Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/KxgOydIqplPdj5dYjg6pOIPGZz0.roa
File: KxgOydIqplPdj5dYjg6pOIPGZz0.roa (raw, json)
Hash identifier: koAFaeAk5gNhyrrm7uE5WJ1NZXKXHW0yWReewuwVjKk=
Subject key identifier: 2B:18:0E:C9:D2:2A:A6:53:DD:8F:97:58:8E:0E:A9:38:83:C6:67:3D
Certificate issuer: /CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Certificate serial: 019E6D7ECE03D1CC5822BC2CE0DA8EE5232B
Authority key identifier: 0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/KxgOydIqplPdj5dYjg6pOIPGZz0.roa
Signing time: Thu 28 May 2026 07:31:27 +0000
ROA not before: Thu 28 May 2026 07:31:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62164
IP address blocks: 87.58.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 17:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:6d:7e:ce:03:d1:cc:58:22:bc:2c:e0:da:8e:e5:23:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Validity
Not Before: May 28 07:31:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2b180ec9d22aa653dd8f97588e0ea93883c6673d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c6:cd:fd:bd:50:1e:6e:a5:9a:9a:ad:f1:65:
6e:fa:32:cb:04:f6:f0:d1:4e:8f:58:97:d3:02:c8:
66:6c:7c:0f:53:2a:2a:a6:ae:a6:d9:be:3a:c6:a9:
b9:a2:75:eb:20:8b:32:59:4b:44:06:77:76:45:26:
01:3a:49:1b:2b:d6:87:dd:49:c8:b7:44:2c:c6:fb:
e1:3f:d2:d6:10:11:fe:41:04:2e:76:1f:43:51:ff:
12:25:25:85:be:2b:73:9f:23:e9:e4:fa:1d:72:41:
60:73:6a:e3:15:11:d0:3c:b5:61:8b:bd:b7:b2:12:
39:0b:a1:a0:98:20:fb:48:98:3c:70:aa:1a:24:01:
1b:81:ad:5b:3c:e4:f9:1a:20:23:6e:25:9f:45:cb:
96:a0:e2:23:61:4d:a1:ae:21:7c:4f:d4:ae:38:84:
85:e5:2a:ee:a9:07:f9:f3:39:f8:db:d1:d2:05:f7:
c3:e6:0c:7e:db:37:bc:86:7f:83:27:33:6b:bd:b6:
ab:1a:4e:54:fd:49:1e:88:57:aa:47:5e:22:b2:37:
1d:55:e0:63:60:bb:18:05:96:41:eb:ae:d2:af:63:
14:22:d0:89:8d:93:fe:c2:39:88:26:48:7f:11:9d:
b0:10:12:14:57:18:85:97:95:d2:60:ec:86:29:b0:
f8:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:18:0E:C9:D2:2A:A6:53:DD:8F:97:58:8E:0E:A9:38:83:C6:67:3D
X509v3 Authority Key Identifier:
keyid:0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/KxgOydIqplPdj5dYjg6pOIPGZz0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.58.197.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:d9:15:b4:de:14:48:ac:2c:81:97:ec:11:94:12:34:29:9c:
2d:8b:8f:38:9d:f8:67:ea:0f:21:0b:f4:65:14:d0:4e:cc:d5:
82:01:f5:cb:84:fa:4e:e5:2a:43:e4:4f:51:8b:d3:bc:39:ff:
ec:92:10:87:dd:4e:65:32:62:ed:14:a4:05:df:7e:22:51:d5:
10:c2:4f:5f:02:0a:dd:e0:77:d4:9f:1e:f3:28:68:84:0a:66:
14:ce:9b:b0:ba:62:aa:d8:8f:a8:15:33:dc:e9:db:d0:21:a4:
4f:50:e0:f6:58:6f:79:de:a0:f8:b5:a9:f2:50:77:3e:ce:2b:
55:1e:f2:9f:bb:7f:80:fc:b2:3e:e4:98:b5:03:07:1b:5f:13:
b4:7f:a0:6f:64:5c:22:c2:c6:80:af:46:69:d8:14:c3:4f:73:
14:de:35:7f:8e:48:31:26:c9:61:15:88:6b:ba:90:a5:c5:90:
ae:29:b8:8a:09:2f:c1:54:c3:87:74:9b:96:a1:9d:33:21:3f:
d1:86:f4:56:a1:20:c1:41:3d:6c:ed:32:dc:54:4d:73:21:5a:
3e:8b:e9:da:dc:ae:30:e6:90:85:5d:bd:10:9e:36:8b:80:b5:
3e:d9:8c:d1:d0:53:99:72:15:4f:ae:bf:d6:b7:6a:92:35:14:
5d:ff:7e:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:40:48 2026 by rpki-client