Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/fJYDn_pM1CSQCC01Q2M0CeYkZCg.roa
File: fJYDn_pM1CSQCC01Q2M0CeYkZCg.roa (raw, json)
Hash identifier: 3pjRJpzPeP7KArmEEYHuE7xp3oBZ3Ocxe8kqq5qbxYw=
Subject key identifier: 7C:96:03:9F:FA:4C:D4:24:90:08:2D:35:43:63:34:09:E6:24:64:28
Certificate issuer: /CN=e5e03354666c4cb2abfd51411eca5d524b0d5be5
Certificate serial: 019F93676334FD835702622D187F40E4D34E
Authority key identifier: E5:E0:33:54:66:6C:4C:B2:AB:FD:51:41:1E:CA:5D:52:4B:0D:5B:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5eAzVGZsTLKr_VFBHspdUksNW-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/fJYDn_pM1CSQCC01Q2M0CeYkZCg.roa
Signing time: Fri 24 Jul 2026 09:14:14 +0000
ROA not before: Fri 24 Jul 2026 09:14:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13335
IP address blocks: 87.232.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/5eAzVGZsTLKr_VFBHspdUksNW-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:67:63:34:fd:83:57:02:62:2d:18:7f:40:e4:d3:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5e03354666c4cb2abfd51411eca5d524b0d5be5
Validity
Not Before: Jul 24 09:14:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7c96039ffa4cd42490082d3543633409e6246428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ce:0e:ef:d8:9e:fd:bd:05:cd:75:0e:aa:49:
d1:7c:67:4c:4a:bb:e9:e1:25:74:b6:5f:35:a5:47:
04:0e:17:07:58:fc:51:ee:76:ff:26:dc:ad:59:1d:
da:22:63:b3:3c:19:30:44:e7:58:40:4d:e0:e0:61:
1e:28:48:17:1b:1e:4c:40:01:cf:5c:c3:bc:84:84:
f2:f8:71:e2:3b:d9:b1:ca:d1:07:47:30:ae:8c:77:
72:23:f3:93:25:56:c7:ac:d2:d1:56:5c:2a:5d:be:
60:95:8a:bf:18:4f:4d:0c:6c:a6:b3:01:af:92:f6:
e5:19:98:e2:bc:38:27:43:6e:c9:be:fb:c4:c6:6f:
55:e3:60:dc:84:c7:07:74:b2:e0:16:4a:b1:bb:5f:
3b:98:e2:68:5e:38:c1:64:dd:7f:39:65:11:c1:94:
d3:7f:d4:bf:50:98:7f:90:90:d2:dc:41:d9:49:3f:
38:fc:e6:3e:27:f0:2b:35:ad:24:dc:70:5c:e2:9f:
4b:e5:f3:e1:f3:23:fc:96:6b:d1:57:d9:ab:df:d8:
bb:70:fe:54:33:cf:45:e2:8a:f5:ae:f4:20:73:7b:
cc:f5:a4:5d:51:d3:3d:80:ed:85:79:39:80:2f:f3:
6e:ec:e5:ee:f6:0a:d0:eb:90:fb:11:c4:65:ee:72:
0b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:96:03:9F:FA:4C:D4:24:90:08:2D:35:43:63:34:09:E6:24:64:28
X509v3 Authority Key Identifier:
keyid:E5:E0:33:54:66:6C:4C:B2:AB:FD:51:41:1E:CA:5D:52:4B:0D:5B:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5eAzVGZsTLKr_VFBHspdUksNW-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/fJYDn_pM1CSQCC01Q2M0CeYkZCg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.232.75.0/24
Signature Algorithm: sha256WithRSAEncryption
