Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/7D2U0i4ZgHb5uiquTZFcKNLIphc.roa
File: 7D2U0i4ZgHb5uiquTZFcKNLIphc.roa (raw, json)
Hash identifier: c0jlnRWKT8kr/LedR/TbR0Ey73xuVYqaiIjqr+uvhUA=
Subject key identifier: EC:3D:94:D2:2E:19:80:76:F9:BA:2A:AE:4D:91:5C:28:D2:C8:A6:17
Certificate issuer: /CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Certificate serial: 019FF708B67AB04FFDA7EA8FF0332BDB790C
Authority key identifier: 5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/7D2U0i4ZgHb5uiquTZFcKNLIphc.roa
Signing time: Wed 12 Aug 2026 17:32:51 +0000
ROA not before: Wed 12 Aug 2026 17:32:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63023
IP address blocks: 87.232.83.0/24 maxlen: 24
89.126.230.0/24 maxlen: 24
130.78.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 16:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f7:08:b6:7a:b0:4f:fd:a7:ea:8f:f0:33:2b:db:79:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Validity
Not Before: Aug 12 17:32:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ec3d94d22e198076f9ba2aae4d915c28d2c8a617
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9c:33:40:66:9f:76:9b:1e:02:37:22:4d:f1:
08:84:57:2a:09:63:0b:11:d8:9c:7f:fd:ca:d6:48:
28:0f:59:95:2e:1a:98:4f:e0:57:5c:e2:33:fb:8a:
a5:cf:4d:30:ca:ff:da:60:f7:34:b6:64:ed:a8:e8:
86:79:0b:66:32:20:a4:d6:ab:7a:a2:c3:a7:b5:73:
e5:4b:e3:c1:c6:0b:a3:34:65:d9:f4:38:38:da:82:
35:bb:54:23:9d:5d:b4:c2:fb:6a:5d:a1:88:1c:16:
36:bb:49:c2:fe:2d:e7:a7:7d:16:50:3a:5c:f8:a7:
3b:3e:4a:ce:9c:33:14:64:8c:c7:23:33:8c:80:e0:
7d:d5:9d:f0:1c:bb:f0:ea:a3:83:16:ff:b1:7d:d9:
97:4d:02:90:03:b5:bf:53:16:84:18:6e:06:64:9f:
d4:5c:1e:27:64:74:28:cd:ce:89:5c:f0:84:a0:e8:
bb:af:9b:61:d5:c3:2a:56:5a:fb:74:9a:b7:7c:2e:
17:0e:0f:4c:9b:34:7d:e8:24:4e:7a:80:e1:99:a8:
31:b5:b3:dc:32:6b:57:46:09:ec:64:56:30:08:42:
84:f3:19:57:19:03:ca:e5:72:d5:e3:ef:c2:62:3f:
88:b2:03:ff:a7:f5:a7:cc:cd:54:9f:10:2d:cc:73:
c4:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:3D:94:D2:2E:19:80:76:F9:BA:2A:AE:4D:91:5C:28:D2:C8:A6:17
X509v3 Authority Key Identifier:
keyid:5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/7D2U0i4ZgHb5uiquTZFcKNLIphc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.232.83.0/24
89.126.230.0/24
130.78.189.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:2f:da:18:0a:8d:55:75:fa:7b:84:92:27:2f:df:89:17:88:
be:ad:b5:6f:58:f3:fb:95:6d:08:53:2a:64:02:77:12:28:d7:
