Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/CX2aVGw6YdEn1VJcbQ6F7VmKQdg.roa
File: CX2aVGw6YdEn1VJcbQ6F7VmKQdg.roa (raw, json)
Hash identifier: nt4dn7wy9MjMqnTFXt6nCsG6qV3L1w2QMZfyNO53Nho=
Subject key identifier: 09:7D:9A:54:6C:3A:61:D1:27:D5:52:5C:6D:0E:85:ED:59:8A:41:D8
Certificate issuer: /CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Certificate serial: 019E447D83655BF83F5496791D8C85167012
Authority key identifier: 0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/CX2aVGw6YdEn1VJcbQ6F7VmKQdg.roa
Signing time: Wed 20 May 2026 08:25:36 +0000
ROA not before: Wed 20 May 2026 08:25:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199707
IP address blocks: 87.58.211.0/24 maxlen: 24
87.58.215.0/24 maxlen: 24
87.58.220.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 07:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:44:7d:83:65:5b:f8:3f:54:96:79:1d:8c:85:16:70:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Validity
Not Before: May 20 08:25:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=097d9a546c3a61d127d5525c6d0e85ed598a41d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:0c:a5:9b:e2:23:89:c2:40:5b:84:4d:b5:b1:
b7:76:c6:70:df:8a:4c:6f:b3:68:cc:5c:eb:b7:83:
4d:13:32:cb:0a:1d:b4:03:ac:7b:be:b0:a6:77:9e:
87:29:c8:f0:8b:4d:68:0c:f2:e0:c9:88:be:02:34:
cc:dd:94:d8:05:c5:0e:eb:1a:6f:0a:7e:ab:df:7d:
37:af:90:b1:ee:f2:c7:e9:49:33:ff:44:71:85:53:
19:f1:27:5c:b9:00:ea:cd:bf:0a:d7:72:9a:27:10:
c0:c2:7f:13:5f:9c:8c:8b:a2:09:a5:b6:07:35:90:
65:dc:af:49:be:b1:f5:d0:9d:07:1c:eb:04:c0:81:
c1:5b:28:f0:3c:41:38:cf:fd:31:15:ee:7e:a1:59:
30:7d:9c:3f:1d:63:21:95:74:58:ba:7f:02:68:2f:
74:c9:a4:bb:3f:7f:7f:52:5b:19:58:89:86:f0:fc:
15:44:e3:56:73:19:01:8a:11:d0:7a:cc:04:26:c9:
fc:86:a7:bf:dd:a0:c2:9c:07:1a:74:4c:b4:28:35:
9a:c3:da:03:33:68:8f:c8:75:15:08:1a:2e:b7:d1:
e2:da:db:70:c1:cc:1c:76:84:0e:a2:45:f3:ea:e4:
5d:6f:7e:88:0d:e9:b2:4c:f5:ce:0f:02:fc:63:54:
08:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:7D:9A:54:6C:3A:61:D1:27:D5:52:5C:6D:0E:85:ED:59:8A:41:D8
X509v3 Authority Key Identifier:
keyid:0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/CX2aVGw6YdEn1VJcbQ6F7VmKQdg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.58.211.0/24
87.58.215.0/24
87.58.220.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:2a:c3:f7:11:e9:0e:cd:61:a5:5c:f8:ea:c9:73:88:91:e5:
eb:25:2e:44:15:97:4c:c7:cb:23:c5:d9:b7:54:f5:54:2e:54:
93:40:cb:5e:ac:7c:4a:b9:90:ec:91:78:bc:3c:96:26:1d:21:
f0:15:af:d6:f4:ae:5a:8c:10:b1:f0:ef:e5:29:e6:da:8d:82:
c7:90:29:bf:94:d8:49:b5:7e:b4:a5:b3:70:46:66:fd:9c:8c:
f1:44:d3:d8:03:a2:67:c9:20:74:9c:c1:3a:ed:35:39:65:39:
c7:8d:13:07:8f:ab:2a:8d:d6:52:f7:96:f7:33:b1:ed:5e:d1:
0d:00:dc:03:4f:65:bd:eb:79:67:0a:06:2a:55:d9:fa:ea:98:
62:b4:7e:d5:41:0a:91:e1:71:29:3f:bf:ab:f7:dd:86:81:6c:
cf:b9:5a:6a:4c:1c:3f:d1:88:b3:40:53:17:e1:5f:ba:45:37:
77:bd:2e:fc:0d:4a:0d:18:ad:fa:0a:f7:ce:dd:40:93:08:35:
9b:b1:d5:23:36:2a:d8:89:61:2f:61:92:4b:be:aa:4c:d4:9d:
87:1d:63:2f:8c:22:32:71:0f:60:91:41:50:5e:fc:68:0c:60:
aa:7a:54:b5:cc:2e:be:92:e2:d3:05:97:4b:2f:d3:90:d2:ea:
e4:2d:73:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 15:07:27 2026 by rpki-client