Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/K0GnfS6kFDeovX-TXaIbbaEiOw4.roa
File: K0GnfS6kFDeovX-TXaIbbaEiOw4.roa (raw, json)
Hash identifier: wDO8yhPRzbeI9tWFquphpM7dJAjRev55Mm7kCFE8Ofk=
Subject key identifier: 2B:41:A7:7D:2E:A4:14:37:A8:BD:7F:93:5D:A2:1B:6D:A1:22:3B:0E
Certificate issuer: /CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Certificate serial: 01A14975BB892518DF2746A7BB3D093B7313
Authority key identifier: 0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/K0GnfS6kFDeovX-TXaIbbaEiOw4.roa
Signing time: Sat 17 Oct 2026 10:43:34 +0000
ROA not before: Sat 17 Oct 2026 10:43:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218721
IP address blocks: 87.58.205.0/24 maxlen: 24
87.58.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 14:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:49:75:bb:89:25:18:df:27:46:a7:bb:3d:09:3b:73:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Validity
Not Before: Oct 17 10:43:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2b41a77d2ea41437a8bd7f935da21b6da1223b0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:fa:79:94:57:05:27:3f:94:8d:2a:c2:05:cc:
d8:7f:aa:3d:a8:97:9a:db:06:35:50:7e:68:86:cf:
9a:fd:3e:d3:81:74:bf:b1:0e:a3:84:c8:07:2c:f4:
53:70:30:83:bc:97:df:db:90:40:5e:30:2a:fe:44:
d4:da:b7:d3:50:a2:37:89:f4:bb:a6:b8:98:85:07:
56:96:ef:74:ba:bb:58:54:a9:05:0b:0c:7b:dd:fe:
8f:34:c0:4e:2b:01:8a:5f:f3:d9:71:67:70:a2:3c:
80:f1:59:29:9e:64:5d:d6:90:65:2b:51:71:24:36:
44:c9:3c:bb:8a:77:43:30:d6:16:69:d3:3d:56:67:
6b:74:5c:4d:58:00:b9:4c:47:78:3f:ee:30:f8:36:
65:2a:ba:ab:7a:1d:09:ff:0f:c2:23:75:50:9e:12:
ff:c0:8d:6d:21:9b:eb:81:cc:c8:5a:b1:91:3f:11:
b5:b1:99:8a:e0:3a:21:f8:9f:25:09:69:33:2e:72:
9e:be:55:91:46:97:f8:0d:00:30:7b:f4:73:61:4f:
4e:83:02:e4:e7:a2:ba:9f:c1:5c:76:d5:3b:fb:43:
b3:de:ad:a5:7c:73:c4:2f:83:36:c8:27:23:4c:0f:
85:54:b1:d5:38:34:b6:4c:a1:72:91:8a:f6:ff:ca:
51:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:41:A7:7D:2E:A4:14:37:A8:BD:7F:93:5D:A2:1B:6D:A1:22:3B:0E
X509v3 Authority Key Identifier:
keyid:0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/K0GnfS6kFDeovX-TXaIbbaEiOw4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.58.205.0/24
87.58.220.0/24
Signature Algorithm: sha256WithRSAEncryption
21:27:9c:d1:df:46:74:e0:f2:9e:66:0c:24:d5:fa:d7:4f:6b:
2e:4e:b9:79:e3:4f:cc:60:c2:0e:8f:51:01:87:2f:bd:c4:e6:
