Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/ppZPPhs9Fk9KthHZECP8i1n-qRw.roa
File: ppZPPhs9Fk9KthHZECP8i1n-qRw.roa (raw, json)
Hash identifier: r3D9XGo0E46YnlFBTi6Wu1H+lI4vmSw50xc2xlIL764=
Subject key identifier: A6:96:4F:3E:1B:3D:16:4F:4A:B6:11:D9:10:23:FC:8B:59:FE:A9:1C
Certificate issuer: /CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Certificate serial: 01A029EE23DEC133DE112FFF07189030195F
Authority key identifier: 5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/ppZPPhs9Fk9KthHZECP8i1n-qRw.roa
Signing time: Sat 22 Aug 2026 14:44:27 +0000
ROA not before: Sat 22 Aug 2026 14:44:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214639
IP address blocks: 87.232.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:29:ee:23:de:c1:33:de:11:2f:ff:07:18:90:30:19:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Validity
Not Before: Aug 22 14:44:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a6964f3e1b3d164f4ab611d91023fc8b59fea91c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:aa:b4:f5:43:08:07:75:36:55:52:a5:06:e8:
2e:22:d8:c4:e1:fd:d1:10:91:a4:6f:88:d9:f9:42:
35:9c:9b:16:a6:0a:b1:f3:c8:fb:e7:59:6d:fc:0d:
5a:e8:0d:b4:75:f5:3f:cb:24:1e:76:c3:47:b2:bc:
9b:14:66:2a:3b:84:6b:fa:74:08:10:35:b8:22:30:
e2:68:c3:b7:99:d7:1d:d3:5f:77:ab:c3:f3:8a:9d:
77:b7:f8:f9:fa:2b:af:e6:06:a7:39:92:32:a1:1f:
dc:63:88:2c:27:fc:50:b9:0e:d5:0d:aa:63:56:61:
46:4d:ad:d7:79:d0:44:0b:17:58:a4:23:f8:72:55:
86:b3:1f:ee:cd:07:bb:dd:73:d6:6f:11:78:d0:98:
9b:77:5a:b5:e9:ee:18:e6:1a:9d:98:47:96:81:7e:
58:7a:56:50:5e:1c:cf:81:83:9d:16:01:93:63:e5:
a4:63:10:cf:4c:3c:2c:ee:bc:a1:88:ea:24:bd:17:
2f:ea:73:6f:d0:9a:f3:be:b7:92:e9:04:78:bb:c5:
8f:23:c9:2c:8c:e5:bd:a2:ca:32:05:e5:15:ff:0f:
d7:1b:65:02:98:93:d2:5e:1d:56:b4:47:77:a9:0c:
82:d9:79:8b:b5:53:3e:ff:e2:0e:65:9a:cc:b2:ed:
bc:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:96:4F:3E:1B:3D:16:4F:4A:B6:11:D9:10:23:FC:8B:59:FE:A9:1C
X509v3 Authority Key Identifier:
keyid:5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/ppZPPhs9Fk9KthHZECP8i1n-qRw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.232.94.0/24
Signature Algorithm: sha256WithRSAEncryption
41:88:21:94:ba:0f:a4:cd:b9:9d:c8:b9:b6:15:c9:64:19:2c:
d9:9b:fc:89:26:48:0e:7d:57:4f:4a:8a:39:61:c1:ab:89:30:
53:a0:4d:3b:cd:2f:b1:87:35:05:0e:8a:ae:d7:a4:16:2a:ed:
66:48:9a:15:19:66:e6:1b:4d:ff:4c:fe:b3:9e:3e:4a:d5:6f:
45:a2:ba:12:88:30:7b:89:76:86:3e:b8:27:a3:db:84:c5:f6:
0b:74:9f:02:75:37:d9:16:40:dd:cc:48:05:4d:34:af:6a:59:
29:18:64:9e:b9:20:cc:c9:f2:89:b4:0e:b4:dd:79:c2:22:e6:
a0:eb:a9:83:9f:41:bb:6b:43:af:c3:4b:5b:05:94:71:09:1b:
2f:00:bf:a4:65:cf:7a:b8:d1:c4:f2:b3:5b:f2:a1:e7:42:ef:
73:3f:de:26:a9:c0:80:d3:2e:42:49:3a:58:f2:01:c9:79:17:
36:2b:22:21:5f:5a:e9:98:c6:42:f7:44:e2:03:87:f0:c2:d0:
60:ca:dd:b6:1d:d1:fc:82:96:e3:5e:1b:92:20:68:22:3d:ae:
1e:f2:f9:93:d3:b1:01:2a:0f:7b:f8:3f:68:9c:fe:19:50:f7:
23:29:f1:9b:55:b7:18:78:22:38:18:fc:bc:9f:5f:65:3b:89:
c9:12:86:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:17:42 2026 by rpki-client