Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/VBYrU02F75jatNI8fsnGnTvXtu0.roa
File: VBYrU02F75jatNI8fsnGnTvXtu0.roa (raw, json)
Hash identifier: HepzJ2YXRa37zqLLaa2gYYwQvS/PYFWeQjcEmO38yDs=
Subject key identifier: 54:16:2B:53:4D:85:EF:98:DA:B4:D2:3C:7E:C9:C6:9D:3B:D7:B6:ED
Certificate issuer: /CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Certificate serial: 019EF840141463F6D31ADAE161127A9C6719
Authority key identifier: 0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/VBYrU02F75jatNI8fsnGnTvXtu0.roa
Signing time: Wed 24 Jun 2026 06:10:09 +0000
ROA not before: Wed 24 Jun 2026 06:10:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213607
IP address blocks: 87.58.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 17:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f8:40:14:14:63:f6:d3:1a:da:e1:61:12:7a:9c:67:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Validity
Not Before: Jun 24 06:10:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=54162b534d85ef98dab4d23c7ec9c69d3bd7b6ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:5a:32:84:99:25:58:0e:8c:8d:99:47:7b:f8:
d8:f4:93:9a:3e:1a:07:ec:86:49:f6:fb:d8:cd:62:
4b:3c:27:7e:e0:33:1c:dc:92:82:be:f7:cc:74:04:
98:20:e2:23:54:b6:cd:54:5c:f8:0e:52:ad:44:b2:
71:b2:ce:fe:61:59:d3:d6:1e:c5:3b:1b:81:1d:09:
a4:b0:f5:97:14:00:8e:12:9c:12:74:4b:d7:23:b6:
32:7b:9a:8e:34:e2:22:0f:51:3e:95:07:7d:c7:8c:
cd:91:ea:b5:7d:b2:a7:52:1a:df:bf:f6:c1:59:17:
88:2e:91:ef:de:ab:9a:4d:76:2e:35:a0:e6:ed:4f:
ef:d7:51:b0:e9:44:dd:e5:40:b5:fc:5e:0d:a5:55:
6f:43:b2:cc:8a:58:57:d7:9b:00:f2:7e:bf:3d:62:
ee:1f:b6:54:31:5f:79:24:ab:3f:90:f5:d5:78:dc:
50:53:42:69:54:fb:e3:f4:5d:a4:21:c0:84:7d:f3:
4b:36:d3:84:0c:c8:75:2f:ea:01:77:91:b8:db:f3:
2f:6f:5c:71:da:0a:94:59:e4:6f:39:5d:a5:d4:cc:
30:ce:a2:c0:34:54:5e:af:11:33:a5:d5:df:bc:2e:
89:c8:e2:c8:77:67:d7:2f:16:43:96:50:41:f9:61:
77:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:16:2B:53:4D:85:EF:98:DA:B4:D2:3C:7E:C9:C6:9D:3B:D7:B6:ED
X509v3 Authority Key Identifier:
keyid:0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/VBYrU02F75jatNI8fsnGnTvXtu0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.58.215.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:29:bd:4a:2f:46:fd:eb:ec:f6:0f:60:7d:00:87:42:08:c2:
e2:bc:a7:ab:41:bc:2a:58:72:9b:5d:44:6c:15:bd:fe:6d:17:
83:2f:5c:20:1d:f0:9f:47:09:5e:69:f4:9e:8b:32:86:5a:82:
5a:e1:c5:0c:92:39:67:e5:a5:49:9f:06:c8:7e:ca:4d:49:88:
c9:ab:6a:09:d9:b3:32:c1:7c:da:1a:c9:12:ae:84:31:1a:76:
10:6a:d4:24:0b:b2:02:8c:1b:ca:ce:cc:71:30:57:99:ca:22:
3a:33:2a:df:aa:33:48:f8:91:55:27:e8:42:02:a9:0d:75:98:
d2:5b:df:a8:02:f5:20:e3:36:af:9c:f8:aa:79:47:19:7f:38:
80:67:a4:10:a6:98:9f:4e:82:d9:7d:10:7b:9f:8c:4d:cc:93:
2c:32:b0:9d:53:7f:01:cc:40:a3:17:48:59:0c:67:58:ad:b8:
70:42:1d:92:74:d0:44:7b:6f:59:b1:ed:0a:27:d5:0d:aa:22:
a2:0a:8f:2d:80:ba:83:1d:21:7b:48:2b:9c:8b:19:8b:c0:58:
59:4c:e4:8c:0a:92:06:60:4d:50:72:28:f5:da:07:ab:59:24:
e3:bf:c7:d3:27:e2:61:61:5a:c2:41:5a:b2:7d:fe:9e:35:1d:
4a:ff:68:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:10:10 2026 by rpki-client