Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/y1YHL9stLW0EBSHIGE4wu7b_QNg.roa
File: y1YHL9stLW0EBSHIGE4wu7b_QNg.roa (raw, json)
Hash identifier: WD/77vOfUuYMZHL5B9Asts3xM0tFEHZv2a7HErfU5rg=
Subject key identifier: CB:56:07:2F:DB:2D:2D:6D:04:05:21:C8:18:4E:30:BB:B6:FF:40:D8
Certificate issuer: /CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Certificate serial: 01A006E94C7F2C5AB77A01AB25DF32614D7A
Authority key identifier: 5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/y1YHL9stLW0EBSHIGE4wu7b_QNg.roa
Signing time: Sat 15 Aug 2026 19:32:27 +0000
ROA not before: Sat 15 Aug 2026 19:32:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63023
IP address blocks: 87.232.83.0/24 maxlen: 24
89.126.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:06:e9:4c:7f:2c:5a:b7:7a:01:ab:25:df:32:61:4d:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Validity
Not Before: Aug 15 19:32:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cb56072fdb2d2d6d040521c8184e30bbb6ff40d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d2:00:33:67:19:95:4d:69:63:ec:5b:41:e7:
ea:3a:ce:62:93:ed:c3:13:3d:b6:7b:e2:8c:b2:ee:
26:f4:da:26:9c:65:62:b9:c5:33:65:cb:b6:3e:4e:
43:07:49:e4:46:d8:90:4e:e2:0b:aa:a2:c4:bd:45:
93:19:6c:4c:ba:2e:06:04:93:d1:4d:2a:53:56:ce:
03:9c:c0:9e:cf:8a:4f:a7:ff:0a:09:1b:03:4f:0d:
ab:5b:d5:b6:49:dd:71:cb:cb:ac:b7:32:af:03:7e:
2a:44:4c:de:50:8b:14:12:f9:e2:aa:7c:9f:a7:fe:
20:1f:b8:3e:8e:ca:f8:59:71:52:e4:10:f7:44:5d:
2d:b2:f5:61:67:2b:d8:b2:fc:56:97:43:c9:12:42:
f4:54:b7:cf:f5:a1:31:70:63:e0:6f:f2:44:e5:36:
0f:8a:95:6a:d0:d2:04:95:6f:cd:ef:75:97:13:05:
79:26:01:e9:36:c7:8d:d2:92:39:c6:5e:ac:d3:38:
92:7a:1b:3b:f4:44:ce:9a:4f:a9:63:40:26:7a:e0:
d3:73:95:86:7c:18:e5:58:b2:9d:f2:38:38:61:01:
48:6e:b4:56:56:5b:f3:d8:75:db:95:c2:37:41:34:
76:90:6b:52:f3:c0:d8:1d:e0:0e:ed:da:71:f5:2b:
07:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:56:07:2F:DB:2D:2D:6D:04:05:21:C8:18:4E:30:BB:B6:FF:40:D8
X509v3 Authority Key Identifier:
keyid:5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/y1YHL9stLW0EBSHIGE4wu7b_QNg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.232.83.0/24
89.126.230.0/24
Signature Algorithm: sha256WithRSAEncryption
29:82:f2:b8:6b:51:5b:03:a5:f0:41:08:00:62:6f:62:05:c6:
f3:da:41:5b:ec:ec:a6:6f:8f:e1:e3:2b:23:5e:ea:4f:1b:3f:
20:97:e9:b7:28:35:b8:df:47:63:c4:39:ef:ef:21:e1:c7:24:
9b:9e:2e:1d:2c:a6:f0:bc:b5:5d:d8:5c:46:99:1e:b9:a1:17:
ef:d4:87:b9:60:74:14:b3:0f:94:c7:43:59:c3:be:10:ba:5f:
12:51:3f:3f:33:5e:0b:18:83:ff:2f:3f:67:fc:84:e4:71:53:
0d:43:63:d0:b6:1c:50:6e:c1:8f:e5:88:8c:f3:d7:f4:03:06:
1d:3d:0d:8c:52:97:ed:c7:de:bf:02:f9:88:58:a9:20:18:8d:
47:8d:9f:a7:a5:12:0e:a3:6e:d1:9a:28:db:19:b3:45:de:6a:
c6:b1:5e:51:e4:fd:71:ab:0d:94:8f:9b:0d:b3:d2:1f:1c:99:
40:3d:dd:19:fe:09:43:18:b8:9c:14:62:37:98:cf:7a:9b:f5:
a0:fb:31:2a:98:e8:7a:af:cc:18:bf:ab:3f:d5:87:3e:1b:08:
a8:dd:6c:0d:69:f0:ce:79:b8:37:3a:e5:8a:8f:89:b1:1d:95:
a4:4d:fa:6a:e3:29:71:02:33:ef:49:14:b9:2f:e6:ce:9b:f1:
93:da:16:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 17:43:24 2026 by rpki-client