Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/DOUx_2MaMF-aZh3w8fO-8eH1rrM.roa
File: DOUx_2MaMF-aZh3w8fO-8eH1rrM.roa (raw, json)
Hash identifier: Af6839Svw8VxmvbqJKqiP4NtyE1s8u+2Xv6uLhQKQ3c=
Subject key identifier: 0C:E5:31:FF:63:1A:30:5F:9A:66:1D:F0:F1:F3:BE:F1:E1:F5:AE:B3
Certificate issuer: /CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Certificate serial: 019EADD7A604896F49C01CD962E930915FB9
Authority key identifier: 5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/DOUx_2MaMF-aZh3w8fO-8eH1rrM.roa
Signing time: Tue 09 Jun 2026 19:24:11 +0000
ROA not before: Tue 09 Jun 2026 19:24:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214128
IP address blocks: 87.232.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ad:d7:a6:04:89:6f:49:c0:1c:d9:62:e9:30:91:5f:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Validity
Not Before: Jun 9 19:24:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0ce531ff631a305f9a661df0f1f3bef1e1f5aeb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:49:93:c1:6e:66:5e:33:b1:66:be:8e:fa:45:
b9:b9:1e:80:5f:6f:e3:6e:78:c8:2f:84:f2:cf:58:
43:f5:0b:ca:66:b1:ee:fa:a7:4b:6b:da:c1:be:61:
65:e7:e7:5a:02:0a:13:bb:c9:b8:49:72:3b:0a:b9:
ab:97:35:83:4f:99:8f:f3:bb:7c:68:1f:10:c8:5c:
ab:e2:d7:f5:f9:60:4e:83:d2:fd:54:1c:e2:d6:3a:
00:c7:8f:b2:22:d2:d1:0b:57:60:8d:f3:80:90:b4:
84:c9:e1:9c:5e:54:74:b6:94:d4:bd:2e:af:36:6f:
a6:5f:13:66:da:6e:e1:ab:ee:b1:56:c5:8d:7c:21:
72:24:d4:a3:69:fd:c6:bc:17:63:95:e7:f1:f3:fc:
11:ba:53:56:40:4b:0f:61:55:28:a8:7e:c4:e7:8c:
01:90:0d:d1:02:70:77:f7:c1:fe:18:a8:1e:5d:8d:
d9:31:e2:39:a0:3c:a4:98:72:5a:a6:6d:cf:eb:44:
03:ea:a8:98:63:58:13:ae:70:64:95:4c:d6:2b:e3:
23:29:f9:d9:66:7b:49:83:44:67:c5:45:44:54:fa:
4f:3c:78:24:db:b7:45:13:de:59:be:ca:e0:a9:a8:
fc:54:4d:85:18:7e:55:8b:a9:57:3f:69:e2:01:3d:
4b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:E5:31:FF:63:1A:30:5F:9A:66:1D:F0:F1:F3:BE:F1:E1:F5:AE:B3
X509v3 Authority Key Identifier:
keyid:5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/DOUx_2MaMF-aZh3w8fO-8eH1rrM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.232.82.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:8b:29:fa:08:e6:e4:8c:37:e5:3c:af:32:ac:ce:6f:b1:9b:
42:1c:f8:9a:67:d2:8f:1d:64:52:3f:c6:ba:45:b1:6c:b4:44:
65:1b:6d:48:d4:ca:0d:a3:6f:d3:19:9d:13:fb:21:1d:86:0e:
0d:a3:cd:23:83:0a:1e:b1:ed:38:6f:59:90:8a:19:15:c0:8d:
6a:7e:33:35:1c:a4:3b:5a:37:55:a7:03:43:1c:1b:e7:5e:d2:
de:ff:ef:c1:0e:5e:c2:bd:5d:69:65:e1:9d:99:ea:f9:db:fd:
4f:20:4c:84:a9:49:df:e7:a8:9b:23:fd:50:9f:df:42:66:61:
c0:ed:c8:3c:8a:a3:61:04:89:18:9e:69:d8:03:94:11:58:c1:
8b:ca:b7:58:9e:e4:e4:42:99:59:50:b2:7b:48:d5:36:d8:c1:
d7:ea:64:07:28:af:1b:28:25:f9:10:5f:ae:38:80:43:ef:0b:
cf:5c:14:24:cb:4a:52:bd:c8:2a:4c:6a:52:e6:3e:a6:fa:db:
21:51:33:53:47:7a:9c:a7:65:81:7c:25:ca:89:e1:f7:b9:a3:
6a:b9:73:a7:0b:7d:bb:0a:44:e3:4a:ff:55:3c:66:30:fb:8c:
6a:b4:06:65:b7:a1:5f:a4:38:9d:96:f1:5d:72:b8:34:e2:ff:
e8:1c:c3:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 19:31:12 2026 by rpki-client