Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/xUNEisKB0EqI5AuBEMaOg4wg5U0.roa
File: xUNEisKB0EqI5AuBEMaOg4wg5U0.roa (raw, json)
Hash identifier: U6w5HERC+PhHL1E0Q4mONovqXieg1wD/OQ20gLoKfaE=
Subject key identifier: C5:43:44:8A:C2:81:D0:4A:88:E4:0B:81:10:C6:8E:83:8C:20:E5:4D
Certificate issuer: /CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Certificate serial: 019FE1362A6D726C47522750EE3F4AE8D547
Authority key identifier: 0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/xUNEisKB0EqI5AuBEMaOg4wg5U0.roa
Signing time: Sat 08 Aug 2026 11:50:51 +0000
ROA not before: Sat 08 Aug 2026 11:50:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58061
IP address blocks: 87.58.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Sep 2026 22:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:e1:36:2a:6d:72:6c:47:52:27:50:ee:3f:4a:e8:d5:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Validity
Not Before: Aug 8 11:50:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c543448ac281d04a88e40b8110c68e838c20e54d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1e:c8:fd:43:26:e0:8e:11:b2:f4:43:62:93:
08:c9:28:78:43:91:ac:5c:26:fa:5f:c0:60:28:b8:
13:a8:54:e6:59:ad:70:07:fa:8c:d7:d6:a7:2f:41:
ca:77:89:c9:e3:64:93:f6:9c:bf:02:a5:a5:f2:f7:
45:7a:cb:78:de:cb:59:16:7a:09:c5:9e:5a:7f:86:
d0:b4:35:7e:e4:fd:a3:6d:5b:f0:01:14:6b:d6:d6:
a2:0b:3a:70:d6:7a:61:41:cb:73:82:a7:76:51:f5:
2b:0d:24:3a:fb:cb:f9:a3:88:d7:32:64:78:21:56:
72:7b:f9:06:4e:e5:d1:91:f4:a7:d7:e2:d3:91:cc:
85:f8:72:80:e4:81:d6:88:6d:5c:50:f3:a4:b6:34:
19:89:9d:c5:92:16:df:7c:3a:d6:4c:60:68:ab:6c:
0f:ed:0d:c7:b5:cb:43:2c:4f:0c:c6:0c:97:47:20:
68:7d:92:19:cf:ef:5f:8e:34:23:86:51:e9:6f:b6:
e8:01:62:43:57:44:a9:f0:f9:12:1c:e8:bb:cd:94:
d0:46:79:4b:67:82:4a:ff:40:81:8f:ff:02:cf:87:
87:de:4e:bb:ed:f5:62:41:67:74:dc:ce:ce:af:89:
6f:7b:80:75:e6:99:ac:b2:d6:1b:0b:fd:7b:82:3b:
b8:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:43:44:8A:C2:81:D0:4A:88:E4:0B:81:10:C6:8E:83:8C:20:E5:4D
X509v3 Authority Key Identifier:
keyid:0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/xUNEisKB0EqI5AuBEMaOg4wg5U0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.58.220.0/24
Signature Algorithm: sha256WithRSAEncryption
40:c7:b2:17:38:00:fc:de:0c:1e:cb:58:44:66:c2:97:cb:d7:
c1:5a:12:dc:bd:68:66:4b:79:e9:32:d8:87:bd:9a:38:c0:41:
5a:13:30:41:b4:fa:5a:4f:53:80:a5:c3:05:d9:7a:d8:c8:06:
19:cb:d3:9c:c8:2b:f3:57:74:35:fa:98:a9:f5:c4:45:95:ae:
53:8f:7d:fa:0a:c5:eb:e7:d2:3f:4d:97:e1:00:6e:76:e8:18:
70:58:dc:6d:6f:2f:50:08:f8:99:e7:56:5c:21:04:12:c7:f6:
ba:d7:68:cd:50:24:1c:9b:c0:ef:9a:3a:c8:29:73:fa:75:cd:
42:a7:1b:d7:86:1a:a3:7a:eb:ac:3d:62:a4:39:20:4b:1b:cc:
20:27:b9:cc:bb:de:59:9a:f7:e1:a5:8a:06:de:e7:05:8c:d7:
96:6f:0e:19:70:5f:9f:d6:ef:3f:9d:77:e1:1a:6c:5c:ed:05:
a0:9a:92:aa:1a:e9:33:71:c6:34:e3:ea:5c:88:ae:e0:94:59:
44:9f:a5:e8:f6:87:9b:f4:a0:b1:99:eb:a0:37:c1:8a:c2:52:
03:f6:48:13:97:1f:d2:eb:fa:93:0e:1d:ee:cc:78:c3:13:e9:
cc:ac:9e:0a:d7:7e:50:c4:ce:51:8e:16:28:55:90:87:ce:a3:
45:3b:50:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 03:40:19 2026 by rpki-client