04:49:a9:e4:2b:af:1b:a7:2a:eb:d2:a2:1e:d6:bd:cb:52:18:
1e:0e:55:f5:cc:b8:a7:33:40:24:da:6b:ad:6e:c3:92:21:2d:
bf:dc:14:cb:66:d1:47:18:62:e4:db:62:18:48:e5:28:da:ac:
11:81:58:6e:d5:bd:cc:5e:8b:ba:0a:41:a5:78:b7:e8:a3:40:
7a:e9:2a:99:f4:83:e6:9e:63:47:6b:c7:e8:0f:83:cc:23:d5:
d3:68:1a:15:90:7c:12:d6:84:71:45:49:02:b4:0d:ce:03:d4:
ae:8a:8e:47:2e:d4:db:c9:37:b5:5b:78:db:ce:75:51:2b:31:
49:94:e1:55:74:be:68:c6:4a:9d:4b:72:51:90:ef:d8:42:44:
a5:ca:ce:bb:0c:39:9d:79:14:38:01:0a:cd:d0:19:51:49:85:
7d:f8:b7:d6:80:bb:df:7c:3c:4e:23:74:5f:1f:f5:ba:1e:c3:
c2:54:d8:0d:cd:20:63:77:a0:38:dc:43:50:e7:5e:37:6c:ab:
64:6d:a1:58:ba:41:db:7c:29:89:61:e6:d8:07:02:bc:b8:fc:
cf:f9:32:a5
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZ/3CLZ6sE/9p+qP8DMr23kMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmZTUzYzBiZmMzYzhmYjU2YjgxMTkxMzE3MTQ0NDQzZTBl
MjlkMjUwHhcNMjYwODEyMTczMjUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYzNkOTRkMjJlMTk4MDc2ZjliYTJhYWU0ZDkxNWMyOGQyYzhhNjE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5wzQGafdpseAjciTfEIhFcqCWML
Edicf/3K1kgoD1mVLhqYT+BXXOIz+4qlz00wyv/aYPc0tmTtqOiGeQtmMiCk1qt6
osOntXPlS+PBxgujNGXZ9Dg42oI1u1QjnV20wvtqXaGIHBY2u0nC/i3np30WUDpc
+Kc7PkrOnDMUZIzHIzOMgOB91Z3wHLvw6qODFv+xfdmXTQKQA7W/UxaEGG4GZJ/U
XB4nZHQozc6JXPCEoOi7r5th1cMqVlr7dJq3fC4XDg9MmzR96CROeoDhmagxtbPc
MmtXRgnsZFYwCEKE8xlXGQPK5XLV4+/CYj+IsgP/p/WnzM1UnxAtzHPEsQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFOw9lNIuGYB2+boqrk2RXCjSyKYXMB8GA1UdIwQY
MBaAFF/lPAv8PI+1a4EZExcUREPg4p0lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWC1VOENfdzhqN1ZyZ1JrVEZ4UkVRLURpblNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9iYzYwODktM2Q5MC00NTI5LWJiNDct
NWNmNTZlZTQzNWIzLzEvN0QyVTBpNFpnSGI1dWlxdVRaRmNLTkxJcGhjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC9iYzYwODktM2Q5MC00NTI5LWJiNDctNWNmNTZlZTQzNWIz
LzEvWC1VOENfdzhqN1ZyZ1JrVEZ4UkVRLURpblNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAV+hTAwQA
WX7mAwQAgk69MA0GCSqGSIb3DQEBCwUAA4IBAQCML9oYCo1Vdfp7hJInL9+JF4i+
rbVvWPP7lW0IUypkAncSKNcESankK68bpyrr0qIe1r3LUhgeDlX1zLinM0Ak2mut
bsOSIS2/3BTLZtFHGGLk22IYSOUo2qwRgVhu1b3MXou6CkGleLfoo0B66SqZ9IPm
nmNHa8foD4PMI9XTaBoVkHwS1oRxRUkCtA3OA9Suio5HLtTbyTe1W3jbznVRKzFJ
lOFVdL5oxkqdS3JRkO/YQkSlys67DDmdeRQ4AQrN0BlRSYV9+LfWgLvffDxOI3Rf
H/W6HsPCVNgNzSBjd6A43ENQ5143bKtkbaFYukHbfCmJYebYBwK8uPzP+TKl
-----END CERTIFICATE-----
Generated at Wed Aug 12 21:12:01 2026 by rpki-client