Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/K20O1LNdxX8yiE6Ps6AczFXodFA.roa
File: K20O1LNdxX8yiE6Ps6AczFXodFA.roa (raw, json)
Hash identifier: LsuBaF6vMVzDdLyo2A5xHXhmYn4XC7r0U8c2emJa90s=
Subject key identifier: 2B:6D:0E:D4:B3:5D:C5:7F:32:88:4E:8F:B3:A0:1C:CC:55:E8:74:50
Certificate issuer: /CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Certificate serial: 019DB01DF639C435531D1014FF0E488B4FE0
Authority key identifier: 5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/K20O1LNdxX8yiE6Ps6AczFXodFA.roa
Signing time: Tue 21 Apr 2026 12:57:26 +0000
ROA not before: Tue 21 Apr 2026 12:57:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31715
IP address blocks: 87.232.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 May 2026 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b0:1d:f6:39:c4:35:53:1d:10:14:ff:0e:48:8b:4f:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Validity
Not Before: Apr 21 12:57:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2b6d0ed4b35dc57f32884e8fb3a01ccc55e87450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9f:36:75:fa:ae:52:3f:81:9c:1a:66:0f:b3:
e0:33:47:00:78:66:6b:dc:38:6f:c0:9d:77:42:34:
45:84:45:9f:b7:98:48:94:d7:1b:f4:de:00:5f:2f:
fc:34:c2:3f:f0:d9:d9:7d:8e:9a:85:a2:19:7e:a7:
3a:35:bf:7d:7f:7c:2f:fe:96:f2:30:73:42:62:97:
38:fd:24:7a:45:f3:34:a2:21:6d:74:f5:b6:4c:bc:
1d:ce:50:a0:1e:e3:43:11:56:a4:4d:8d:ff:54:a3:
a9:19:58:7e:ce:9d:16:ff:74:c3:e6:bb:ee:7d:76:
39:3e:ba:46:e9:c6:c9:73:bf:e2:0e:75:e4:30:33:
51:15:be:6b:b8:00:71:00:03:fd:5f:bd:16:ca:ae:
75:df:17:71:4c:1e:1c:cc:88:da:6f:85:d5:52:e0:
e3:b4:71:1e:f6:68:c8:c4:3c:b5:f0:d1:3c:4b:7f:
74:3f:a6:b4:df:09:a7:d4:f2:ba:03:1e:b9:de:43:
a2:a5:43:41:7c:80:96:a2:98:e9:5e:91:62:d9:9e:
2c:fd:23:0e:db:af:a0:27:f9:a9:2a:bb:3a:79:5d:
59:3f:c4:7f:aa:f0:dd:77:d7:ef:6a:07:17:f3:73:
81:d7:fb:c8:ce:1a:2a:f3:a0:f1:f0:ff:a2:ac:0b:
51:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:6D:0E:D4:B3:5D:C5:7F:32:88:4E:8F:B3:A0:1C:CC:55:E8:74:50
X509v3 Authority Key Identifier:
keyid:5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/K20O1LNdxX8yiE6Ps6AczFXodFA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.232.91.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:f8:4f:99:ba:38:20:7e:15:d2:31:0e:cd:11:06:a9:6b:b0:
43:31:47:ad:93:64:64:37:80:06:b0:05:84:c0:8d:4b:4e:83:
67:62:47:5d:8a:23:20:20:45:78:3e:85:d5:b5:c5:0e:79:13:
e1:8e:a3:ca:a3:86:04:df:ba:10:b7:f5:c0:43:1c:02:75:cf:
5a:4a:d8:0b:2c:1a:fd:56:ba:90:8c:cb:2e:5b:fa:50:12:51:
3e:4b:8c:1a:3e:86:d5:68:63:69:37:5b:98:9f:8c:82:cc:2d:
a7:8e:21:b5:eb:68:1d:92:81:4f:f7:78:5b:d7:0b:16:e0:d7:
85:df:18:c0:89:0d:b2:1a:fc:1c:f1:73:5c:66:11:6c:e9:05:
9f:b7:ea:34:2e:0b:f3:db:40:bc:4b:41:61:19:3a:0d:14:2f:
d7:49:96:07:db:07:6a:b9:f3:38:51:81:16:9b:43:7d:12:76:
b4:b8:ab:fd:c4:67:95:23:57:85:cc:e7:4f:8f:80:0a:17:bb:
39:45:6a:de:e8:f6:2a:e3:40:a5:41:32:c5:50:b1:46:b6:cc:
87:cb:81:1d:33:85:5f:e6:1d:d8:d3:2d:97:0c:dc:a6:ae:95:
f8:fb:1f:6b:f5:06:75:4c:17:7d:3f:c5:1c:42:a1:7a:35:23:
34:31:08:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 18:41:59 2026 by rpki-client