Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/kdWUYDREoQ3N2A7deVtO68-yqs4.roa
File: kdWUYDREoQ3N2A7deVtO68-yqs4.roa (raw, json)
Hash identifier: bUgQp1LB1aMffjw2lKit1+GbbhesVmXQqan+Qw/1ROI=
Subject key identifier: 91:D5:94:60:34:44:A1:0D:CD:D8:0E:DD:79:5B:4E:EB:CF:B2:AA:CE
Certificate issuer: /CN=e5e03354666c4cb2abfd51411eca5d524b0d5be5
Certificate serial: 019D482C26942868BE1C1AD90667C1F8F8E2
Authority key identifier: E5:E0:33:54:66:6C:4C:B2:AB:FD:51:41:1E:CA:5D:52:4B:0D:5B:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5eAzVGZsTLKr_VFBHspdUksNW-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/kdWUYDREoQ3N2A7deVtO68-yqs4.roa
Signing time: Wed 01 Apr 2026 08:32:26 +0000
ROA not before: Wed 01 Apr 2026 08:32:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201907
IP address blocks: 87.232.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/5eAzVGZsTLKr_VFBHspdUksNW-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:48:2c:26:94:28:68:be:1c:1a:d9:06:67:c1:f8:f8:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5e03354666c4cb2abfd51411eca5d524b0d5be5
Validity
Not Before: Apr 1 08:32:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=91d594603444a10dcdd80edd795b4eebcfb2aace
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:40:30:8d:74:19:1a:45:16:79:98:40:19:7e:
89:d0:b7:56:f1:64:43:61:c1:ef:23:9f:cd:b0:aa:
23:40:b0:41:58:76:bc:fe:37:92:48:f2:f8:61:dd:
7f:9f:4d:62:02:1e:d5:e9:2c:8a:a6:85:d6:ca:2f:
29:2e:42:c4:5c:d3:bb:45:ba:18:0c:72:e8:c3:fb:
6d:0d:cb:50:c0:f3:4a:c6:2c:4c:37:b8:37:a9:05:
87:04:47:57:03:a8:27:11:b3:54:f3:93:29:c1:e7:
df:fa:63:cd:68:89:60:7d:d6:3c:f2:a2:d4:c1:1e:
af:3e:66:e9:99:a1:e4:70:6f:e6:44:56:d5:0d:de:
d0:c9:0f:08:4b:c6:93:62:eb:24:7c:86:d4:10:d9:
62:ba:09:ce:b3:da:68:3f:13:36:6b:34:31:fe:ee:
b9:41:44:b8:32:16:54:41:38:e9:ff:a7:e6:a6:ef:
d1:9b:c9:dd:ff:65:d8:b9:0c:6a:18:53:3a:5b:9d:
58:04:3f:c5:4e:00:e8:6a:f2:68:af:ff:c6:1c:14:
a5:a2:56:7a:a5:2a:f7:dc:6f:a1:61:b1:ff:44:4d:
fa:13:77:9f:bb:9b:54:39:91:6a:a9:39:10:c6:df:
74:78:b8:1a:03:cd:b2:89:1d:4f:2b:af:fd:47:3e:
ef:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:D5:94:60:34:44:A1:0D:CD:D8:0E:DD:79:5B:4E:EB:CF:B2:AA:CE
X509v3 Authority Key Identifier:
keyid:E5:E0:33:54:66:6C:4C:B2:AB:FD:51:41:1E:CA:5D:52:4B:0D:5B:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5eAzVGZsTLKr_VFBHspdUksNW-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/kdWUYDREoQ3N2A7deVtO68-yqs4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.232.75.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:d8:17:8d:64:15:be:6e:83:3a:e2:fc:ca:58:63:e9:e7:9d:
14:02:c5:3b:1c:c7:fe:04:0c:f4:51:26:14:43:d1:b7:d4:4c:
43:85:b8:aa:3b:37:7f:82:39:86:5e:63:ae:07:3e:86:b5:98:
ff:a1:86:94:a8:2e:e3:76:2f:02:43:af:24:6e:96:d8:b3:a7:
60:0e:04:e9:cd:6e:43:c3:60:3d:cc:3e:6c:04:29:42:92:dc:
16:29:bc:57:c8:36:b5:fd:b5:6d:01:4a:bf:2a:73:46:a9:cc:
75:b9:6a:34:f2:80:e6:16:35:fd:db:24:cb:ff:07:ad:bf:6e:
f8:b1:52:50:10:e2:c2:0d:87:e1:18:ec:dc:fe:37:7b:1d:7f:
e7:a1:39:02:e3:d1:17:06:8e:73:3d:f6:be:5f:12:ea:d6:33:
c5:84:88:79:9c:6c:a6:63:28:10:53:8d:2e:81:ed:7f:37:35:
50:6f:e3:ad:e9:de:5d:cc:ed:26:73:9b:d1:b9:c1:da:ac:a1:
46:64:e4:72:55:38:5d:61:21:3e:23:78:17:ef:48:83:fd:0c:
44:92:cd:55:5d:44:21:59:56:9e:69:01:0b:ca:11:07:b2:42:
e5:49:03:82:a9:fd:bc:36:01:de:76:36:c1:65:2b:da:20:88:
14:34:a1:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:13:15 2026 by rpki-client