46:a5:fd:07:03:d2:2d:0d:1e:fa:af:76:30:56:1a:3e:4b:5b:
eb:7a:b2:b2:10:8f:28:ac:29:a9:e6:b8:a6:ca:4b:2e:24:ea:
2e:69:f6:bb:80:6f:67:a9:93:fd:15:e4:0c:27:1f:8c:e4:44:
92:58:87:55:86:d4:56:ee:f0:94:7d:c5:7f:73:22:67:8f:d1:
12:29:c1:60:ad:9e:09:64:29:55:a6:62:64:c1:10:95:c6:32:
3c:bf:02:35:4f:71:ad:e0:4f:86:c8:76:de:5e:e1:9d:3b:61:
e7:a3:71:4a:08:d6:14:88:58:e6:1f:4a:40:77:db:37:cf:83:
46:b3:85:12:af:43:b8:49:58:f9:42:6d:d9:80:c3:b6:52:65:
7a:80:f3:19:50:15:e2:3b:0c:b9:9a:e7:a9:05:31:58:f8:a7:
9b:dd:2f:b9:22:bd:03:1d:f2:e5:0c:98:0f:e6:2f:63:db:e0:
a5:36:f1:ba:f8:ec:c7:5e:31:db:d2:d3:1e:0b:bc:f4:62:0f:
1e:c9:dd:7a:15:7e:af:a3:df:e9:6b:b8:96:47:91:9a:2d:8d:
fe:f0:98:f9:f8:aa:c6:c2:c5:85:ad:69:b3:88:a3:2b:11:f8:
68:32:32:c4:c8:34:58:b8:1b:b0:5c:65:14:6b:29:ab:98:a9:
a3:ae:a6:99
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ+TZ2M0/YNXAmItGH9A5NNOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1ZTAzMzU0NjY2YzRjYjJhYmZkNTE0MTFlY2E1ZDUyNGIw
ZDViZTUwHhcNMjYwNzI0MDkxNDE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3Yzk2MDM5ZmZhNGNkNDI0OTAwODJkMzU0MzYzMzQwOWU2MjQ2NDI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu84O79ie/b0FzXUOqknRfGdMSrvp
4SV0tl81pUcEDhcHWPxR7nb/JtytWR3aImOzPBkwROdYQE3g4GEeKEgXGx5MQAHP
XMO8hITy+HHiO9mxytEHRzCujHdyI/OTJVbHrNLRVlwqXb5glYq/GE9NDGymswGv
kvblGZjivDgnQ27JvvvExm9V42DchMcHdLLgFkqxu187mOJoXjjBZN1/OWURwZTT
f9S/UJh/kJDS3EHZST84/OY+J/ArNa0k3HBc4p9L5fPh8yP8lmvRV9mr39i7cP5U
M89F4or1rvQgc3vM9aRdUdM9gO2FeTmAL/Nu7OXu9grQ65D7EcRl7nILQwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHyWA5/6TNQkkAgtNUNjNAnmJGQoMB8GA1UdIwQY
MBaAFOXgM1RmbEyyq/1RQR7KXVJLDVvlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWVBelZHWnNUTEtyX1ZGQkhzcGRVa3NOVy1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS85YjYyNWQtMGI2Mi00NWQ5LTk5ZWYt
NjBmYjBmOTE5OTdlLzEvZkpZRG5fcE0xQ1NRQ0MwMVEyTTBDZVlrWkNnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS85YjYyNWQtMGI2Mi00NWQ5LTk5ZWYtNjBmYjBmOTE5OTdl
LzEvNWVBelZHWnNUTEtyX1ZGQkhzcGRVa3NOVy1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV+hLMA0G
CSqGSIb3DQEBCwUAA4IBAQBGpf0HA9ItDR76r3YwVho+S1vrerKyEI8orCmp5rim
yksuJOouafa7gG9nqZP9FeQMJx+M5ESSWIdVhtRW7vCUfcV/cyJnj9ESKcFgrZ4J
ZClVpmJkwRCVxjI8vwI1T3Gt4E+GyHbeXuGdO2Hno3FKCNYUiFjmH0pAd9s3z4NG
s4USr0O4SVj5Qm3ZgMO2UmV6gPMZUBXiOwy5muepBTFY+Keb3S+5Ir0DHfLlDJgP
5i9j2+ClNvG6+OzHXjHb0tMeC7z0Yg8eyd16FX6vo9/pa7iWR5GaLY3+8Jj5+KrG
wsWFrWmziKMrEfhoMjLEyDRYuBuwXGUUaymrmKmjrqaZ
-----END CERTIFICATE-----
Generated at Sun Jul 26 21:17:39 2026 by rpki-client