Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/skRcoxVV_e4zKUJ-PcawwudWhvs.roa
File: skRcoxVV_e4zKUJ-PcawwudWhvs.roa (raw, json)
Hash identifier: /T5/7ESG8AnsEEwa67YOqMxxgqR+qtDogLVw2PIFibM=
Subject key identifier: B2:44:5C:A3:15:55:FD:EE:33:29:42:7E:3D:C6:B0:C2:E7:56:86:FB
Certificate issuer: /CN=e5e03354666c4cb2abfd51411eca5d524b0d5be5
Certificate serial: 019D556E00CEA00C2AA36F7DD8D33D256FD9
Authority key identifier: E5:E0:33:54:66:6C:4C:B2:AB:FD:51:41:1E:CA:5D:52:4B:0D:5B:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5eAzVGZsTLKr_VFBHspdUksNW-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/skRcoxVV_e4zKUJ-PcawwudWhvs.roa
Signing time: Fri 03 Apr 2026 22:19:25 +0000
ROA not before: Fri 03 Apr 2026 22:19:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199454
IP address blocks: 87.232.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/5eAzVGZsTLKr_VFBHspdUksNW-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:55:6e:00:ce:a0:0c:2a:a3:6f:7d:d8:d3:3d:25:6f:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5e03354666c4cb2abfd51411eca5d524b0d5be5
Validity
Not Before: Apr 3 22:19:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b2445ca31555fdee3329427e3dc6b0c2e75686fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e2:45:3b:6e:13:c8:b1:50:c9:b9:f4:4e:26:
a1:b8:da:4c:83:15:62:c3:c0:5c:c3:91:55:96:84:
f9:1a:25:e0:f1:59:c9:00:46:79:de:0b:10:71:fe:
bd:97:a3:b1:51:c2:a9:f8:10:41:41:43:a1:31:8c:
a4:c5:41:bf:c9:f8:0f:0a:2b:c5:f5:75:c3:a8:c2:
6f:fd:39:5d:01:f1:71:18:d1:b4:90:15:09:ad:0b:
e8:9e:1b:85:25:f8:44:a3:5c:0d:78:12:55:ba:5c:
6a:98:b7:dd:c4:8a:16:4a:a8:1b:6a:e3:cb:f5:22:
23:3e:25:a0:f8:91:3d:88:3c:e7:88:55:50:51:9d:
74:54:00:95:fe:b5:90:c3:cb:54:18:92:04:c3:00:
de:8f:f7:9c:16:7e:39:3d:98:50:a1:a7:33:b3:e3:
23:31:44:45:86:ab:4d:06:68:ee:56:46:cb:23:88:
c0:9e:00:d4:a0:b0:22:1d:b8:28:4a:e4:ed:2a:0e:
ed:f2:a7:4f:dc:59:e3:df:9b:8b:85:eb:3c:fe:01:
98:5a:b5:fd:a4:38:e6:c4:ab:84:2a:38:8a:95:18:
63:4d:bf:25:79:35:e4:67:21:0e:d5:0e:d3:0e:10:
5c:05:77:b2:fe:cf:4a:c9:81:be:b0:4a:5d:75:d4:
b7:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:44:5C:A3:15:55:FD:EE:33:29:42:7E:3D:C6:B0:C2:E7:56:86:FB
X509v3 Authority Key Identifier:
keyid:E5:E0:33:54:66:6C:4C:B2:AB:FD:51:41:1E:CA:5D:52:4B:0D:5B:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5eAzVGZsTLKr_VFBHspdUksNW-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/skRcoxVV_e4zKUJ-PcawwudWhvs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.232.73.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:31:4d:06:aa:76:5f:e0:9b:9d:5d:bd:73:e1:25:39:cb:fa:
a6:2f:e5:33:3d:60:f2:05:a2:3d:18:9b:17:71:44:c4:f4:60:
f3:72:49:a3:84:9a:ca:78:b7:8f:77:49:07:e8:94:01:d1:6e:
47:ed:4d:73:e1:31:07:ae:eb:14:69:73:e8:c2:1f:a6:23:2d:
f5:64:66:85:86:87:6d:ec:44:49:44:c7:5a:b1:62:50:17:5c:
d8:30:cc:d4:1b:98:7f:04:10:8c:23:4a:fa:83:f4:9f:1e:f6:
87:4c:c3:1e:ae:7b:09:95:4b:b5:7a:2b:44:90:f2:60:e7:ad:
e9:0d:00:4d:11:1c:ff:e2:43:79:dc:ff:37:98:af:39:80:36:
58:83:bc:7c:75:e2:ef:be:5c:c4:62:4f:76:d2:16:4c:3f:c6:
a3:75:a9:a2:ee:76:7b:f8:a6:c0:97:ad:d8:d1:68:9f:20:5c:
ed:d3:38:3e:c1:b5:d6:ba:58:fe:4e:e1:27:97:8a:94:b0:dd:
61:3b:22:bc:dc:10:e2:c3:56:7c:a7:67:c3:a3:a7:89:43:a7:
4b:8c:8a:43:20:5c:74:b0:bc:d7:fc:c2:13:e6:ea:d6:cd:0b:
3a:46:13:4a:0f:78:38:bc:05:48:cd:55:31:3c:47:c4:f9:97:
8b:c1:4b:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:54:25 2026 by rpki-client