Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/kKCjtHTWpgSuDYQ2Ih8k3oTxq1U.roa
File: kKCjtHTWpgSuDYQ2Ih8k3oTxq1U.roa (raw, json)
Hash identifier: ccaf/y2lyIsS34b8HqAMhcrbWXvbgJhpXD9H6EQWioY=
Subject key identifier: 90:A0:A3:B4:74:D6:A6:04:AE:0D:84:36:22:1F:24:DE:84:F1:AB:55
Certificate issuer: /CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Certificate serial: 01A04A2D0DE4A46F3BDA4BF25AC64FCC8F92
Authority key identifier: 5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/kKCjtHTWpgSuDYQ2Ih8k3oTxq1U.roa
Signing time: Fri 28 Aug 2026 21:01:01 +0000
ROA not before: Fri 28 Aug 2026 21:01:01 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49981
IP address blocks: 87.232.81.0/24 maxlen: 24
87.232.85.0/24 maxlen: 24
89.126.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:4a:2d:0d:e4:a4:6f:3b:da:4b:f2:5a:c6:4f:cc:8f:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Validity
Not Before: Aug 28 21:01:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=90a0a3b474d6a604ae0d8436221f24de84f1ab55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:44:e3:74:ae:10:6d:e6:bb:a3:0b:fc:b7:e9:
6e:07:83:86:31:ca:07:d2:50:6f:07:7f:d6:12:8b:
d8:e2:fc:b7:c2:d5:84:04:d3:b0:d9:30:ff:a4:a2:
21:af:59:1b:96:34:6a:18:44:f4:6b:af:12:6f:50:
49:8a:4f:bd:ff:80:30:b2:30:44:6a:de:28:9a:e5:
3c:4c:fe:75:6d:b2:2b:f5:10:fc:8d:c6:af:ae:a5:
c9:16:d8:42:83:6d:c1:49:36:3e:fd:fa:24:fd:fd:
8f:e0:26:49:d5:1a:1a:22:55:62:73:45:0d:51:98:
15:2e:ea:77:c4:dd:46:5c:74:78:c1:96:21:57:04:
0e:dd:b0:0d:51:4b:2f:b7:52:f6:1f:0d:90:d7:7b:
99:ab:ce:35:78:97:8c:3b:08:5c:ae:59:4d:87:5c:
b4:45:50:fd:91:77:b1:b6:6a:29:f3:9d:d8:17:bc:
b0:47:ee:06:b9:cf:f1:e6:e3:a7:67:c3:91:2f:36:
46:b5:14:fe:13:d6:df:33:9c:d7:70:4d:25:02:57:
ce:ea:1e:ad:68:8b:67:f0:59:52:8e:c7:c0:55:1b:
87:89:0f:00:1f:e0:39:bc:2e:71:a5:2a:26:ea:c1:
19:5f:e1:0f:b8:bd:a1:8a:2e:b9:81:e4:4f:17:e8:
34:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:A0:A3:B4:74:D6:A6:04:AE:0D:84:36:22:1F:24:DE:84:F1:AB:55
X509v3 Authority Key Identifier:
keyid:5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/kKCjtHTWpgSuDYQ2Ih8k3oTxq1U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.232.81.0/24
87.232.85.0/24
89.126.227.0/24
Signature Algorithm: sha256WithRSAEncryption
72:c2:61:65:11:f1:24:cf:cb:95:8d:0c:73:3b:ef:32:8e:e5:
94:71:41:bd:23:a5:04:05:27:dd:85:7d:d7:aa:e7:63:40:02:
42:e1:a3:c2:49:18:1a:88:2c:c4:06:5e:b0:79:99:99:84:3c:
32:8c:66:8d:42:a2:59:90:01:07:28:b4:00:ca:29:87:ba:25:
65:8b:7e:17:20:bb:ee:86:13:a7:28:b1:c8:f2:e7:90:f9:37:
f4:6a:ef:03:4f:ae:d6:8c:f1:d5:e5:30:58:88:e9:f2:9c:ca:
4d:51:93:bd:0f:59:ac:b0:b6:96:97:c9:f5:4f:fe:ee:19:0d:
4a:fc:0f:27:fc:e4:53:cb:17:bd:54:85:26:21:18:2f:3f:14:
e1:02:40:77:20:75:18:9e:e5:ed:45:5f:98:29:3e:82:a3:c5:
09:ff:c3:55:35:8d:c1:97:9f:74:49:de:11:0e:7d:a9:b8:8d:
d1:b5:59:c3:c6:c4:e0:d3:3e:21:c8:31:f3:47:04:2e:10:48:
eb:03:6a:ea:4c:60:08:ee:d5:c8:be:e1:39:86:8e:7c:41:6f:
5f:66:c3:f9:5c:f9:91:b5:d3:ec:10:28:b8:ae:11:ed:1b:16:
9a:cd:d3:d1:fa:cc:e3:c1:45:32:b1:6c:5d:ce:67:21:7d:40:
f9:5a:bd:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 23:30:40 2026 by rpki-client