Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/iMbX4smKa8xJf9yLd65uHTTnGv4.roa
File: iMbX4smKa8xJf9yLd65uHTTnGv4.roa (raw, json)
Hash identifier: Nms8ODr2zFhV2NVPgp1SUssbIbV4l1sf+VhlDMzk80A=
Subject key identifier: 88:C6:D7:E2:C9:8A:6B:CC:49:7F:DC:8B:77:AE:6E:1D:34:E7:1A:FE
Certificate issuer: /CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Certificate serial: 019D5F73786B9FB65472094AD200F715816B
Authority key identifier: 5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/iMbX4smKa8xJf9yLd65uHTTnGv4.roa
Signing time: Sun 05 Apr 2026 21:01:36 +0000
ROA not before: Sun 05 Apr 2026 21:01:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203156
IP address blocks: 87.232.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:5f:73:78:6b:9f:b6:54:72:09:4a:d2:00:f7:15:81:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Validity
Not Before: Apr 5 21:01:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=88c6d7e2c98a6bcc497fdc8b77ae6e1d34e71afe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f7:88:13:01:64:f3:3c:20:0e:a5:0c:61:52:
43:8d:e1:c1:f2:24:61:78:50:29:8a:e8:a5:44:55:
44:ca:53:13:53:1e:d6:75:5b:a6:dc:dc:2d:23:da:
bd:dc:30:7b:c9:6b:d1:30:72:b7:f2:6d:16:c5:6d:
ba:04:84:70:d1:da:66:e8:2c:81:2c:30:22:79:53:
b2:35:2d:8e:0b:f6:94:f3:21:7f:49:81:30:a4:09:
56:c6:f3:6e:48:53:cb:bc:23:a8:72:4e:f2:b5:d3:
f8:ea:b8:e9:36:53:ea:b8:0e:df:65:c3:67:ba:b3:
1f:5a:24:97:02:1a:54:32:ac:13:85:6b:17:f8:d5:
72:99:29:cf:84:c6:a7:f5:81:33:d5:b1:53:80:12:
33:10:80:71:87:a7:50:87:23:08:11:17:ef:17:91:
40:a1:c3:bc:eb:ca:67:db:59:fd:2a:d1:18:d3:15:
00:4f:fd:ea:b4:36:74:4c:0f:29:a3:8f:43:61:a9:
cc:c7:8d:3e:93:53:77:bb:7f:1b:41:df:61:26:0c:
e1:43:85:86:4e:43:9b:8e:96:73:75:eb:87:71:69:
85:5d:dd:1a:33:94:24:4d:47:79:a7:35:71:c4:36:
62:6b:e4:3c:25:aa:6e:e2:41:5f:e9:04:c4:8f:77:
7a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:C6:D7:E2:C9:8A:6B:CC:49:7F:DC:8B:77:AE:6E:1D:34:E7:1A:FE
X509v3 Authority Key Identifier:
keyid:5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/iMbX4smKa8xJf9yLd65uHTTnGv4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.232.95.0/24
Signature Algorithm: sha256WithRSAEncryption
97:da:98:fe:35:3b:4b:6e:4c:90:a3:4b:0b:f8:20:db:38:25:
7a:c8:16:25:bc:16:45:23:8a:f2:5f:e0:e0:c8:c8:bb:b4:05:
d9:53:2c:aa:47:a3:e6:1e:13:e2:83:60:14:64:cb:67:bc:60:
ae:70:9d:6d:d3:6d:e0:fb:c0:15:87:b6:94:96:d7:c7:5b:2f:
74:d5:79:49:fc:b3:59:e3:0e:04:dd:19:56:c1:fe:0e:67:a0:
f0:be:af:a3:e5:c8:87:37:dc:a8:0a:33:a0:d1:4e:b5:8f:a4:
db:bc:36:b5:bb:c6:bb:af:77:fe:30:0e:4c:49:a8:72:13:fc:
a1:a9:0b:82:2b:86:4d:6d:5a:0a:c7:f3:b0:1b:9f:8f:69:3c:
69:ae:ea:d5:2b:df:77:5e:35:8c:30:89:9a:52:94:ea:97:17:
98:f1:23:b2:91:48:08:14:d6:3b:1b:a3:b5:d6:4b:0f:13:9c:
79:29:1d:79:50:1b:a5:19:1f:d4:33:c0:e8:56:8b:16:b5:22:
73:97:8b:14:16:99:8b:29:8e:97:8e:b8:ad:e3:bb:23:0e:a9:
83:51:08:80:d5:95:f5:8c:3c:08:4b:16:84:64:6f:e7:7a:ee:
86:db:e5:64:b8:96:f7:d4:c8:f9:0b:58:8b:c4:4a:4d:4c:5a:
02:0a:56:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:44:05 2026 by rpki-client