Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/odP_tu4Qqj6jcLJyYt165b0eR40.roa
File: odP_tu4Qqj6jcLJyYt165b0eR40.roa (raw, json)
Hash identifier: qf3TW4M4X4auipfeudhT4GkQaRjeDzCUdDEFgr7W74Y=
Subject key identifier: A1:D3:FF:B6:EE:10:AA:3E:A3:70:B2:72:62:DD:7A:E5:BD:1E:47:8D
Certificate issuer: /CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Certificate serial: 01A12F0D8C35C457001EC332B63CB52446CC
Authority key identifier: 5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/odP_tu4Qqj6jcLJyYt165b0eR40.roa
Signing time: Mon 12 Oct 2026 07:39:39 +0000
ROA not before: Mon 12 Oct 2026 07:39:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34346
IP address blocks: 87.232.89.0/24 maxlen: 24
87.232.90.0/24 maxlen: 24
89.126.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2f:0d:8c:35:c4:57:00:1e:c3:32:b6:3c:b5:24:46:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Validity
Not Before: Oct 12 07:39:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a1d3ffb6ee10aa3ea370b27262dd7ae5bd1e478d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:18:12:fb:1a:57:ac:2e:da:43:4a:7f:71:a8:
d2:19:7c:67:58:18:db:82:58:d2:31:8d:3d:a7:32:
8b:13:40:c4:b7:e8:14:f9:96:d8:7b:20:34:d3:fb:
4f:84:a5:6e:8f:4b:b5:34:2f:f3:85:24:b4:0c:3c:
06:8e:2a:ac:3f:c9:93:91:99:af:8b:3c:cf:09:0e:
45:f7:41:75:56:2a:3c:16:ac:58:0d:3f:68:65:03:
5c:8e:7a:b3:8d:61:b7:b1:a7:2e:8a:18:ae:07:02:
af:90:f1:2a:a0:f2:f2:97:28:e1:d1:c5:23:57:be:
ea:15:9a:0d:09:3b:06:2a:e1:0b:8d:99:1e:ac:39:
7a:c3:f5:6d:57:1d:6f:a6:49:e6:3d:fd:91:c5:05:
fa:58:73:0e:c0:06:a7:1c:18:7b:d5:0c:ef:7a:fc:
97:dd:3d:46:e8:c4:06:1f:ff:06:2e:8f:2f:c0:18:
b3:8c:5f:ba:42:11:ec:ee:1a:b2:68:bb:33:b2:35:
04:5f:0f:18:34:33:0c:a9:7d:8d:cb:67:09:ed:ed:
52:13:d8:83:f1:be:0e:e5:92:49:37:15:59:2a:84:
92:23:bc:f5:5d:6e:1e:62:9c:f2:25:e0:a2:55:c6:
25:ac:c2:5d:8a:3c:0f:df:88:34:37:47:47:9a:37:
a8:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:D3:FF:B6:EE:10:AA:3E:A3:70:B2:72:62:DD:7A:E5:BD:1E:47:8D
X509v3 Authority Key Identifier:
keyid:5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/odP_tu4Qqj6jcLJyYt165b0eR40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.232.89.0-87.232.90.255
89.126.229.0/24
Signature Algorithm: sha256WithRSAEncryption
55:88:1b:9e:84:2e:df:bd:73:a8:04:8d:23:1e:ec:90:b9:cd:
04:12:c6:35:4a:e0:d1:5d:db:5e:f0:81:a4:7d:04:4a:e2:a1:
21:a6:84:73:e9:f7:67:91:de:c0:cd:b6:7d:9c:c8:d2:da:9e:
fc:44:f3:07:2d:a4:e3:95:43:78:1a:08:fb:33:7a:de:84:4f:
66:6c:6e:ad:b0:fb:19:91:99:1b:a8:1c:c3:ed:b8:0a:01:5c:
31:2f:1c:31:15:b3:78:6c:62:eb:67:0c:e1:a3:12:10:b9:fa:
3b:8d:54:a3:12:06:2f:d8:8a:f3:15:08:5a:47:d5:0d:af:b4:
56:e1:07:06:b0:1e:99:f3:88:30:25:5b:b3:36:ed:31:49:1d:
cd:50:10:38:51:d6:90:b0:0e:d0:b0:b0:92:a8:c4:03:a0:a5:
49:21:cb:31:68:27:19:53:2f:4f:3d:8e:77:e2:d2:61:96:85:
9b:47:80:f9:27:79:f9:cc:57:e4:ec:00:52:34:1d:31:87:e9:
10:78:93:dc:80:33:9b:98:7d:9b:04:e9:ea:3c:98:84:2d:7c:
f9:25:18:ef:2a:c2:be:21:cb:2b:bd:be:c9:36:2b:53:79:ed:
75:6c:5c:27:b7:62:a9:fa:d0:28:41:9d:54:be:2f:a6:59:da:
82:d9:79:6d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Oct 28 06:14:45 2026 by rpki-client