dc:63:8f:3e:06:16:c5:7c:2d:bd:10:7a:43:81:7e:38:fc:74:
5d:44:08:cb:fb:d5:be:97:69:b8:ba:b4:08:a3:28:9f:3c:32:
fb:78:41:83:d7:d6:e6:5d:2d:14:58:ac:0c:7d:87:62:5f:c3:
1b:80:e1:b6:d4:32:d5:d4:fa:3a:36:93:31:00:3c:7a:31:9a:
e8:35:93:ee:fc:54:c8:ae:97:f1:88:c7:94:8a:c2:4e:6d:c8:
47:f5:ed:f0:bd:70:0c:02:eb:83:9d:12:16:8c:2d:99:68:43:
16:c2:de:a1:62:bb:9f:59:36:e7:2a:31:9c:66:1b:5e:92:de:
a9:bf:27:cc:f0:af:04:82:07:ac:95:b7:c4:c2:29:2a:4d:62:
2b:95:53:76:7a:ec:16:24:db:b9:ab:a3:89:87:ae:ca:9b:69:
c8:84:61:cb:9b:6b:df:d6:f9:72:18:82:66:2d:70:bc:21:d1:
c0:d2:e0:79:46:a9:d0:db:c3:8d:63:7e:b5:95:26:6a:e9:20:
a0:8e:a0:64:91:51:bb:1e:76:df:51:ad:18:f7:0d:fd:b9:47:
19:93:e7:84
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaFJdbuJJRjfJ0anuz0JO3MTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkMzU1ODU0NmEyYzU0YmJkODEyYTE5MjI4YWE5OGUwNzhk
M2FhNjgwHhcNMjYxMDE3MTA0MzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYjQxYTc3ZDJlYTQxNDM3YThiZDdmOTM1ZGEyMWI2ZGExMjIzYjBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPp5lFcFJz+UjSrCBczYf6o9qJea
2wY1UH5ohs+a/T7TgXS/sQ6jhMgHLPRTcDCDvJff25BAXjAq/kTU2rfTUKI3ifS7
priYhQdWlu90urtYVKkFCwx73f6PNMBOKwGKX/PZcWdwojyA8VkpnmRd1pBlK1Fx
JDZEyTy7indDMNYWadM9VmdrdFxNWAC5TEd4P+4w+DZlKrqreh0J/w/CI3VQnhL/
wI1tIZvrgczIWrGRPxG1sZmK4Doh+J8lCWkzLnKevlWRRpf4DQAwe/RzYU9OgwLk
56K6n8FcdtU7+0Oz3q2lfHPEL4M2yCcjTA+FVLHVODS2TKFykYr2/8pRAwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFCtBp30upBQ3qL1/k12iG22hIjsOMB8GA1UdIwQY
MBaAFA01WFRqLFS72BKhkiiqmOB406poMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFRWWVZHb3NWTHZZRXFHU0tLcVk0SGpUcW1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi80NzRmMjctYjI4Ni00NmYwLWFlNDUt
MTMyZmZjOGJkZTQ2LzEvSzBHbmZTNmtGRGVvdlgtVFhhSWJiYUVpT3c0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi80NzRmMjctYjI4Ni00NmYwLWFlNDUtMTMyZmZjOGJkZTQ2
LzEvRFRWWVZHb3NWTHZZRXFHU0tLcVk0SGpUcW1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVzrNAwQA
VzrcMA0GCSqGSIb3DQEBCwUAA4IBAQAhJ5zR30Z04PKeZgwk1frXT2suTrl540/M
YMIOj1EBhy+9xObcY48+BhbFfC29EHpDgX44/HRdRAjL+9W+l2m4urQIoyifPDL7
eEGD19bmXS0UWKwMfYdiX8MbgOG21DLV1Po6NpMxADx6MZroNZPu/FTIrpfxiMeU
isJObchH9e3wvXAMAuuDnRIWjC2ZaEMWwt6hYrufWTbnKjGcZhtekt6pvyfM8K8E
ggeslbfEwikqTWIrlVN2euwWJNu5q6OJh67Km2nIhGHLm2vf1vlyGIJmLXC8IdHA
0uB5RqnQ28ONY361lSZq6SCgjqBkkVG7HnbfUa0Y9w39uUcZk+eE
-----END CERTIFICATE-----
Generated at Mon Oct 26 00:32:04 2026 by rpki-client