Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/9B5J5qKfXD1IsFWDiA1ym0OX_ao.roa
File: 9B5J5qKfXD1IsFWDiA1ym0OX_ao.roa (raw, json)
Hash identifier: VrKM/a3OEJXwrXYb50r2nQBvSYbQWOP6IUKr7og6gEA=
Subject key identifier: F4:1E:49:E6:A2:9F:5C:3D:48:B0:55:83:88:0D:72:9B:43:97:FD:AA
Certificate issuer: /CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Certificate serial: 019F65F9F098D3B8593DA550E2F9FF4470BC
Authority key identifier: 5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/9B5J5qKfXD1IsFWDiA1ym0OX_ao.roa
Signing time: Wed 15 Jul 2026 13:31:46 +0000
ROA not before: Wed 15 Jul 2026 13:31:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34346
IP address blocks: 87.232.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:65:f9:f0:98:d3:b8:59:3d:a5:50:e2:f9:ff:44:70:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Validity
Not Before: Jul 15 13:31:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f41e49e6a29f5c3d48b05583880d729b4397fdaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:20:67:42:18:dd:dc:28:b8:18:3c:07:e2:ca:
5b:7d:8e:b8:9d:de:40:42:11:9b:6c:1d:87:42:4a:
3c:6c:c8:ad:ef:ba:f8:6d:35:da:a7:af:8c:21:e9:
1b:d0:bf:5b:ae:78:fe:ba:27:72:94:b9:42:aa:1f:
c1:52:90:88:9c:ca:37:2e:1f:46:cf:6b:f8:61:8a:
9b:33:be:a8:98:cb:bc:be:16:60:bf:a2:ed:90:3a:
40:2a:12:cd:a5:c1:bd:a6:ed:7c:3c:a2:ac:46:6f:
b2:e5:e2:03:16:ce:44:8a:33:36:4d:11:6f:b2:fd:
8a:6b:1a:6b:4f:47:fd:82:61:d8:f8:cf:14:9d:54:
6d:14:b3:66:55:dd:97:0b:90:7f:e5:98:4d:27:7b:
92:96:c5:98:d6:47:70:a5:4d:6d:c3:3f:9b:5d:d9:
3a:25:04:10:a3:20:d5:29:8f:d8:e8:99:d2:2b:17:
5b:eb:9d:2c:76:c3:dd:98:b9:8e:c2:e9:80:8b:13:
8d:05:9b:11:48:d1:02:00:e7:e0:33:cb:17:5f:81:
de:a0:cf:21:32:5d:bd:a7:7a:94:5f:cd:1b:50:e5:
b2:7e:f7:bd:b7:e3:2f:e3:81:61:f3:9d:bd:21:5d:
91:e4:37:b7:90:79:57:5f:72:50:de:90:fd:9c:bd:
f7:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:1E:49:E6:A2:9F:5C:3D:48:B0:55:83:88:0D:72:9B:43:97:FD:AA
X509v3 Authority Key Identifier:
keyid:5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/9B5J5qKfXD1IsFWDiA1ym0OX_ao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.232.94.0/24
Signature Algorithm: sha256WithRSAEncryption
73:3f:af:be:30:24:8d:65:43:f3:d4:01:2c:52:0a:72:8f:ac:
09:68:e9:50:c0:d6:8f:84:d4:e2:6b:6e:31:cb:40:57:13:1c:
f0:d3:07:82:24:d9:e9:9d:1f:eb:99:50:ec:90:ae:06:b0:0e:
f5:65:03:7f:c7:82:34:35:d5:70:da:96:88:21:27:2d:a2:b6:
fc:6d:67:1c:73:43:bf:7c:09:fe:bd:08:36:63:16:01:e3:2e:
37:25:11:39:66:31:f8:2a:6a:e8:31:29:ae:29:ad:63:64:cf:
2c:54:6b:ec:44:39:4d:d9:47:f2:08:07:be:c3:de:a7:f6:8d:
66:41:06:2e:a6:44:ea:b7:d3:f9:00:99:bb:25:9d:82:92:e4:
02:3d:a6:82:7b:35:6f:dc:c1:c6:32:66:a9:14:93:78:f0:6e:
a4:0b:16:35:a9:42:f3:f4:e3:0a:e3:a4:9d:f7:8d:6c:22:21:
3a:84:ad:02:c6:66:94:35:9a:71:77:b3:cb:81:9d:18:79:5c:
7b:13:34:22:10:1b:52:7d:8c:1d:ae:ad:3d:d4:7f:5f:03:31:
4e:27:01:66:ea:2b:d2:6a:44:ac:2d:e5:5b:00:5f:01:83:06:
74:35:dd:3c:ad:71:55:02:3c:d0:ff:f9:6b:e2:87:7a:9f:01:
a7:26:49:0a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ9l+fCY07hZPaVQ4vn/RHC8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmZTUzYzBiZmMzYzhmYjU2YjgxMTkxMzE3MTQ0NDQzZTBl
MjlkMjUwHhcNMjYwNzE1MTMzMTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNDFlNDllNmEyOWY1YzNkNDhiMDU1ODM4ODBkNzI5YjQzOTdmZGFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAriBnQhjd3Ci4GDwH4spbfY64nd5A
QhGbbB2HQko8bMit77r4bTXap6+MIekb0L9brnj+uidylLlCqh/BUpCInMo3Lh9G
z2v4YYqbM76omMu8vhZgv6LtkDpAKhLNpcG9pu18PKKsRm+y5eIDFs5EijM2TRFv
sv2KaxprT0f9gmHY+M8UnVRtFLNmVd2XC5B/5ZhNJ3uSlsWY1kdwpU1twz+bXdk6
JQQQoyDVKY/Y6JnSKxdb650sdsPdmLmOwumAixONBZsRSNECAOfgM8sXX4HeoM8h
Ml29p3qUX80bUOWyfve9t+Mv44Fh8529IV2R5De3kHlXX3JQ3pD9nL33UwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPQeSeain1w9SLBVg4gNcptDl/2qMB8GA1UdIwQY
MBaAFF/lPAv8PI+1a4EZExcUREPg4p0lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWC1VOENfdzhqN1ZyZ1JrVEZ4UkVRLURpblNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9iYzYwODktM2Q5MC00NTI5LWJiNDct
NWNmNTZlZTQzNWIzLzEvOUI1SjVxS2ZYRDFJc0ZXRGlBMXltME9YX2FvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC9iYzYwODktM2Q5MC00NTI5LWJiNDctNWNmNTZlZTQzNWIz
LzEvWC1VOENfdzhqN1ZyZ1JrVEZ4UkVRLURpblNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV+heMA0G
CSqGSIb3DQEBCwUAA4IBAQBzP6++MCSNZUPz1AEsUgpyj6wJaOlQwNaPhNTia24x
y0BXExzw0weCJNnpnR/rmVDskK4GsA71ZQN/x4I0NdVw2paIISctorb8bWccc0O/
fAn+vQg2YxYB4y43JRE5ZjH4KmroMSmuKa1jZM8sVGvsRDlN2UfyCAe+w96n9o1m
QQYupkTqt9P5AJm7JZ2CkuQCPaaCezVv3MHGMmapFJN48G6kCxY1qULz9OMK46Sd
941sIiE6hK0CxmaUNZpxd7PLgZ0YeVx7EzQiEBtSfYwdrq091H9fAzFOJwFm6ivS
akSsLeVbAF8BgwZ0Nd08rXFVAjzQ//lr4od6nwGnJkkK
-----END CERTIFICATE-----
Generated at Tue Jul 21 14:26:38 2026 by rpki-client