Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/5OVtt7nk-gdXX29AZ_c5XUYtLLs.roa
File: 5OVtt7nk-gdXX29AZ_c5XUYtLLs.roa (raw, json)
Hash identifier: LKHkXXWKNnxHHXc7SynzbLUQWBdpdr8/bxtwm71w3zc=
Subject key identifier: E4:E5:6D:B7:B9:E4:FA:07:57:5F:6F:40:67:F7:39:5D:46:2D:2C:BB
Certificate issuer: /CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Certificate serial: 019DB01FCBE3BD6DDC3DA632B33890ACAD07
Authority key identifier: FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/5OVtt7nk-gdXX29AZ_c5XUYtLLs.roa
Signing time: Tue 21 Apr 2026 12:59:27 +0000
ROA not before: Tue 21 Apr 2026 12:59:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21840
IP address blocks: 87.232.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 18:45:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b0:1f:cb:e3:bd:6d:dc:3d:a6:32:b3:38:90:ac:ad:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Validity
Not Before: Apr 21 12:59:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e4e56db7b9e4fa07575f6f4067f7395d462d2cbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:72:f7:50:bd:3d:97:b5:83:d8:e3:a8:47:59:
61:68:eb:78:a5:c4:4e:b0:6c:ac:8a:f2:76:90:5c:
7a:23:0f:a6:81:ff:06:6f:04:69:ba:b8:ba:01:0b:
38:56:e5:24:68:89:85:ba:10:bc:0f:d5:85:85:a3:
70:59:ab:b8:60:12:cd:da:de:7d:5a:bc:46:5a:b5:
ce:2a:66:14:69:cc:97:c8:6c:b0:d8:0a:d1:7a:56:
ac:54:b0:1f:4e:dc:aa:37:4e:ed:0c:d1:80:3d:70:
5a:4d:ae:dc:75:d0:9a:19:5c:8c:b7:a2:2d:c3:5f:
cc:79:c6:2f:a8:f2:dc:41:ae:47:a8:4a:c1:7a:17:
3a:be:55:1f:6f:85:80:47:75:d4:07:e9:68:df:bb:
77:c3:8f:2d:a2:c9:e9:a5:bf:14:94:71:dc:09:32:
cc:0f:97:42:ab:8f:84:18:23:6b:f9:8c:16:77:60:
49:21:78:6a:7d:d3:85:10:55:5b:a9:bf:ff:bc:8c:
44:c0:6a:ba:6c:66:56:4c:e9:ae:6e:35:b2:14:f2:
8d:88:ff:c0:b3:5d:4c:fa:b7:eb:9f:2b:ac:af:86:
7b:4e:e4:0b:f6:cd:44:77:07:3f:a2:a4:a1:eb:47:
84:ef:74:38:93:52:41:41:00:4e:9d:33:48:b0:62:
c6:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:E5:6D:B7:B9:E4:FA:07:57:5F:6F:40:67:F7:39:5D:46:2D:2C:BB
X509v3 Authority Key Identifier:
keyid:FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/5OVtt7nk-gdXX29AZ_c5XUYtLLs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.232.101.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:7c:d8:3b:54:b7:0a:85:b6:1a:ab:eb:fe:21:1b:2f:ad:5e:
04:e4:e6:96:6d:a2:05:43:7e:95:8b:d6:9d:9c:77:5a:40:cf:
5b:c7:98:42:89:67:49:de:51:b7:2f:52:30:80:9e:1f:1e:36:
6f:ec:a8:64:64:ba:bf:7a:83:9d:eb:32:34:63:4e:26:02:7e:
1b:54:01:be:39:a4:94:3f:8b:30:91:04:24:75:ab:e2:98:88:
48:bf:0a:38:c2:56:3f:3e:b3:f4:fb:7e:c6:a7:8a:07:03:dc:
08:cf:48:25:d7:03:bb:f2:8d:c9:8e:30:19:ec:3f:55:07:a0:
4b:ea:a9:c6:ff:90:83:0d:11:7b:ec:eb:02:c1:ef:e6:c4:74:
92:6b:43:6f:64:99:52:b9:68:b9:fa:d6:aa:4d:aa:09:51:c6:
ad:eb:93:80:36:32:5e:7e:53:d2:80:44:a2:66:05:9b:d1:d6:
70:52:35:d2:d2:af:d8:2d:d1:f5:41:20:c6:23:36:8e:cc:45:
c7:e1:be:6a:61:95:a4:de:11:3b:48:85:b2:25:87:9f:45:1b:
41:2b:ad:63:59:64:8b:d8:52:e2:16:ed:24:76:94:f3:81:14:
22:e3:70:b9:23:3d:2e:f8:c5:22:d2:5a:48:bd:5c:b2:f3:7f:
9a:02:6a:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 02:54:01 2026 by rpki-client