Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/sNq9p9J2Evgp1beexxxD6mhyqJs.roa
File: sNq9p9J2Evgp1beexxxD6mhyqJs.roa (raw, json)
Hash identifier: 2BsLynVN8CM3oPDfNOMpDGG1lWwcr3s92Xq1yPHaFLk=
Subject key identifier: B0:DA:BD:A7:D2:76:12:F8:29:D5:B7:9E:C7:1C:43:EA:68:72:A8:9B
Certificate issuer: /CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Certificate serial: 019E4663A859E9742E49E6C83764C349A502
Authority key identifier: 0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/sNq9p9J2Evgp1beexxxD6mhyqJs.roa
Signing time: Wed 20 May 2026 17:16:36 +0000
ROA not before: Wed 20 May 2026 17:16:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209604
IP address blocks: 87.58.208.0/24 maxlen: 24
87.58.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 07:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:46:63:a8:59:e9:74:2e:49:e6:c8:37:64:c3:49:a5:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Validity
Not Before: May 20 17:16:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b0dabda7d27612f829d5b79ec71c43ea6872a89b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:5b:ca:a6:53:65:b6:b8:f9:0f:b4:e6:25:f3:
7b:a1:74:a8:8c:b0:f3:ec:e1:52:b7:17:f2:70:10:
63:ef:fb:2a:74:dd:d3:0f:d0:a1:17:b2:ac:cd:64:
6a:6f:e4:f7:c3:ee:75:c9:8a:9d:b4:f8:7a:a8:05:
f0:ee:2d:d4:31:e0:aa:3b:8f:0c:98:7b:2b:fb:17:
ff:84:b2:89:1a:1a:1e:76:d7:de:2c:82:41:78:d6:
4a:c6:20:a0:ad:67:c9:d0:c7:53:b1:e5:08:8e:e2:
f0:19:0f:59:61:79:c3:25:72:12:2d:9a:57:21:0c:
42:d4:36:2e:e3:49:25:ec:af:d7:2c:76:a7:ac:dd:
6e:9a:37:df:a9:ee:87:2f:ba:f6:40:0d:90:ae:ea:
c5:ed:f6:b6:f6:97:be:17:65:ae:31:0a:2c:ad:60:
a8:27:c2:89:97:a6:6c:81:27:75:47:e9:0e:d9:b4:
6d:6c:ec:b8:66:9a:41:96:96:88:90:08:86:f7:b5:
09:06:37:82:99:51:e8:5f:7f:cc:e9:58:79:c4:0f:
39:b6:d2:a4:b1:47:54:bf:c9:df:0f:74:ad:32:e1:
2e:5f:b7:de:0d:d4:9f:5c:c0:99:90:0e:0e:ef:ee:
26:a5:dc:b9:87:0d:25:0e:3a:40:cd:6a:71:cb:fc:
96:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:DA:BD:A7:D2:76:12:F8:29:D5:B7:9E:C7:1C:43:EA:68:72:A8:9B
X509v3 Authority Key Identifier:
keyid:0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/sNq9p9J2Evgp1beexxxD6mhyqJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.58.208.0/23
Signature Algorithm: sha256WithRSAEncryption
05:53:dd:4c:02:a5:3f:e7:69:4a:fc:d7:2f:3b:08:ee:45:f2:
a5:22:4e:0e:b3:91:05:66:88:c5:4b:d6:27:49:cc:6c:a5:21:
cd:82:cd:01:1b:74:78:5d:65:8a:7d:ff:7e:16:88:1e:2e:42:
86:9d:3c:84:aa:81:14:db:63:b1:3f:07:84:cb:4a:66:b3:f5:
de:b0:1c:1d:25:79:b6:fe:87:c7:61:88:4b:e0:d8:d3:5f:23:
bc:b9:83:01:63:30:d5:eb:df:7b:7b:ab:e5:85:76:ee:2e:e8:
ff:9b:15:fc:3f:90:84:be:f7:6e:f1:ab:0f:bf:06:08:ed:1d:
e4:85:34:0e:14:77:6c:d5:ac:6d:d4:0b:0f:8b:d5:4f:de:ee:
60:fc:10:fa:a6:b8:0e:57:7f:f5:3d:07:94:9f:9b:6e:17:9d:
ed:65:c7:e4:0f:89:fe:9d:77:aa:a5:10:99:2a:21:40:22:64:
aa:8e:6f:ce:2d:e7:de:90:46:5f:a1:c8:cc:85:76:70:34:c0:
61:95:ed:af:fa:1b:ba:f9:02:ff:eb:18:84:b7:8c:dd:e1:8d:
59:f3:ce:7a:30:e9:5a:b9:c0:6b:c4:aa:e1:92:0e:d8:d3:2d:
a9:93:cc:47:d2:2d:e2:60:2f:35:ff:92:bf:a8:d8:cc:7e:9b:
8e:c0:0d:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 15:02:38 2026 by rpki-client