Algorithm: sha256WithRSAEncryption
46:09:09:f5:d9:a1:88:84:0a:74:d4:b6:e3:a8:56:7f:7a:9e:
91:65:56:47:c0:6e:62:6e:41:57:94:d8:fc:36:2d:a5:cc:2a:
b2:e2:20:30:cc:40:09:08:68:f3:b7:8f:d3:cb:ca:9d:41:9f:
a8:dc:21:87:1c:d4:1a:8f:86:a2:13:d8:be:5b:5c:51:d0:57:
16:11:f6:02:aa:53:72:49:bf:33:95:43:f7:97:2c:80:93:2c:
5b:62:51:1f:c5:ff:f2:b3:49:aa:d3:58:bb:4d:47:11:7e:e2:
84:04:eb:24:92:59:71:0c:cf:1d:4a:58:81:30:a9:75:6a:56:
bd:61:80:25:54:ad:e9:33:61:9a:2b:ec:37:74:4f:7c:1f:18:
cd:df:d6:e4:72:3d:9c:70:cf:b7:fe:f5:6e:95:40:cc:86:53:
65:2d:bd:f8:2c:42:db:26:43:ba:58:f0:59:e2:8d:44:9c:2d:
b7:a9:f1:39:03:11:e6:19:34:8b:bb:73:59:d9:71:15:58:9e:
df:da:63:13:73:87:bb:71:c7:6f:7a:1c:a2:28:16:67:f9:7b:
c5:03:83:33:c5:e9:9b:1f:c3:96:8f:6c:2f:23:33:f8:84:dc:
91:93:6a:d2:ee:e5:26:fa:15:88:ec:75:ce:1c:37:c8:2d:8d:
6c:14:75:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:01:23 2026 by rpki-client