Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/LhVmKtUoVeqhbpOUL0wICv2z_3s.roa
File: LhVmKtUoVeqhbpOUL0wICv2z_3s.roa (raw, json)
Hash identifier: aQE7UY3gKGVawH9OfL4BJPIOZZl5vCflDnJ+9Py6UDY=
Subject key identifier: 2E:15:66:2A:D5:28:55:EA:A1:6E:93:94:2F:4C:08:0A:FD:B3:FF:7B
Certificate issuer: /CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Certificate serial: 01A02008E0748F8079A4A1D5F58844F5E52B
Authority key identifier: FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/LhVmKtUoVeqhbpOUL0wICv2z_3s.roa
Signing time: Thu 20 Aug 2026 16:37:27 +0000
ROA not before: Thu 20 Aug 2026 16:37:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218995
IP address blocks: 87.232.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:20:08:e0:74:8f:80:79:a4:a1:d5:f5:88:44:f5:e5:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Validity
Not Before: Aug 20 16:37:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2e15662ad52855eaa16e93942f4c080afdb3ff7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:57:47:39:54:e0:f8:66:44:3e:81:ac:f6:29:
59:28:e4:97:81:2d:79:5b:1d:3e:04:15:d1:cd:35:
55:5e:9e:88:50:a9:69:f2:26:23:5e:19:08:26:c5:
a4:a1:61:35:9e:b1:54:e2:92:88:73:b1:a9:64:24:
40:30:ea:63:ad:6b:9e:bc:87:58:ba:f1:54:97:73:
21:2a:76:17:68:fa:f1:e8:2d:35:39:70:ca:10:e5:
f7:57:b1:f5:cc:ba:2f:4f:94:95:b7:48:5c:fc:39:
8a:0f:a2:47:29:46:ca:23:d6:99:85:9e:76:81:16:
72:27:ae:d5:b5:33:54:e9:35:88:c2:63:14:c8:0d:
46:67:35:96:06:b6:15:62:8d:b2:88:47:86:b7:f9:
6e:c8:a0:9b:a3:35:5b:b9:f2:31:3e:b6:59:56:66:
bc:ca:ec:ab:14:7a:cb:98:94:35:a4:81:d1:b8:aa:
b9:2c:ce:a3:91:14:62:95:f2:11:21:46:c7:02:c3:
23:f3:d1:c9:f0:ae:4b:ea:d7:9d:4c:1e:f3:72:1d:
40:f1:64:f9:dd:a2:90:a9:43:fe:d5:11:39:9e:d5:
e1:04:e1:80:8f:a8:77:9b:78:92:3e:b5:c4:a6:e1:
cd:31:15:a8:ea:2a:c1:a4:85:ea:1d:53:15:ad:0f:
64:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:15:66:2A:D5:28:55:EA:A1:6E:93:94:2F:4C:08:0A:FD:B3:FF:7B
X509v3 Authority Key Identifier:
keyid:FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/LhVmKtUoVeqhbpOUL0wICv2z_3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.232.116.0/24
Signature Algorithm: sha256WithRSAEncryption
63:27:6e:5d:9e:f6:76:68:83:2a:be:bc:1c:87:c5:a4:75:72:
7a:23:a2:e4:fb:5f:ed:17:ff:de:83:30:e7:30:42:ea:c6:db:
f9:1c:cc:c2:e8:fb:f1:b1:6b:47:34:d9:3f:52:54:f0:ea:9b:
76:c9:3f:28:77:9d:e7:a2:73:fc:e1:db:5a:7f:2e:b2:3d:8c:
b4:c6:ac:a8:30:b7:f2:27:03:1e:91:ab:27:1e:3a:d0:de:a0:
78:d1:8b:38:fd:d8:d4:9f:15:e3:42:26:fb:65:b5:45:40:e9:
ee:ac:67:48:de:67:b8:00:13:40:2a:3f:09:c4:2b:4e:54:96:
9c:bd:c8:d5:e9:47:e9:21:25:c0:06:54:19:4f:bb:a7:1c:3c:
47:35:bd:da:bb:3a:46:78:03:73:e9:51:9e:bf:07:1d:9a:41:
9a:f6:0f:a1:50:76:08:48:02:54:57:db:4b:81:b4:80:c9:33:
cc:26:b5:be:8a:1c:9f:15:66:0e:86:73:e1:ce:87:51:04:5a:
0b:1e:80:23:83:19:27:23:e1:d4:5e:eb:57:2b:21:63:0b:fd:
6b:a2:af:e4:27:3e:54:5b:a7:9a:a4:7c:d0:16:c0:70:79:f5:
5a:7a:a9:76:c3:75:65:03:6f:d7:cb:b0:09:35:1e:ed:11:54:
fb:75:a4:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:02:57 2026 by rpki-client