Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/TUT9E3BDtRODMxg39A655XjXHec.roa
File: TUT9E3BDtRODMxg39A655XjXHec.roa (raw, json)
Hash identifier: VxjmIRnL9NXps9ncV+CcMNm9DxWJDJaon1Dq2DhRp5Q=
Subject key identifier: 4D:44:FD:13:70:43:B5:13:83:33:18:37:F4:0E:B9:E5:78:D7:1D:E7
Certificate issuer: /CN=e5e03354666c4cb2abfd51411eca5d524b0d5be5
Certificate serial: 019E849DB011C4EC0DE971BA6F8810F3722B
Authority key identifier: E5:E0:33:54:66:6C:4C:B2:AB:FD:51:41:1E:CA:5D:52:4B:0D:5B:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5eAzVGZsTLKr_VFBHspdUksNW-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/TUT9E3BDtRODMxg39A655XjXHec.roa
Signing time: Mon 01 Jun 2026 19:16:27 +0000
ROA not before: Mon 01 Jun 2026 19:16:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20473
IP address blocks: 87.232.76.0/24 maxlen: 24
87.232.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/5eAzVGZsTLKr_VFBHspdUksNW-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 04:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:84:9d:b0:11:c4:ec:0d:e9:71:ba:6f:88:10:f3:72:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5e03354666c4cb2abfd51411eca5d524b0d5be5
Validity
Not Before: Jun 1 19:16:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4d44fd137043b51383331837f40eb9e578d71de7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:45:7b:e6:ec:84:de:8e:d6:d0:d3:3b:9e:ca:
2e:ca:a8:6a:60:2f:a4:5d:92:7d:76:57:99:58:9a:
c4:fd:91:15:f3:46:88:68:38:b0:7d:8f:43:b9:e4:
ab:23:fa:85:bf:ce:ea:e9:1a:56:18:ee:87:a1:47:
7a:0e:af:5d:41:a2:0e:a6:db:0d:2b:2e:3c:f2:45:
7b:a6:f1:ff:83:c8:a2:27:e2:bb:49:36:57:09:11:
e5:19:51:41:08:c5:57:fa:cc:5e:fa:11:58:3e:d5:
f6:df:95:30:0b:8b:25:4a:83:6f:b3:21:fe:94:91:
d0:65:ee:2f:b8:f1:0f:2b:4a:6a:8e:fe:f7:62:22:
a4:dd:55:a3:36:95:8e:0a:8e:df:b3:6a:07:a2:89:
8e:21:c6:db:9b:9c:a2:94:82:8c:5e:ce:85:46:22:
7d:1e:dc:31:3f:df:06:ad:08:3f:75:85:5b:f4:be:
6c:b9:8b:1f:42:44:a5:c3:76:c0:98:6e:a6:bf:04:
c5:e8:b1:fc:e9:5c:6b:c9:35:1f:2a:52:0f:46:e3:
03:14:10:00:19:ab:04:a1:bf:7d:d9:5a:6b:2e:02:
1f:cc:b2:f3:8a:91:7c:39:8f:43:a3:91:48:66:73:
d2:fb:de:22:fc:a3:47:89:43:36:aa:c6:1b:6e:38:
f1:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:44:FD:13:70:43:B5:13:83:33:18:37:F4:0E:B9:E5:78:D7:1D:E7
X509v3 Authority Key Identifier:
keyid:E5:E0:33:54:66:6C:4C:B2:AB:FD:51:41:1E:CA:5D:52:4B:0D:5B:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5eAzVGZsTLKr_VFBHspdUksNW-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/TUT9E3BDtRODMxg39A655XjXHec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.232.76.0/23
Signature Algorithm: sha256WithRSAEncryption
1d:17:72:4c:9d:9a:99:35:b9:f1:d3:7d:3d:72:f5:d0:2d:9b:
8c:8c:c7:96:66:73:f4:25:aa:1e:d4:a8:96:33:e8:8a:f1:ea:
e3:0d:e1:49:46:7b:2e:a5:54:be:c6:59:45:1c:81:a4:09:f3:
47:0d:5d:e1:73:83:d0:51:a9:4c:aa:df:88:95:ff:70:0d:62:
ac:eb:79:4e:34:e5:4c:b9:62:81:33:1c:dc:d8:0e:fd:2d:05:
63:96:8d:52:71:e9:c1:14:a2:23:a0:70:56:95:7f:aa:5b:3c:
54:88:20:14:d6:97:f1:1d:ee:5c:96:e3:af:82:2a:f6:36:78:
32:42:54:a6:12:96:fa:5a:b7:71:13:f5:66:78:5f:de:55:32:
2b:98:9b:38:45:72:be:14:0d:be:69:4d:e5:09:7f:e2:fc:02:
77:22:7f:23:a2:f7:c3:07:34:08:41:d9:53:93:eb:89:c8:95:
bc:6d:3f:b8:7a:4b:be:7b:ae:10:15:21:13:99:c4:61:85:6a:
e5:f9:8e:ea:4d:f6:7e:cb:fd:dc:8c:f8:b9:54:51:b4:41:d4:
8f:cd:76:d8:ec:1a:4c:22:2f:10:4d:77:f0:63:2b:9e:66:bd:
62:d2:dd:4c:22:2b:44:83:5d:80:7e:c7:24:cc:a4:e5:44:7b:
38:bc:7e:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 14:34:31 2026 by rpki-client