Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/LdkzKbOc6UBBYQHPpJdrnxEq4OU.roa
File: LdkzKbOc6UBBYQHPpJdrnxEq4OU.roa (raw, json)
Hash identifier: S6QhP5xEUXEZ2xSFH+U8Yf9LI+j3ApeUra07WFUy0N0=
Subject key identifier: 2D:D9:33:29:B3:9C:E9:40:41:61:01:CF:A4:97:6B:9F:11:2A:E0:E5
Certificate issuer: /CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Certificate serial: 01A01491B2203380F0110AB42645B12AE21F
Authority key identifier: 5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/LdkzKbOc6UBBYQHPpJdrnxEq4OU.roa
Signing time: Tue 18 Aug 2026 11:11:27 +0000
ROA not before: Tue 18 Aug 2026 11:11:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13335
IP address blocks: 87.232.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 20:55:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:14:91:b2:20:33:80:f0:11:0a:b4:26:45:b1:2a:e2:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Validity
Not Before: Aug 18 11:11:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2dd93329b39ce940416101cfa4976b9f112ae0e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:7e:86:56:23:69:50:d2:62:a3:2a:ac:14:e1:
5c:ab:96:41:ea:ba:bb:97:40:7d:35:37:33:a1:58:
30:35:29:f0:32:49:41:3a:72:9d:f4:d2:f4:b7:05:
8f:1f:cb:7b:93:ab:4e:58:5d:25:66:45:c4:54:8a:
bb:45:8d:d7:71:da:a3:9f:f7:1f:c6:0c:91:a5:ee:
4c:10:fb:ca:b5:7d:96:b6:64:4f:48:ca:c0:ab:1d:
ed:7d:82:df:d6:28:16:0b:b7:7d:d9:6f:51:b4:6a:
7c:7a:41:97:bb:c3:eb:f3:87:e3:56:1e:f0:d8:43:
67:c2:75:fd:e6:4e:aa:66:ac:15:31:91:1d:43:07:
7f:0c:4f:92:f3:e4:98:e7:7a:68:e5:f9:21:57:b6:
c3:7d:c6:df:c6:c6:68:53:52:2d:23:85:19:cb:c7:
bb:b2:06:84:a3:ce:03:6d:4a:8b:bb:33:3b:2e:a4:
81:12:4f:40:37:54:41:82:5e:57:4b:b6:96:e4:2e:
6f:07:f3:fc:bb:02:24:2d:bf:d3:2e:8d:67:50:aa:
97:19:ae:37:aa:2d:3a:df:2d:7c:88:6d:34:97:38:
16:06:12:5f:90:d8:05:0b:59:b1:b5:3f:b7:fe:2b:
63:10:6c:e1:21:a2:3d:b7:50:71:38:2b:5d:4e:1a:
6e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:D9:33:29:B3:9C:E9:40:41:61:01:CF:A4:97:6B:9F:11:2A:E0:E5
X509v3 Authority Key Identifier:
keyid:5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/LdkzKbOc6UBBYQHPpJdrnxEq4OU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.232.80.0/24
Signature Algorithm: sha256WithRSAEncryption
01:8a:8c:3c:1b:d5:84:52:48:24:ab:50:84:8d:96:9c:c5:14:
73:0f:90:d4:9c:76:c6:37:e1:ad:f6:1e:f4:9c:3e:79:51:f9:
82:ee:07:60:cc:8a:15:13:16:70:c5:5a:bb:22:ac:e2:5f:94:
f8:2c:f7:1d:2b:bb:c5:87:b1:0b:03:d3:ca:32:d6:7d:ac:54:
60:ad:f3:78:5d:2e:c1:64:c1:4e:e4:85:9f:21:40:7c:65:24:
c2:47:8d:45:f8:b4:28:42:0e:b6:9d:35:a1:1d:1b:bb:30:c5:
d3:6f:f3:9c:f9:34:76:7e:7f:b4:e3:17:3c:a9:81:03:5c:f3:
6a:2b:51:4d:8b:17:7a:5e:32:8a:7d:c1:ff:44:62:16:58:5e:
28:b5:c6:1c:20:a7:92:a8:15:87:30:b1:4f:e4:d7:4c:e3:5a:
02:ff:ef:94:39:be:60:bc:fb:b5:91:7b:0e:79:b6:0c:c9:91:
04:fe:63:76:ed:41:ae:47:42:db:54:6d:96:c7:7b:8d:da:83:
89:5c:cb:55:f5:7b:20:0b:84:73:0f:38:e8:8c:d5:23:86:60:
8c:3e:41:10:65:42:72:11:dc:d9:97:ec:bd:b8:e3:30:cb:32:
e8:e0:40:9f:f9:7c:d4:b5:52:a3:dc:13:12:db:90:a3:22:ca:
01:c5:f4:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:43:11 2026 by rpki-client