Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/c7ufgwkMLpNltOXhDzTXlsq2PGU.roa
File: c7ufgwkMLpNltOXhDzTXlsq2PGU.roa (raw, json)
Hash identifier: 3jYoKNXTAITADmdc1FxsL6fb1A8cXG2jJCXLgy5/C78=
Subject key identifier: 73:BB:9F:83:09:0C:2E:93:65:B4:E5:E1:0F:34:D7:96:CA:B6:3C:65
Certificate issuer: /CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Certificate serial: 01A1439A18939DAFCB6DC18FC30FDE64404A
Authority key identifier: 0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/c7ufgwkMLpNltOXhDzTXlsq2PGU.roa
Signing time: Fri 16 Oct 2026 07:25:34 +0000
ROA not before: Fri 16 Oct 2026 07:25:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207359
IP address blocks: 87.58.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 19:43:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:43:9a:18:93:9d:af:cb:6d:c1:8f:c3:0f:de:64:40:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Validity
Not Before: Oct 16 07:25:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=73bb9f83090c2e9365b4e5e10f34d796cab63c65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e9:93:e7:33:2a:6a:90:da:eb:6a:3a:09:31:
d6:65:7d:5b:07:a6:52:21:c7:b5:30:c6:ab:6d:e5:
82:a3:2a:56:8a:1c:20:cd:64:ef:3d:14:a5:e8:51:
27:cc:09:47:e4:77:14:8c:85:b6:d8:0b:a6:03:c8:
e7:4e:02:79:79:6a:d2:80:26:60:1f:28:09:c8:71:
10:aa:ec:f5:ee:9d:80:00:95:af:1a:05:1f:09:ed:
40:76:8a:bb:45:dc:50:bf:d1:ed:8f:07:be:4a:f4:
70:2d:12:e1:67:23:08:a0:6d:ed:c3:fa:36:3f:b8:
ec:ba:8d:c2:b1:6e:b6:07:c3:7f:65:c2:ce:d8:00:
4a:06:e5:ef:00:c1:84:fa:79:b9:ca:54:e3:4c:3a:
20:22:68:3f:ce:ea:46:22:8b:7c:af:dc:dd:8d:b4:
3a:15:78:ac:ed:68:c5:66:7d:0d:d6:38:f6:54:50:
a3:98:c1:db:89:1e:92:e5:1e:ac:65:5b:62:60:dd:
e4:5a:a7:39:7d:e4:2f:95:94:09:5f:af:33:03:41:
4f:7c:62:c9:a0:66:0a:7d:3c:5e:38:82:7c:32:7c:
b4:66:79:a1:bf:5d:be:33:d0:e3:00:43:9a:e7:b6:
ee:0e:08:d0:c6:a3:2b:c2:80:02:f9:76:03:d0:a1:
f7:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:BB:9F:83:09:0C:2E:93:65:B4:E5:E1:0F:34:D7:96:CA:B6:3C:65
X509v3 Authority Key Identifier:
keyid:0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/c7ufgwkMLpNltOXhDzTXlsq2PGU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.58.200.0/24
Signature Algorithm: sha256WithRSAEncryption
21:5c:38:29:52:19:6d:93:28:74:26:56:05:05:2a:b9:c4:55:
f4:e9:7d:52:ef:36:9d:ca:42:f4:1e:29:ac:d8:fb:55:50:b4:
23:8a:b2:b6:56:b3:99:93:9d:f5:bd:a4:2d:0f:77:35:be:fa:
58:e1:66:6a:e6:8d:d7:46:5d:ab:f3:45:98:b6:0a:60:d1:4a:
27:fb:63:68:26:71:b6:35:10:9e:3c:db:e9:32:eb:40:9f:66:
4b:a0:5b:55:ef:44:82:9b:fd:8e:70:94:b3:e5:32:73:6a:c8:
3c:44:ac:dd:43:e5:fc:f4:9c:1f:5e:c9:49:a3:5c:dc:2e:5b:
63:87:3e:4d:30:1c:35:aa:3a:d9:e3:29:47:4d:99:ab:66:64:
58:74:f2:12:6b:c7:e6:4e:71:43:9a:dc:02:9a:de:02:a8:74:
d6:9d:4a:e6:00:61:48:d1:b5:a3:6d:fc:47:15:77:b8:86:4b:
a3:e7:a6:2d:57:12:a5:f7:3e:df:35:2b:71:81:2b:4f:73:77:
aa:7d:57:21:e1:70:bf:3e:61:99:63:53:3a:5d:e6:8e:ce:0e:
a7:82:14:5f:54:6b:28:d6:32:be:97:f8:20:b5:e7:ae:ec:34:
63:73:13:d0:f2:64:62:b3:c0:67:ba:48:33:8b:57:10:e0:da:
30:bc:0c:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 06:02:34 2026 by rpki-client