Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/INoaFGcKuObU8F-_AknlSYmEvwg.roa
File: INoaFGcKuObU8F-_AknlSYmEvwg.roa (raw, json)
Hash identifier: iuYsJnVvuvylA/R+RYhFJRTwV9MhXBO0hUzg9rhC9Pk=
Subject key identifier: 20:DA:1A:14:67:0A:B8:E6:D4:F0:5F:BF:02:49:E5:49:89:84:BF:08
Certificate issuer: /CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Certificate serial: 01A08FE691D4F57728020A20600460F4719C
Authority key identifier: 0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/INoaFGcKuObU8F-_AknlSYmEvwg.roa
Signing time: Fri 11 Sep 2026 09:57:27 +0000
ROA not before: Fri 11 Sep 2026 09:57:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218731
IP address blocks: 87.58.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 11:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8f:e6:91:d4:f5:77:28:02:0a:20:60:04:60:f4:71:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Validity
Not Before: Sep 11 09:57:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=20da1a14670ab8e6d4f05fbf0249e5498984bf08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:64:e4:1c:7b:65:a1:00:f3:3b:34:43:79:d2:
38:d4:ad:a1:4a:1c:30:d2:46:e5:4b:7a:fc:b2:79:
f9:6a:29:db:c4:35:67:42:4f:f3:03:ad:84:e7:1f:
d2:ea:21:38:81:9d:59:10:61:8b:53:c6:e8:97:58:
2a:62:d6:c3:a9:eb:38:b1:31:7a:ad:dc:93:8f:84:
56:b8:c4:39:de:1e:53:2a:93:d6:e7:95:86:e4:39:
18:6a:a6:81:aa:b7:76:d1:80:5d:39:2b:35:5a:f8:
e4:b5:0b:6f:06:ae:1b:a8:eb:18:04:46:37:e2:ec:
c5:bb:89:da:37:7b:63:ab:02:01:75:7a:8e:9a:fd:
79:f9:b3:9a:e9:22:2e:af:96:6b:c1:fe:93:9a:6c:
79:85:fa:26:5c:3d:27:ca:66:11:d0:fc:7b:16:98:
9d:94:df:d0:d4:44:fd:08:4b:c6:66:6c:83:84:b6:
68:c1:d3:c3:b5:2b:68:76:b9:c7:2c:34:e6:1f:c3:
b0:f8:42:4a:b6:f6:a6:60:90:54:7a:7c:a7:7a:98:
52:39:40:a9:a0:97:26:da:b9:20:f0:eb:11:05:df:
e2:bc:d8:dd:df:08:44:cc:f1:ae:8d:07:63:54:d0:
a5:c8:37:84:49:a9:1f:77:91:4e:7d:0f:b7:7d:29:
d9:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:DA:1A:14:67:0A:B8:E6:D4:F0:5F:BF:02:49:E5:49:89:84:BF:08
X509v3 Authority Key Identifier:
keyid:0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/INoaFGcKuObU8F-_AknlSYmEvwg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.58.201.0/24
Signature Algorithm: sha256WithRSAEncryption
05:fd:27:3e:fc:d4:f0:41:28:fb:9e:b8:b4:d7:2f:75:24:7e:
c6:73:c6:30:d0:eb:75:15:44:bb:5c:f3:77:a9:f3:8c:ba:5c:
18:25:57:42:89:80:45:88:74:72:a6:54:d8:31:28:f4:00:f4:
1d:d4:be:6d:a2:1d:e5:95:e3:eb:90:cd:d8:5a:7c:f0:79:0a:
76:c1:b3:1e:09:dc:0a:23:9b:d0:68:9b:11:79:5e:92:1f:3e:
57:63:67:04:73:0a:c6:30:40:2e:e9:d3:a5:74:ce:23:23:e4:
51:98:df:2d:2a:86:21:31:d9:da:09:a7:46:47:34:0d:e7:b4:
0f:59:ff:8c:9f:92:16:f9:04:07:ff:dd:ff:e2:15:4f:0b:ef:
3c:99:a4:d8:61:69:8d:c5:b7:23:70:3e:2d:90:24:d7:5f:b1:
e8:ff:53:a0:59:eb:5e:15:89:79:7e:fd:0f:35:52:67:5b:1e:
2f:9b:5f:3e:24:4a:24:1b:52:1f:bd:a1:b6:fd:2a:90:ac:ad:
f7:33:81:af:c8:13:a5:39:e9:4d:86:38:5f:c1:94:32:9b:f3:
1c:4f:bf:9e:71:d3:9b:8e:50:6f:d7:dd:94:0b:33:88:8e:bd:
cf:99:2f:4e:3e:ad:3b:1e:ad:de:42:bb:df:25:49:e3:f2:23:
73:8d:8d:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 21:55:53 2026 by rpki-client