Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/tUSD3anegSprt7dCXCNI8CZyFZE.roa
File: tUSD3anegSprt7dCXCNI8CZyFZE.roa (raw, json)
Hash identifier: HjkMusKNDMZsTmih35agf9dC2iKUg4/TTUnxbwCvxXs=
Subject key identifier: B5:44:83:DD:A9:DE:81:2A:6B:B7:B7:42:5C:23:48:F0:26:72:15:91
Certificate issuer: /CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Certificate serial: 019FEBE219A1EB5B2CA50D03654C0C6ECE10
Authority key identifier: 0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/tUSD3anegSprt7dCXCNI8CZyFZE.roa
Signing time: Mon 10 Aug 2026 13:34:51 +0000
ROA not before: Mon 10 Aug 2026 13:34:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219275
IP address blocks: 87.58.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:eb:e2:19:a1:eb:5b:2c:a5:0d:03:65:4c:0c:6e:ce:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Validity
Not Before: Aug 10 13:34:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b54483dda9de812a6bb7b7425c2348f026721591
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:88:ba:ba:df:7f:c5:88:c0:b6:58:9b:d5:67:
cd:97:ae:50:10:c2:ba:dc:41:51:b6:37:ec:1a:ad:
27:7f:0b:fa:ad:79:1a:4f:a8:f9:09:df:21:87:36:
82:19:70:94:4a:44:37:c4:dd:83:95:5a:f0:a2:20:
a7:63:fd:23:e1:b5:02:07:ec:94:d3:cd:83:66:f3:
78:2d:9a:b2:b3:f9:05:3e:09:86:ff:a5:2a:d8:5b:
ac:fd:70:15:08:fa:f3:80:1a:46:52:83:b9:25:2e:
a0:9d:42:15:01:ec:9b:b7:5e:71:65:c3:85:84:4a:
e2:81:ff:ed:10:b3:2a:a9:d2:f0:0c:90:85:bc:02:
c7:fb:e4:60:e1:e0:8c:68:52:54:bc:42:13:cd:90:
81:dc:66:e4:69:ef:83:03:0a:9c:11:93:de:07:4a:
58:71:5c:dd:d4:40:27:8c:2e:11:fc:d1:01:49:e9:
34:5e:57:7e:d9:32:1f:03:f4:5d:ed:15:22:31:25:
f0:dd:6f:64:bd:85:cc:c5:83:94:41:e4:f5:8c:f5:
a7:88:b1:fe:9a:70:26:95:c6:dd:9e:17:4f:90:be:
ef:78:db:b5:b2:bb:a4:69:4a:ea:ab:99:ae:b6:31:
b7:85:77:77:af:53:dc:d1:cb:95:d4:20:cd:64:b6:
7e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:44:83:DD:A9:DE:81:2A:6B:B7:B7:42:5C:23:48:F0:26:72:15:91
X509v3 Authority Key Identifier:
keyid:0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/tUSD3anegSprt7dCXCNI8CZyFZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.58.221.0/24
Signature Algorithm: sha256WithRSAEncryption
56:da:b7:f7:d5:7e:a9:72:32:54:73:59:6a:e6:e7:b3:28:7c:
54:d5:e5:a8:14:32:5d:f5:38:3f:5c:24:5a:bc:1e:a6:55:b8:
1a:98:38:90:3e:40:ac:0d:7b:b2:7f:c0:d6:9e:79:92:63:0f:
c5:35:f3:64:f0:88:b6:1f:18:ee:9d:a1:8c:4b:19:48:32:21:
b0:58:f5:84:f5:99:0d:66:e7:6f:10:17:81:8a:71:c5:70:df:
d1:02:1c:8a:b2:df:78:2d:0c:c6:85:cf:83:d8:a7:35:08:2c:
60:1a:dd:30:f7:4b:10:ba:8a:f1:39:32:d8:57:fe:0d:1a:4e:
6b:af:69:9b:22:25:82:51:3e:f5:53:e3:86:46:3a:d7:b0:5a:
28:1b:ca:8e:09:7e:87:1f:4a:33:b2:ea:a7:fe:18:84:d5:ba:
f2:b8:d0:2d:a8:59:db:df:21:04:46:7a:1a:d8:3e:99:f9:da:
a5:6b:bd:2e:34:67:eb:5e:e7:d3:16:f2:e7:c5:52:bc:18:a2:
a6:69:78:fd:ae:ea:85:0a:13:b9:0f:67:f0:ca:d4:2c:87:cd:
47:8a:90:2a:62:9e:33:82:4c:3f:98:5f:43:9e:ea:cb:7d:2c:
8a:df:e0:29:bd:42:11:d7:f1:0b:14:dc:7d:e8:86:71:ae:e2:
7f:a5:f7:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:20:31 2026 by rpki-client