Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/hNwkWWORqk69PZDzPoklCT-pW2c.roa
File: hNwkWWORqk69PZDzPoklCT-pW2c.roa (raw, json)
Hash identifier: uHFWWM08ArAP1Yt0tElsKjstH5XB+R5g8Oy9iI8szYA=
Subject key identifier: 84:DC:24:59:63:91:AA:4E:BD:3D:90:F3:3E:89:25:09:3F:A9:5B:67
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 019F3C0897F982E5D7F469B5485909CC8698
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/hNwkWWORqk69PZDzPoklCT-pW2c.roa
Signing time: Tue 07 Jul 2026 10:03:43 +0000
ROA not before: Tue 07 Jul 2026 10:03:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213751
IP address blocks: 87.76.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 13:09:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3c:08:97:f9:82:e5:d7:f4:69:b5:48:59:09:cc:86:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Jul 7 10:03:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=84dc24596391aa4ebd3d90f33e8925093fa95b67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:26:b3:cc:da:e5:2d:3f:51:60:7e:e4:ff:0b:
01:51:a3:13:0f:83:a6:58:09:2e:59:5a:b8:bc:d5:
71:6a:b5:49:4e:41:9a:d9:3f:21:0a:85:85:1a:61:
00:3f:e8:f8:95:ad:24:09:a1:02:d3:2f:49:ab:dd:
29:17:1c:a5:12:b9:c5:37:55:b2:47:53:9f:5f:db:
74:5c:3e:bd:89:c9:62:6e:99:79:bc:b4:11:65:e3:
c3:68:e6:5c:39:dd:c6:a5:9e:7d:a8:a5:22:87:4d:
b6:5a:1c:33:b6:0b:bd:27:0f:25:26:e4:92:a7:f4:
6d:be:cd:30:b8:f1:f5:d3:e7:29:4e:aa:be:29:65:
0e:97:9d:8e:76:7b:df:19:01:98:54:e5:e6:ab:8e:
8a:75:cf:8f:a1:3a:26:a8:da:79:29:91:f4:de:46:
96:0e:1f:aa:a8:70:cb:68:06:0a:87:7b:e4:c7:5b:
3f:9a:22:a5:a0:74:d9:f7:77:c8:7a:28:f4:75:24:
f7:d5:fe:9f:1d:c2:3d:32:57:38:58:95:14:eb:06:
66:53:51:0e:6d:64:53:00:12:5f:5b:38:9f:14:48:
0e:f2:3a:94:dc:88:ec:43:48:ef:b8:e1:5e:a6:36:
dc:3a:8f:58:55:b3:42:d5:f0:d4:d3:a5:76:e4:32:
78:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:DC:24:59:63:91:AA:4E:BD:3D:90:F3:3E:89:25:09:3F:A9:5B:67
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/hNwkWWORqk69PZDzPoklCT-pW2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.162.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:da:ce:1a:47:39:9d:2b:d3:a4:e6:99:41:a9:88:ac:c8:20:
4c:52:23:17:3e:07:2b:77:77:d8:8f:5a:f3:7f:98:01:5f:a3:
15:b0:f5:86:7e:53:c9:e0:63:f4:4a:c3:58:a3:bb:42:f4:3b:
5f:d1:6f:6c:9e:14:da:d1:ff:03:4c:8b:c6:fe:82:be:05:e4:
51:f2:23:ec:15:fb:15:a5:3a:66:62:65:2b:5c:42:37:d8:a3:
a4:c1:b6:42:ce:fa:80:8d:6c:d3:11:af:12:c0:6b:a3:95:c5:
38:7f:29:e7:b8:2e:91:67:74:d6:4e:8c:0f:ff:a8:f5:5b:d2:
71:8f:84:22:84:f8:41:8f:76:65:ae:69:77:2d:06:0a:17:5c:
96:9c:7d:31:f9:2e:17:f4:9a:29:83:0d:7a:ca:39:90:9d:5d:
42:b1:ea:50:9b:20:0a:a7:59:03:bd:3c:28:fc:52:39:05:ef:
4f:77:ae:e7:8b:cd:90:68:54:7a:20:48:8e:96:78:81:8d:18:
92:e9:6c:ce:ab:82:c7:f3:11:8f:55:05:7c:bc:a7:53:77:dc:
c8:8a:54:04:09:64:9d:b8:54:74:32:0c:e3:9a:b5:4b:21:8e:
e7:42:7c:ff:43:6d:c2:01:9e:79:82:73:75:a6:26:13:60:b5:
92:ec:9a:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:01:49 2026 by rpki-client