Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/d3lmTr7PIEzpH3BI6BqiMMOZGzI.roa
File: d3lmTr7PIEzpH3BI6BqiMMOZGzI.roa (raw, json)
Hash identifier: 5T88juZeJZkfQqxz39ljaMd8hJFf/Kn+i1imnzr2zME=
Subject key identifier: 77:79:66:4E:BE:CF:20:4C:E9:1F:70:48:E8:1A:A2:30:C3:99:1B:32
Certificate issuer: /CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Certificate serial: 019E8E33F443B97D61050D71933A77C5DF95
Authority key identifier: 5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/d3lmTr7PIEzpH3BI6BqiMMOZGzI.roa
Signing time: Wed 03 Jun 2026 15:57:10 +0000
ROA not before: Wed 03 Jun 2026 15:57:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216151
IP address blocks: 87.232.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8e:33:f4:43:b9:7d:61:05:0d:71:93:3a:77:c5:df:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Validity
Not Before: Jun 3 15:57:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7779664ebecf204ce91f7048e81aa230c3991b32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:34:f2:57:10:74:ee:00:af:d0:a9:68:7b:b2:
76:04:01:46:a4:04:04:52:2e:16:d9:bf:46:76:d9:
b5:8a:2c:13:f6:16:50:9f:44:8e:e1:1f:7e:e4:5b:
a9:19:69:7c:86:93:78:a0:05:7e:d1:3a:31:cb:5a:
a1:03:2a:55:61:83:cf:d4:5c:9d:4f:3c:5d:b0:de:
f8:4a:38:43:6c:51:c5:36:71:6b:2a:04:1e:33:45:
a5:7c:99:1d:c0:61:73:f4:6a:63:55:70:3c:86:31:
04:9d:80:59:d7:3c:04:35:43:35:83:c3:ab:ef:59:
a9:3d:fa:60:2f:24:4b:13:f2:01:0a:21:ac:0c:4d:
e6:05:49:04:3f:da:15:2b:af:1a:b0:7d:96:07:c3:
35:40:3e:25:6c:d6:ec:12:8f:73:c3:a6:ec:56:d0:
0a:c4:8d:3e:7b:88:09:dc:c3:bc:18:58:26:ef:6b:
40:c0:ea:69:4e:ad:b5:42:9b:71:d9:92:9b:3c:84:
a9:5a:5f:9b:42:91:6e:f7:05:59:cc:7f:6d:41:83:
1a:3d:e4:af:5f:f2:31:1a:b8:63:b3:17:9a:1a:0a:
fe:ca:6e:57:29:dc:66:52:26:2f:17:36:82:46:ae:
31:7d:b6:65:83:87:41:82:22:26:05:d7:11:0f:66:
21:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:79:66:4E:BE:CF:20:4C:E9:1F:70:48:E8:1A:A2:30:C3:99:1B:32
X509v3 Authority Key Identifier:
keyid:5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/d3lmTr7PIEzpH3BI6BqiMMOZGzI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.232.92.0/24
Signature Algorithm: sha256WithRSAEncryption
09:ff:88:43:8a:63:93:04:ff:e0:83:80:42:e9:84:2b:1b:31:
8b:ab:9a:b1:d6:28:10:fc:38:21:24:ac:50:cd:8a:d8:74:34:
cf:eb:78:ef:0e:03:62:c6:3e:e8:b7:90:dc:49:eb:1f:e0:90:
04:e1:82:ff:15:3b:ae:21:b7:16:bd:18:75:42:19:d8:e2:86:
23:d6:a3:5f:ed:c2:03:de:22:c3:b8:b5:80:8e:2e:84:12:5d:
94:62:3e:df:7d:b9:99:5d:0c:45:d6:78:d7:e8:f3:54:64:2b:
32:f2:f9:0b:a1:f3:8b:eb:ef:c7:12:0b:21:be:bd:17:35:fa:
40:e4:67:37:4f:df:03:8a:70:4a:aa:20:6e:ac:79:43:87:0d:
95:87:91:a3:76:c6:4e:e5:1e:66:02:59:8a:cb:83:cb:ba:91:
a2:48:6e:0c:ba:c9:ef:ac:f0:ba:8a:7e:5e:90:ec:3b:a5:ec:
e5:52:a5:c3:1c:90:1b:6c:c3:f0:79:e5:17:e4:68:a2:88:11:
f4:8f:a5:29:3d:45:cc:2b:75:bb:3d:74:51:80:18:64:6b:0f:
7a:25:3f:4a:71:a0:d3:64:08:38:88:89:3b:43:8f:68:05:8a:
71:31:d3:88:fe:3b:96:ee:00:03:f5:9f:40:3b:2d:c0:3d:9d:
b0:74:20:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:10:53 2026 by rpki-client