Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/m1vyL9bM_58TV6E-2LHLaF6kjns.roa
File: m1vyL9bM_58TV6E-2LHLaF6kjns.roa (raw, json)
Hash identifier: QEOPw190rENGCONqVuwdx3V46qyR4Pq+aRvCQNzUIA8=
Subject key identifier: 9B:5B:F2:2F:D6:CC:FF:9F:13:57:A1:3E:D8:B1:CB:68:5E:A4:8E:7B
Certificate issuer: /CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Certificate serial: 019E6D7ECD5DB98241CD284D3494A437A9FE
Authority key identifier: 0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/m1vyL9bM_58TV6E-2LHLaF6kjns.roa
Signing time: Thu 28 May 2026 07:31:27 +0000
ROA not before: Thu 28 May 2026 07:31:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 18450
IP address blocks: 87.58.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:6d:7e:cd:5d:b9:82:41:cd:28:4d:34:94:a4:37:a9:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Validity
Not Before: May 28 07:31:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9b5bf22fd6ccff9f1357a13ed8b1cb685ea48e7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:82:66:fe:22:2f:9e:29:48:87:b9:4b:4d:54:
91:2c:40:7b:f0:f2:5f:2f:99:1b:58:c4:d2:6a:9d:
5e:e0:49:2f:4c:69:30:7d:0f:9b:42:5b:f0:67:d8:
e6:0c:35:65:4a:c8:c4:0c:0b:c4:17:6e:7b:01:41:
17:14:0c:f5:ed:25:3e:7b:4f:20:71:17:8a:3b:11:
c0:69:0e:9c:3b:67:4e:e2:84:a4:70:6e:b3:65:aa:
b9:be:8d:be:8f:dd:c3:98:64:fe:53:18:29:cb:85:
31:42:94:c3:9e:5f:c2:cf:27:6e:ab:f1:5e:82:fa:
6d:d6:65:69:50:df:3c:97:ff:6f:a8:eb:a3:7f:8e:
d8:a2:5d:53:b4:74:ff:e2:90:e3:80:ce:aa:bf:61:
c5:62:c9:73:04:cb:3e:e9:1f:e8:38:f7:1a:46:a6:
7e:5a:29:8a:6d:16:ef:fc:ef:81:b0:ae:4b:a5:50:
c6:93:b8:e3:12:65:c0:6c:52:b7:97:08:43:61:34:
c4:78:f9:7d:34:e0:f0:0a:d2:e4:71:fd:a3:98:af:
bc:12:97:74:e1:18:d6:8e:92:6d:88:b4:a5:83:e3:
3b:ae:f7:2e:50:cd:38:2c:e2:14:74:48:f2:98:6a:
51:46:15:9b:1a:28:e7:6c:c1:3d:38:ca:78:ee:62:
14:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:5B:F2:2F:D6:CC:FF:9F:13:57:A1:3E:D8:B1:CB:68:5E:A4:8E:7B
X509v3 Authority Key Identifier:
keyid:0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/m1vyL9bM_58TV6E-2LHLaF6kjns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.58.199.0/24
Signature Algorithm: sha256WithRSAEncryption
89:7c:7c:97:09:01:3a:16:f3:1a:55:bc:b0:47:93:5d:bb:56:
83:64:c6:a0:43:fd:83:2d:30:23:3b:52:e5:b6:4e:24:35:00:
4c:99:8c:e5:31:53:f7:58:33:c7:16:63:d8:90:34:09:e7:93:
aa:53:bc:f1:f5:5a:57:95:4f:a8:23:71:27:e0:38:79:22:97:
96:05:0e:22:87:f8:02:a3:5b:c0:01:e6:a0:80:55:33:7c:a4:
df:5d:d6:ab:06:1d:60:4a:15:11:43:9e:2a:5b:b7:cc:50:27:
0b:ab:36:ea:5a:cd:09:23:dc:d6:da:3a:b1:2f:77:88:47:9b:
ad:26:62:07:80:09:3f:84:c9:cf:7d:88:85:4f:17:54:01:70:
1f:83:02:ad:36:f7:3d:64:a6:cb:2f:fb:47:ed:87:9f:04:25:
1f:e4:50:47:82:6c:67:bf:96:4b:58:92:ab:4c:72:09:08:ef:
ae:85:20:28:7f:32:56:bd:c2:43:40:85:f9:eb:7c:97:39:e9:
e2:cb:92:8c:78:80:74:9a:e1:f7:97:98:ba:a8:19:ce:89:46:
9b:2e:15:80:40:b2:e8:f5:ef:63:f8:d0:7f:2d:d3:d2:f9:5b:
2e:b5:10:76:ac:e3:68:9a:55:a9:f7:b1:68:32:ae:e7:ae:05:
07:48:7f:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:23:21 2026 by rpki-client