Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/1UR7iOUK7d39VgLhHHYabfCLfOQ.roa
File: 1UR7iOUK7d39VgLhHHYabfCLfOQ.roa (raw, json)
Hash identifier: oXZ47tHg5pSp0xSQ+s2LJEyC4fnJ8Z/RFiohj4q0860=
Subject key identifier: D5:44:7B:88:E5:0A:ED:DD:FD:56:02:E1:1C:76:1A:6D:F0:8B:7C:E4
Certificate issuer: /CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Certificate serial: 019E6DFEFA18B6062C21B12E66EA3453B6FA
Authority key identifier: 5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/1UR7iOUK7d39VgLhHHYabfCLfOQ.roa
Signing time: Thu 28 May 2026 09:51:27 +0000
ROA not before: Thu 28 May 2026 09:51:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200677
IP address blocks: 87.232.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:6d:fe:fa:18:b6:06:2c:21:b1:2e:66:ea:34:53:b6:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Validity
Not Before: May 28 09:51:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d5447b88e50aedddfd5602e11c761a6df08b7ce4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d9:0a:5e:b1:f1:0f:e6:ac:6c:36:6a:3d:31:
c2:8e:30:40:de:db:f2:dc:a6:8a:2f:5e:82:d9:1f:
1b:ce:dc:62:95:e1:d1:bc:83:71:9e:a7:dd:20:0f:
69:32:20:79:fd:b2:f4:76:d5:e5:67:26:c8:80:9e:
b8:c4:51:1e:c4:0b:c0:83:62:31:62:75:cd:43:f4:
97:84:f4:ac:7f:88:a1:2e:b7:86:88:d0:da:c8:0d:
23:c9:b0:f2:c8:c5:e6:21:32:ec:fd:4a:cb:de:d7:
d5:d3:d7:c7:b4:38:8d:e5:21:6e:a4:fe:c3:74:74:
00:11:b2:ab:b4:29:70:4a:9d:9a:ee:2b:5d:ef:15:
45:ca:5b:e0:b0:28:c1:12:80:d6:b2:8d:9d:17:49:
22:a2:ad:b4:19:c5:dc:b5:95:3c:a4:47:7f:08:d5:
39:f1:05:be:e7:ee:b4:9e:f7:04:b6:a9:60:2d:f4:
99:a3:7b:98:23:69:c7:28:ca:68:d2:34:3a:38:24:
48:85:15:dc:0f:f1:cc:7c:c5:25:98:ee:6b:7a:80:
26:ed:1e:1b:41:aa:6f:7c:13:38:26:f5:4d:66:4d:
c8:73:9a:6c:a2:9e:11:0e:7c:e4:8e:a9:2b:6f:35:
19:95:bd:5f:d4:09:46:a6:76:95:53:5a:2d:f5:86:
e3:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:44:7B:88:E5:0A:ED:DD:FD:56:02:E1:1C:76:1A:6D:F0:8B:7C:E4
X509v3 Authority Key Identifier:
keyid:5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/1UR7iOUK7d39VgLhHHYabfCLfOQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.232.86.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:f2:94:41:be:55:a7:61:ea:13:04:af:30:f6:20:d4:9f:be:
fa:87:f6:02:5a:56:14:a4:a2:70:a8:64:51:6f:37:83:f3:b5:
01:63:c2:1b:00:81:fd:64:4b:69:9f:8f:33:ae:2b:32:ff:1e:
57:c0:a8:e9:85:e1:be:2e:a5:3e:06:d6:8f:a3:ab:d9:a8:a9:
d3:97:14:76:49:7d:6f:20:da:0f:cc:ee:96:81:1d:12:ea:12:
11:30:67:79:b6:9e:6a:26:a2:e0:a6:85:aa:39:79:16:fb:ee:
70:67:be:4b:fb:71:58:e2:fa:5d:ef:9e:98:3b:eb:5d:d3:14:
21:1e:af:1e:90:4b:4b:b1:da:08:37:76:b5:3b:c5:5b:8b:1f:
32:2f:c9:51:28:68:e4:e2:db:db:9b:91:93:fc:f0:8d:c7:c8:
57:42:90:2f:37:e5:bf:22:21:2a:3b:39:80:f6:d4:8e:55:f3:
60:f9:82:1c:61:94:58:a7:8b:ec:57:5b:cd:8d:13:51:74:8e:
15:ec:89:17:7f:49:71:c1:c6:69:90:02:87:a5:b4:fd:07:6a:
96:f3:2d:93:86:f2:0b:a2:75:f4:4d:67:88:82:70:9a:4d:7d:
f8:70:ca:c2:81:c8:60:f9:0a:51:a8:1e:b9:6a:27:e7:a0:9f:
d8:de:4a:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:44:18 2026 by rpki-client