Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/1-oMcJjCk9M1Gb8gM6Li_SyYuqQU.roa
File: 1-oMcJjCk9M1Gb8gM6Li_SyYuqQU.roa (raw, json)
Hash identifier: xhK5BjJZXqRVaA2pxUtUKPZ/SIj+dPxFdY/9lKUzlas=
Subject key identifier: FA:83:1C:26:30:A4:F4:CD:46:6F:C8:0C:E8:B8:BF:4B:26:2E:A9:05
Certificate issuer: /CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Certificate serial: 019FF1898C4B4161B0C05D0088736D605B76
Authority key identifier: 5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/1-oMcJjCk9M1Gb8gM6Li_SyYuqQU.roa
Signing time: Tue 11 Aug 2026 15:55:51 +0000
ROA not before: Tue 11 Aug 2026 15:55:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34346
IP address blocks: 87.232.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 16:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f1:89:8c:4b:41:61:b0:c0:5d:00:88:73:6d:60:5b:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Validity
Not Before: Aug 11 15:55:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fa831c2630a4f4cd466fc80ce8b8bf4b262ea905
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:93:0c:ec:5b:d6:67:55:79:81:92:3a:4b:29:
e6:30:89:93:0b:26:67:c0:e1:82:94:1d:26:1d:05:
6b:08:5e:4f:13:14:e0:97:2b:f2:24:79:9b:0b:8b:
55:60:ba:66:af:f9:55:98:fb:91:f7:07:9b:88:94:
19:3f:6f:14:23:ea:fb:3f:92:c8:ce:a0:92:71:ac:
3c:1d:d2:3d:57:59:ff:e1:eb:b3:2f:62:91:14:5e:
b4:e6:4b:53:8c:57:e4:13:d4:3c:ae:34:5f:a9:66:
83:3d:02:41:45:ac:f1:b0:6f:95:0e:88:d8:87:b4:
35:41:34:80:ab:d4:b5:7a:e0:de:c1:4c:11:1d:d3:
1b:70:97:13:b9:c6:60:44:44:77:34:89:6f:b5:09:
dc:85:13:b2:0e:81:de:1d:f5:a1:0e:e7:69:d6:53:
b0:8a:1a:f3:38:aa:2c:fd:c0:b9:02:22:3b:b9:e4:
9b:f5:59:e5:ad:e8:b3:08:9b:c3:47:87:79:37:49:
4d:1a:b6:64:6e:61:3a:ac:e6:19:13:3c:9e:16:8f:
50:10:d6:74:0d:6a:cc:e9:e3:e4:33:f1:c6:fd:32:
ac:53:b2:86:e1:30:05:6d:ce:33:1a:26:b8:ec:2b:
1e:d8:2b:f4:0f:df:d4:35:37:68:dd:fd:35:4d:90:
5d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:83:1C:26:30:A4:F4:CD:46:6F:C8:0C:E8:B8:BF:4B:26:2E:A9:05
X509v3 Authority Key Identifier:
keyid:5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/1-oMcJjCk9M1Gb8gM6Li_SyYuqQU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.232.94.0/24
Signature Algorithm: sha256WithRSAEncryption
52:a4:1c:ec:fc:c1:b2:81:fc:d3:b7:e4:c4:9b:00:dc:9f:e2:
de:50:3f:f7:10:7d:e1:18:1c:9e:f0:9d:e7:d8:9a:7f:c2:08:
a8:9e:88:a2:f8:90:db:ed:c3:48:2f:20:68:45:d7:62:40:fd:
61:d8:f4:45:c2:63:be:dd:11:fb:9d:28:49:47:83:fc:e4:e5:
c1:e9:0d:59:a2:73:fe:d2:0b:b7:b3:36:18:24:2f:eb:ea:30:
e5:a6:db:9f:13:27:28:8c:e3:ea:61:33:3f:3e:24:21:45:4c:
2c:6d:49:60:81:8a:74:db:d2:a6:bb:62:a7:aa:15:04:ae:34:
34:50:03:af:de:6f:2e:68:d6:f6:ce:de:ae:75:8f:1d:3d:96:
6d:b3:6d:fa:3b:42:22:ee:ea:9c:c4:5a:cc:08:5a:49:7b:27:
c8:ad:83:93:2b:34:e5:58:f4:13:64:29:0c:5d:81:45:1e:f1:
7f:f9:e0:46:5f:b4:88:d9:78:11:11:d5:d2:5b:a9:cb:1f:9a:
d9:c0:40:da:91:57:40:3a:67:17:fe:b1:73:48:4e:9c:70:96:
ee:20:24:b1:00:4d:38:51:b6:73:d8:56:73:64:12:3c:a9:b9:
ac:56:09:23:18:fd:08:eb:e2:a0:1e:3a:88:cb:89:3f:a3:b4:
95:eb:cb:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 21:12:46 2026 by rpki-client