Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/z0vrqpTCe6ahQ1xSVphYcpJM8iU.roa
File: z0vrqpTCe6ahQ1xSVphYcpJM8iU.roa (raw, json)
Hash identifier: VVXK4shTSV8m77AjDesFtLZSStR2bLqnCYfMMx7pEGM=
Subject key identifier: CF:4B:EB:AA:94:C2:7B:A6:A1:43:5C:52:56:98:58:72:92:4C:F2:25
Certificate issuer: /CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Certificate serial: 01A12F0E76F85EFB0037855FADAE66FB6ACD
Authority key identifier: 5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/z0vrqpTCe6ahQ1xSVphYcpJM8iU.roa
Signing time: Mon 12 Oct 2026 07:40:39 +0000
ROA not before: Mon 12 Oct 2026 07:40:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49981
IP address blocks: 87.232.81.0/24 maxlen: 24
87.232.85.0/24 maxlen: 24
89.126.224.0/24 maxlen: 24
89.126.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 17:30:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2f:0e:76:f8:5e:fb:00:37:85:5f:ad:ae:66:fb:6a:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Validity
Not Before: Oct 12 07:40:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cf4bebaa94c27ba6a1435c5256985872924cf225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:55:b9:8b:d2:62:61:f0:d2:1d:fa:95:ad:41:
0c:53:b4:40:03:73:27:5a:dd:e8:e2:a9:ca:9f:dd:
d4:e5:c7:fc:a8:33:e4:0d:81:89:7e:f4:e1:05:47:
25:da:25:3a:fe:2b:95:8a:f0:d9:c3:23:d5:19:fd:
07:21:8e:ec:9c:06:9f:7a:b5:cf:dd:12:00:61:b8:
42:52:e2:df:6a:24:15:2e:15:8c:7a:16:7f:df:1c:
2c:71:ca:4e:b8:b9:84:07:c0:b7:44:18:30:01:53:
7e:c0:df:18:16:12:6b:dd:01:2b:83:79:35:fb:22:
15:98:df:57:84:f5:bb:1a:87:8e:ef:ff:03:37:e2:
d3:c6:55:38:57:16:54:f9:c8:ad:06:65:25:01:bd:
47:87:31:98:06:ef:c1:f3:79:e3:15:60:98:d2:7e:
14:a5:4e:18:37:fb:da:91:7d:48:a6:bd:d5:17:5e:
9b:b9:1d:44:94:a1:67:73:34:de:10:8a:cc:ac:89:
b4:eb:2b:b8:cb:22:ae:4b:06:a6:b9:38:08:0d:29:
75:2f:55:6c:01:e8:89:93:58:58:6b:83:45:fe:da:
5f:2f:a8:bd:ae:71:9f:f5:66:00:4c:fc:98:4a:3a:
c4:8c:e6:e1:0f:c0:c3:71:76:73:db:68:bb:8a:df:
a0:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:4B:EB:AA:94:C2:7B:A6:A1:43:5C:52:56:98:58:72:92:4C:F2:25
X509v3 Authority Key Identifier:
keyid:5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/z0vrqpTCe6ahQ1xSVphYcpJM8iU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.232.81.0/24
87.232.85.0/24
89.126.224.0/24
89.126.227.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:ec:8d:59:0d:46:33:27:24:6c:de:83:4e:d0:96:69:c0:8c:
aa:a9:79:02:dc:8b:12:ce:e1:38:8d:4f:e3:ec:cd:19:00:47:
e2:b1:29:7f:3b:1d:d0:bd:e8:28:8d:6c:f0:67:f6:b4:04:e6:
e1:c0:cf:c8:4d:df:fc:92:ec:f7:64:09:d0:ea:86:0b:83:38:
82:10:46:89:5a:5e:17:a5:a8:c2:21:5e:71:d0:62:f8:a5:53:
6e:0f:2e:df:59:32:3c:ff:0e:36:70:bc:b3:93:8d:62:f9:ed:
af:7c:20:cc:09:8d:eb:76:0a:c8:d7:ba:3d:c2:f2:28:a8:68:
95:46:b5:e3:f0:5d:d3:cc:05:c2:d5:5c:d6:aa:08:d9:65:cd:
c3:18:39:a9:3f:ab:2b:06:87:5e:41:33:39:44:2f:4f:31:bd:
d4:1d:c1:8c:8e:bd:06:e1:dd:63:7b:4f:59:69:5d:89:09:8d:
a0:b4:99:79:bf:8d:e2:77:83:30:e8:f6:6a:41:28:6a:69:da:
d2:33:50:1c:05:0a:a7:61:bc:12:09:2a:0a:97:7e:f4:4c:7a:
26:0e:ae:81:e3:84:ee:0d:43:b3:3f:b0:23:fa:27:bc:ad:e4:
95:97:56:df:ec:44:70:92:2b:0b:a0:8f:19:8a:d4:59:66:76:
26:5b:ab:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 04:18:30 2026 by rpki-client