Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/_WVvxijVOJCbwVOs6ciBKSNnc_U.roa
File: _WVvxijVOJCbwVOs6ciBKSNnc_U.roa (raw, json)
Hash identifier: ndRIYPi9oksibBjypicQbMGnUvDbKblSs0O807Bnnwo=
Subject key identifier: FD:65:6F:C6:28:D5:38:90:9B:C1:53:AC:E9:C8:81:29:23:67:73:F5
Certificate issuer: /CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Certificate serial: 019DCFAC87C6DEC447BE35BE256B1ED4F007
Authority key identifier: 5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/_WVvxijVOJCbwVOs6ciBKSNnc_U.roa
Signing time: Mon 27 Apr 2026 16:01:23 +0000
ROA not before: Mon 27 Apr 2026 16:01:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214557
IP address blocks: 87.232.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:ac:87:c6:de:c4:47:be:35:be:25:6b:1e:d4:f0:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Validity
Not Before: Apr 27 16:01:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fd656fc628d538909bc153ace9c88129236773f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2e:0f:a9:04:4a:e9:24:3d:c5:d0:ea:e5:4b:
19:e7:7d:b1:8f:de:a3:0a:94:3b:1f:d8:eb:b1:ef:
6b:f4:ac:ac:44:41:d7:96:fb:45:eb:94:a5:33:d0:
74:2c:62:37:f1:42:e7:b9:ba:64:32:a4:00:27:06:
62:47:b8:0b:5a:87:08:4f:06:02:76:01:fb:1e:e4:
db:31:94:71:fc:99:90:c7:05:cc:8f:61:b0:82:6e:
03:3f:18:66:8c:e7:7b:61:10:9a:17:3c:35:93:25:
a7:1e:52:93:99:3a:af:90:b9:3b:47:bb:65:fc:8d:
f4:d4:4b:84:e1:d4:fc:21:f9:8f:95:c2:e6:02:92:
bd:76:6d:fe:c4:0d:1d:4d:27:3e:88:ba:4d:2d:a8:
b0:65:0a:f1:fb:ec:46:ae:b2:d1:16:a5:43:2b:0c:
7e:12:f2:1c:ab:2e:63:f1:d2:54:69:a2:ae:28:af:
ef:cd:32:8f:7c:8d:6c:04:e5:b9:be:01:e1:70:b4:
54:a1:b9:df:66:69:1f:44:8d:7c:84:b6:a3:01:9e:
b5:b2:b9:4a:52:56:08:2b:73:75:f0:d7:f2:e6:6e:
dc:86:86:32:b9:6e:8b:45:6b:33:b7:3b:ae:53:ec:
cb:60:5e:fc:ad:9d:10:da:07:03:30:48:92:45:13:
f5:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:65:6F:C6:28:D5:38:90:9B:C1:53:AC:E9:C8:81:29:23:67:73:F5
X509v3 Authority Key Identifier:
keyid:5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/_WVvxijVOJCbwVOs6ciBKSNnc_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.232.84.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:7a:3e:f5:a4:f6:a3:77:43:7d:0e:d6:5e:58:65:64:32:76:
de:05:16:ed:e6:11:be:35:32:fb:b1:d5:e8:48:2b:d4:22:a5:
f2:7b:f9:58:f5:a7:76:c0:6b:e9:bd:dd:2d:63:7a:32:58:aa:
0c:d8:3c:26:7d:9a:d5:c7:5b:c9:4b:02:5e:40:d1:44:94:42:
22:82:ac:90:9a:0a:a7:53:2d:55:ee:33:f3:f6:46:74:e8:ea:
da:d8:97:75:e8:9e:93:08:de:7c:aa:73:20:b1:ec:b5:4f:8d:
d8:38:d8:27:77:12:27:ce:98:98:0a:ea:b1:e4:91:3d:ed:f5:
f1:7b:50:46:0c:3b:84:71:ff:e8:13:c5:f1:55:1b:c4:09:90:
d2:ec:c4:5a:43:cf:4f:7e:08:db:8d:d8:d4:60:31:1a:b3:1d:
fc:4c:21:27:63:2f:81:cb:4f:3a:10:ba:4a:48:c9:01:5b:fc:
67:21:fd:ee:7f:f5:70:ea:e5:29:74:72:e6:ef:a5:82:22:16:
70:19:4b:57:f9:95:26:58:f8:66:8c:e4:5c:b1:a4:8f:6b:11:
a8:70:0c:bc:81:5f:43:dc:2c:87:7f:40:8d:ac:e1:98:b7:c2:
16:61:03:54:f1:fe:09:9a:53:62:9d:ff:2a:d1:3e:59:e0:29:
eb:9f:fd:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:39:07 2026 by rpki-client