Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/vOvytmDZyLi9xkEOHuiw2xxW7BI.roa
File: vOvytmDZyLi9xkEOHuiw2xxW7BI.roa (raw, json)
Hash identifier: WNixSdhBUz56TZr8O0qF2C7FrXbd3lBiZ3lLcYI30zU=
Subject key identifier: BC:EB:F2:B6:60:D9:C8:B8:BD:C6:41:0E:1E:E8:B0:DB:1C:56:EC:12
Certificate issuer: /CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Certificate serial: 019F0E4CB6F7E3E0C43B848538610D7B1BAA
Authority key identifier: 0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/vOvytmDZyLi9xkEOHuiw2xxW7BI.roa
Signing time: Sun 28 Jun 2026 12:55:36 +0000
ROA not before: Sun 28 Jun 2026 12:55:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49468
IP address blocks: 87.58.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:0e:4c:b6:f7:e3:e0:c4:3b:84:85:38:61:0d:7b:1b:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Validity
Not Before: Jun 28 12:55:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bcebf2b660d9c8b8bdc6410e1ee8b0db1c56ec12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:3f:da:3c:28:35:ad:4b:f7:e3:13:5e:3a:3a:
70:16:cb:7e:1b:75:f1:37:35:d1:e8:94:ce:f0:f8:
ad:c3:91:01:7d:36:f0:f1:ec:e2:56:7b:de:72:6e:
fe:8a:1f:e3:6f:a1:c3:cb:49:83:b2:2a:13:43:2b:
13:4f:9b:86:d8:5b:15:6d:bf:a5:52:9a:07:e1:91:
8f:23:8d:5a:6a:16:6a:15:a5:ff:9f:6b:a0:e0:20:
52:22:49:4a:26:34:f1:e8:90:b0:73:b2:26:d2:38:
11:e7:36:6c:ea:d9:44:08:8e:dd:90:97:9d:27:3d:
a7:93:d1:7a:ef:a3:91:29:a3:0a:ca:1d:3c:a8:94:
f0:a9:c2:bc:7d:14:51:d7:d8:55:5c:57:c0:c6:f7:
83:39:b2:2f:8a:50:2c:c9:cc:ec:e1:df:c4:39:3c:
fd:6f:f5:c9:e8:7d:51:51:4d:74:37:85:2a:06:91:
18:66:bd:45:b5:7a:f6:30:5e:f4:7b:09:74:cc:cd:
31:d7:0e:76:83:3c:89:b5:b5:0a:ca:95:2a:50:b5:
fc:f7:47:46:a4:94:93:cc:7b:5f:e7:17:25:f6:3a:
94:5a:1e:9b:99:57:e2:5c:b9:77:0f:8c:28:3d:9b:
3f:f4:5a:5f:df:34:f1:39:c5:d9:67:fd:d3:c3:6f:
a2:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:EB:F2:B6:60:D9:C8:B8:BD:C6:41:0E:1E:E8:B0:DB:1C:56:EC:12
X509v3 Authority Key Identifier:
keyid:0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/vOvytmDZyLi9xkEOHuiw2xxW7BI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.58.205.0/24
Signature Algorithm: sha256WithRSAEncryption
46:85:82:87:c7:9f:b3:50:e8:d3:bf:83:ea:74:01:d1:e5:50:
18:9b:86:76:73:70:71:bc:8f:b4:fd:66:3f:92:f2:52:48:9e:
3c:d5:7c:e4:59:ad:c7:3c:f0:1f:35:d3:24:eb:cc:e4:4c:be:
fa:7f:f9:d4:de:31:5b:ee:71:ed:17:66:82:e2:33:11:b1:44:
5a:7a:8e:e8:b5:ec:30:60:54:d0:85:4d:62:ed:9f:68:b7:4c:
63:c7:71:d2:d1:da:a6:6d:a3:7a:7b:f6:40:74:e7:ff:fb:2c:
ee:3e:77:d8:90:34:d7:c0:94:97:fe:db:8e:2a:42:09:c0:82:
59:90:1f:51:37:c4:f8:9c:c7:74:c8:e8:95:0f:5d:50:cb:b0:
d3:fc:b9:66:8d:03:84:c5:0d:7f:f9:eb:cb:d8:18:ee:a0:4d:
f0:0d:2d:c7:8c:a5:9f:61:33:94:f4:ab:74:6f:e2:83:1c:f7:
19:63:93:81:8f:53:d8:bf:b3:93:59:ac:5e:f5:e9:ee:9c:71:
4c:a7:78:bd:c8:81:14:06:44:2e:d0:aa:a9:8f:3b:b4:67:da:
fb:48:c6:18:07:7b:3d:65:59:4f:5d:d8:e1:c4:cc:87:d6:34:
ab:46:26:33:8a:06:0c:97:21:f3:1e:e2:4f:e7:20:d2:d6:9a:
e3:a4:63:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:05:09 2026 by rpki-client