Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/s_8exuQTcAjiBuqj7Kb6yyZ3URY.roa
File: s_8exuQTcAjiBuqj7Kb6yyZ3URY.roa (raw, json)
Hash identifier: 9D4USD9s5nLllsPvmxgsIDc6aBZr9W6ksocrmvoCt7c=
Subject key identifier: B3:FF:1E:C6:E4:13:70:08:E2:06:EA:A3:EC:A6:FA:CB:26:77:51:16
Certificate issuer: /CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Certificate serial: 019E7E5345A78F112A8D8DAF91468F2E0AE3
Authority key identifier: 5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/s_8exuQTcAjiBuqj7Kb6yyZ3URY.roa
Signing time: Sun 31 May 2026 13:57:27 +0000
ROA not before: Sun 31 May 2026 13:57:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 19318
IP address blocks: 87.232.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 06:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:7e:53:45:a7:8f:11:2a:8d:8d:af:91:46:8f:2e:0a:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Validity
Not Before: May 31 13:57:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b3ff1ec6e4137008e206eaa3eca6facb26775116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:3b:18:ab:66:9e:ad:5c:c4:9b:16:f1:22:7f:
45:48:ae:7d:23:e8:6b:03:ce:da:96:05:3f:50:b5:
93:17:b7:04:51:b1:ae:05:a6:76:56:96:b8:71:dc:
cc:e6:b6:f0:2f:fb:f3:41:cd:e1:c9:c3:30:96:ef:
bb:3c:78:05:28:b9:95:1f:ff:be:b1:6b:ab:f2:22:
67:45:4b:b0:10:5b:e0:1f:59:72:76:1a:e1:d3:1e:
30:ef:f1:d3:a1:1c:6a:0f:e9:86:a4:c5:9d:27:15:
f9:3c:b3:10:2a:de:50:7c:28:3b:32:a5:e2:c7:04:
4f:44:ae:91:1f:89:59:0c:82:50:c0:59:9e:d8:b9:
f1:7d:06:0a:71:85:85:2f:8d:91:35:a6:b8:e9:52:
23:ff:2f:8d:91:bc:11:bd:0d:e0:77:e5:fd:0c:a2:
e5:10:89:84:d9:3a:da:66:a3:b2:72:4c:9b:71:ff:
8d:2e:52:82:be:85:b7:8e:71:be:53:7a:b0:77:94:
e3:39:d4:57:9c:b3:2b:9d:2d:dd:d9:2f:5a:5f:8b:
b7:8b:bc:61:e2:75:dc:17:e4:75:77:f8:34:4e:ee:
59:df:03:df:af:86:40:6b:17:f5:90:91:78:a0:e7:
26:17:7e:b6:a2:09:6b:0a:c2:bd:35:77:dc:88:22:
ee:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:FF:1E:C6:E4:13:70:08:E2:06:EA:A3:EC:A6:FA:CB:26:77:51:16
X509v3 Authority Key Identifier:
keyid:5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/s_8exuQTcAjiBuqj7Kb6yyZ3URY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.232.87.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:52:9b:ea:eb:f0:ff:8c:5e:eb:1b:ef:cb:e3:16:0c:66:a7:
b5:29:4e:0c:f9:c4:87:0a:7e:b6:48:3c:eb:83:63:9c:fe:13:
fe:0f:5d:67:28:ca:d6:7c:77:d0:bc:94:8f:b0:69:d3:cd:e4:
cf:40:1d:a5:99:4f:2e:a3:33:58:12:79:10:01:4a:91:a9:c4:
3b:72:ae:0f:4b:74:c8:14:ad:d9:34:1a:21:bb:0e:78:82:03:
4e:e3:8d:54:ca:3d:ae:b5:c5:8f:7f:ab:75:b0:d1:36:46:bd:
6a:b6:a7:47:5f:1f:f6:ec:e1:70:01:bc:93:2c:ca:44:fc:9e:
15:d0:f6:46:41:ad:d8:32:85:11:5b:1a:e0:ef:23:dc:8e:eb:
93:9c:64:19:f4:6c:b1:8d:82:49:9d:2e:f1:a2:c3:33:94:d3:
e1:a0:1f:98:0e:65:ce:b5:f3:04:49:05:6a:2a:6d:d0:93:27:
08:c9:f6:0f:70:55:8e:69:7c:63:5b:b4:fc:05:6a:58:02:af:
ee:c2:2f:11:bc:a0:21:92:56:db:16:aa:f9:08:86:23:0d:20:
fe:70:e0:4a:59:76:16:17:1d:7c:2b:11:18:79:00:3c:7d:22:
9a:19:62:3e:62:7d:0b:e0:14:ae:ba:48:d5:7b:57:d8:8e:bd:
96:91:2a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 11:18:54 2026 by rpki-client