Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/ADAW_wJIdiII-SPabtCcT2pfiGU.roa
File: ADAW_wJIdiII-SPabtCcT2pfiGU.roa (raw, json)
Hash identifier: YoGPHaR/a3WlHBQkAswUByHcvWwOEY01lTg2XsxvH18=
Subject key identifier: 00:30:16:FF:02:48:76:22:08:F9:23:DA:6E:D0:9C:4F:6A:5F:88:65
Certificate issuer: /CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Certificate serial: 01A001507F5CD25A2EEBF068B35736520BDD
Authority key identifier: FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/ADAW_wJIdiII-SPabtCcT2pfiGU.roa
Signing time: Fri 14 Aug 2026 17:27:27 +0000
ROA not before: Fri 14 Aug 2026 17:27:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15386
IP address blocks: 87.232.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:50:7f:5c:d2:5a:2e:eb:f0:68:b3:57:36:52:0b:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Validity
Not Before: Aug 14 17:27:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=003016ff0248762208f923da6ed09c4f6a5f8865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ba:f7:cd:c0:c0:5a:66:f2:95:4e:55:8f:ca:
c8:88:a9:25:44:56:53:ee:6e:5f:c5:2b:d4:ff:d3:
cc:d1:e9:f6:52:8d:9c:7c:bd:1b:ac:7f:98:2d:0d:
ba:18:f6:84:d9:a1:ed:6e:03:e0:c5:34:f4:7b:44:
dd:d5:2e:61:db:1d:db:6e:f0:c8:b8:94:2a:a0:fa:
9e:ac:34:be:b7:75:f1:7d:02:e8:d5:61:9d:00:c6:
9e:a3:75:f3:75:d9:07:8e:1c:b9:2b:dd:1b:cd:8e:
9f:ec:3b:59:fa:9c:6c:29:08:49:3a:bc:86:f5:18:
ee:2a:39:8f:fc:76:08:70:61:fc:f2:62:d5:47:78:
75:1a:34:aa:25:a6:6c:0a:38:70:2c:a0:a0:e8:2c:
ff:d5:da:b2:88:ff:06:89:25:1a:02:b4:af:1f:61:
ec:0c:51:87:32:73:07:5e:dd:77:41:09:4e:7e:02:
13:43:36:2f:04:2c:8b:39:25:50:24:05:64:68:5f:
b0:43:42:45:df:7b:3e:92:d2:9f:db:50:2e:59:75:
54:f2:49:7e:25:9d:cd:df:38:5c:23:74:01:4f:f1:
54:64:bd:e9:a9:97:0f:7f:52:10:b6:87:54:55:a7:
1d:e0:7e:14:6d:99:ed:a5:ff:e0:11:38:bd:70:9d:
52:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:30:16:FF:02:48:76:22:08:F9:23:DA:6E:D0:9C:4F:6A:5F:88:65
X509v3 Authority Key Identifier:
keyid:FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/ADAW_wJIdiII-SPabtCcT2pfiGU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.232.97.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:cf:bf:5e:f5:11:7b:c7:12:9e:b9:94:ed:0d:19:74:e7:38:
dd:ef:99:49:31:ec:70:a3:4c:6d:27:d2:01:59:8b:bf:45:8d:
6b:f4:5a:fe:47:b4:e4:0c:35:2e:a0:d6:aa:b6:b5:b3:21:d4:
cb:fb:c0:50:a8:f3:75:de:c2:55:31:0b:35:8d:de:69:59:43:
af:6b:9d:9c:e2:9a:4f:c1:44:3f:c6:1c:10:fb:97:e0:79:8a:
39:66:b1:3f:ec:09:ec:49:41:df:9b:de:75:93:54:b9:30:db:
7c:f9:0f:ed:b7:20:ae:a9:cb:99:fa:39:07:a6:1c:e0:02:63:
a9:ac:36:b1:00:c1:bf:f2:74:6a:fc:88:a4:0f:d7:72:96:aa:
73:97:76:2a:c4:38:6e:3a:9e:18:cc:46:75:a5:a4:08:8f:95:
f4:61:87:48:0d:06:f6:b6:0a:42:09:fa:c3:8b:f5:aa:1e:de:
cd:2f:11:dd:7e:3b:6f:8c:49:0a:eb:e9:5b:5a:21:fe:54:51:
20:e4:ee:2a:ca:d5:cb:2d:60:05:a2:c9:74:af:c4:19:f0:34:
ed:2d:88:44:b7:4f:fd:6f:d3:10:95:c5:b5:d1:47:52:9e:ea:
65:ab:48:57:d3:cb:53:33:cd:2b:91:03:4c:11:51:aa:df:be:
1a:7b:03:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:02:58 2026 by rpki-client