Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/1-525GNaTOU1ZOkRpYQWdg0xd9OI.roa
File: 1-525GNaTOU1ZOkRpYQWdg0xd9OI.roa (raw, json)
Hash identifier: rr38vHMd/iqa/KyEdW67SUhXO6fiGu2KM9JUC9anKFM=
Subject key identifier: FB:9D:B9:18:D6:93:39:4D:59:3A:44:69:61:05:9D:83:4C:5D:F4:E2
Certificate issuer: /CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Certificate serial: 019DCA5870990A3CB0AE80EB75CDD07B3776
Authority key identifier: 5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/1-525GNaTOU1ZOkRpYQWdg0xd9OI.roa
Signing time: Sun 26 Apr 2026 15:11:26 +0000
ROA not before: Sun 26 Apr 2026 15:11:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 87.232.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Apr 2026 13:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ca:58:70:99:0a:3c:b0:ae:80:eb:75:cd:d0:7b:37:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Validity
Not Before: Apr 26 15:11:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fb9db918d693394d593a446961059d834c5df4e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:89:5d:cc:6d:f1:47:a2:3e:d6:22:fa:52:be:
8d:73:24:fd:19:6e:eb:9d:7c:3c:6f:a1:d4:9e:31:
f2:68:85:0c:66:69:2a:35:15:87:75:2f:88:8c:40:
2d:be:5a:9e:50:8d:aa:06:6c:b7:1c:58:85:22:ff:
01:6f:8d:87:a9:de:24:7b:17:b6:ac:8c:ab:b8:72:
5c:08:62:f3:cc:ee:f1:ba:e8:cf:3b:fc:44:6b:b5:
27:c9:c2:e2:d4:a4:82:65:0f:0d:35:dc:e2:28:f8:
8e:27:f5:3e:08:66:d2:18:43:28:38:2c:ac:db:89:
3f:70:e1:71:5d:d5:b0:aa:33:c4:29:b4:e1:a8:ba:
e6:87:da:c6:91:f3:c0:4e:5c:21:c3:96:30:61:fb:
f8:39:89:31:bf:e6:d7:0b:2a:cb:f2:61:f2:80:60:
1a:3c:c3:8d:19:b9:9d:a3:9d:a7:ec:e3:35:a0:83:
22:26:70:87:02:aa:bd:ea:39:bf:f1:e9:9f:6f:69:
20:82:be:f9:88:4d:97:22:6d:ac:9a:e9:6b:f6:c9:
a9:7f:d1:83:21:ca:f9:a5:f9:71:e0:e5:a8:e1:2e:
18:35:22:83:5b:64:2f:99:3a:17:08:1a:c4:cf:5f:
83:f2:d7:02:56:9e:03:2e:40:5d:79:53:bf:dc:29:
18:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:9D:B9:18:D6:93:39:4D:59:3A:44:69:61:05:9D:83:4C:5D:F4:E2
X509v3 Authority Key Identifier:
keyid:5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/1-525GNaTOU1ZOkRpYQWdg0xd9OI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.232.87.0/24
Signature Algorithm: sha256WithRSAEncryption
75:b2:65:a7:21:f6:f6:f0:63:9c:a5:18:c9:cf:31:56:42:e7:
1b:f9:a2:1c:c9:42:a2:b0:98:d3:e4:68:13:48:cc:b0:e3:25:
03:fd:cd:d0:83:86:85:bc:fe:d6:61:8d:00:dd:e7:5a:eb:a6:
8a:a5:ef:57:49:8a:0c:5b:33:a3:8e:63:bf:20:bb:b4:06:23:
dd:a5:bf:72:27:1e:20:aa:2c:03:df:8e:00:21:af:0f:a5:30:
3b:7d:74:26:4f:b4:0f:e0:e4:fd:96:02:6b:eb:68:57:9f:1c:
72:f4:66:98:a2:6f:82:67:d8:7e:22:d6:b9:ec:1e:a5:13:6e:
5f:93:ca:ae:2d:b0:83:3b:31:71:3c:c1:51:68:68:b8:78:94:
1f:14:7e:89:39:f3:b7:8d:5e:2e:32:1a:a6:f6:1e:22:b7:0f:
a5:ae:49:ed:6a:1c:51:37:d2:cd:53:c5:0b:0e:c2:1f:d0:a7:
c5:ec:42:14:2c:11:4a:fd:c3:94:29:e4:5e:b6:14:4e:79:db:
39:db:9e:0b:d4:6e:5b:d1:7b:e5:29:bb:00:a2:ac:8e:2c:71:
81:f0:a6:df:37:42:83:00:44:74:e5:4b:d2:12:8c:8f:09:66:
41:49:9b:e9:01:35:4f:b6:fc:e6:1d:9a:f8:ca:6d:f8:21:0a:
3b:6f:e1:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 17:25:39 2026 by rpki-client