Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/hzLBg2vn0pE5jX4DAd-LZ-rg8ds.roa
File: hzLBg2vn0pE5jX4DAd-LZ-rg8ds.roa (raw, json)
Hash identifier: nkYwxfNlitpDmcR0QyJN8VtRdB1BcW9INahVEm4qvzo=
Subject key identifier: 87:32:C1:83:6B:E7:D2:91:39:8D:7E:03:01:DF:8B:67:EA:E0:F1:DB
Certificate issuer: /CN=e5e03354666c4cb2abfd51411eca5d524b0d5be5
Certificate serial: 019EF9BB7CF6BE746D484350F9BE905D6012
Authority key identifier: E5:E0:33:54:66:6C:4C:B2:AB:FD:51:41:1E:CA:5D:52:4B:0D:5B:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5eAzVGZsTLKr_VFBHspdUksNW-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/hzLBg2vn0pE5jX4DAd-LZ-rg8ds.roa
Signing time: Wed 24 Jun 2026 13:04:34 +0000
ROA not before: Wed 24 Jun 2026 13:04:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50049
IP address blocks: 87.232.76.0/24 maxlen: 24
87.232.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/5eAzVGZsTLKr_VFBHspdUksNW-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f9:bb:7c:f6:be:74:6d:48:43:50:f9:be:90:5d:60:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5e03354666c4cb2abfd51411eca5d524b0d5be5
Validity
Not Before: Jun 24 13:04:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8732c1836be7d291398d7e0301df8b67eae0f1db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:3b:5f:07:e2:e7:1d:a0:96:3d:4a:fd:b2:d6:
7b:f7:f3:7f:0c:d1:fa:97:2d:08:d7:fe:f4:a3:a5:
88:17:48:9d:7e:dd:6d:a3:9d:a2:64:45:d3:37:c7:
6a:d2:07:ac:b5:4b:e1:0a:18:21:01:0d:76:5e:b2:
1d:13:d6:7c:33:fd:7a:a8:17:f6:1a:31:18:d2:ea:
76:2e:69:85:d7:cd:2c:c8:3d:b9:03:46:7f:fe:f0:
51:7d:17:57:25:7f:f7:f2:19:4b:21:06:49:38:df:
bb:e5:2c:cf:d0:94:a6:46:87:c3:18:3a:50:5f:80:
fe:5b:b6:10:fd:51:60:4a:f2:24:1b:54:28:cf:ac:
c8:29:e0:b7:82:de:b4:b8:37:29:50:3f:ff:a8:8c:
ea:9e:9f:5a:fa:5e:f4:0a:80:5b:8f:0b:e7:cc:61:
fb:81:00:a8:25:12:77:ba:f4:22:da:39:c0:af:67:
fb:5e:5e:f3:af:f7:ab:0e:5e:4d:de:ec:c5:ab:79:
31:84:d6:8d:e9:e0:a2:3e:3f:2e:1a:bb:0e:2e:c6:
6a:ff:4d:96:1f:39:b1:e9:cf:23:2c:f4:41:4a:fd:
d4:7d:a6:a2:b0:bc:6c:f2:5a:b1:e0:04:7c:14:30:
1c:4a:35:8b:b1:7f:4a:f6:a1:01:64:e1:68:10:9e:
18:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:32:C1:83:6B:E7:D2:91:39:8D:7E:03:01:DF:8B:67:EA:E0:F1:DB
X509v3 Authority Key Identifier:
keyid:E5:E0:33:54:66:6C:4C:B2:AB:FD:51:41:1E:CA:5D:52:4B:0D:5B:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5eAzVGZsTLKr_VFBHspdUksNW-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/hzLBg2vn0pE5jX4DAd-LZ-rg8ds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.232.76.0/24
87.232.78.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:2c:58:c6:cb:9c:e3:c6:f6:bf:51:27:29:8f:8d:12:50:77:
b2:8f:f8:84:33:c4:1b:9a:97:87:d7:54:f0:86:10:3b:6d:b9:
57:3e:26:a4:23:4a:ae:86:e3:16:da:93:ef:3f:f0:28:e8:8c:
bd:ff:e5:48:a6:f7:8b:75:c4:11:5b:f0:dd:23:e4:88:51:ba:
17:06:e6:30:ef:c8:29:67:87:27:b8:fb:ac:08:a0:3f:3d:e4:
65:de:4a:a2:f9:d2:68:7e:9f:3e:aa:d6:66:83:cf:70:dc:71:
bc:f1:58:6f:45:aa:16:ec:f4:0f:23:1b:8c:f7:ae:92:ec:ab:
3d:aa:17:f4:e8:42:90:62:de:ea:3c:4b:6f:1b:c2:99:45:3b:
a2:4d:e5:05:9f:89:0e:e4:f0:98:da:a2:f7:5e:11:62:85:9d:
b1:f6:b4:b6:5d:4a:ae:ab:56:7a:ad:73:b0:92:16:de:95:95:
d0:60:b5:c7:98:b0:ee:72:8c:05:1f:e9:3a:62:22:a7:aa:10:
e1:5e:ef:a7:75:61:8d:47:57:a9:2f:fd:83:e2:ef:39:d4:d6:
af:52:26:f6:a1:d0:0a:2b:19:4b:8b:d3:3d:19:1c:01:a6:3b:
70:3d:29:71:e2:43:52:d6:43:f1:22:30:19:9f:2e:73:9e:34:
ae:dc:87:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:13:24 2026 by rpki-client