Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/pnCriNMrV8MNuFkPZNNZRVmGWSk.roa
File: pnCriNMrV8MNuFkPZNNZRVmGWSk.roa (raw, json)
Hash identifier: /IZmDvEM0Hcb0y+CGjsYETlKWyA2jAPSpzNe/5doZJo=
Subject key identifier: A6:70:AB:88:D3:2B:57:C3:0D:B8:59:0F:64:D3:59:45:59:86:59:29
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 019F8165B6778B36E508DD78B80BB4E01E25
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/pnCriNMrV8MNuFkPZNNZRVmGWSk.roa
Signing time: Mon 20 Jul 2026 21:19:14 +0000
ROA not before: Mon 20 Jul 2026 21:19:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207483
IP address blocks: 87.76.143.0/24 maxlen: 24
87.76.154.0/24 maxlen: 24
87.76.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 13:09:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:81:65:b6:77:8b:36:e5:08:dd:78:b8:0b:b4:e0:1e:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Jul 20 21:19:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a670ab88d32b57c30db8590f64d3594559865929
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3d:9c:7b:b3:e1:13:60:b3:56:a1:96:0d:7e:
7a:67:14:77:8b:e1:a3:dc:7f:7b:a8:f5:7f:67:ae:
af:78:49:44:22:80:41:83:8b:db:cb:44:6c:53:80:
7d:a8:fb:a6:38:b9:19:4d:c0:22:20:b1:d2:8f:4b:
49:05:c4:cd:30:1e:4f:25:60:12:dd:78:7b:b5:ef:
cd:24:14:f4:4b:a0:56:cc:f2:4f:1f:0e:86:e8:a9:
35:29:e6:d7:87:80:be:33:4c:80:aa:91:e0:f5:b3:
6e:ce:0c:82:a0:5b:90:4f:d8:a2:77:d5:a7:2f:02:
69:26:fb:e6:b7:74:55:3d:3f:68:4d:e9:b3:3d:17:
70:b7:7f:05:c4:f3:b8:f7:bc:aa:33:07:74:65:4d:
5a:19:b9:85:89:cc:d9:c7:5d:d7:81:8e:90:56:df:
34:b0:d3:c2:6e:55:44:ec:82:8e:71:78:5b:09:08:
57:de:62:e0:da:e3:d2:ff:48:c1:17:08:c7:69:70:
2c:c6:d2:9c:51:82:56:16:6e:33:23:5a:e8:5d:eb:
c3:6d:0d:14:9f:5a:8c:af:31:bd:ed:df:f8:d8:89:
16:bc:33:1e:1d:ad:da:84:56:05:33:4c:e1:a6:91:
df:57:82:fb:af:53:57:12:20:4e:ed:e5:a9:cc:1b:
83:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:70:AB:88:D3:2B:57:C3:0D:B8:59:0F:64:D3:59:45:59:86:59:29
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/pnCriNMrV8MNuFkPZNNZRVmGWSk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.143.0/24
87.76.154.0/24
87.76.156.0/24
Signature Algorithm: sha256WithRSAEncryption
92:27:2c:14:c5:de:17:10:4c:8e:c9:65:5c:9a:59:18:f5:24:
a1:80:17:d0:11:ca:09:10:99:99:67:95:ba:63:04:a2:f3:f6:
81:c5:bf:6f:cb:7c:20:b8:06:45:4f:f0:29:19:24:d8:ab:c9:
9f:e4:7d:a3:c8:85:2a:59:ef:24:d5:3b:df:4e:cc:00:4f:90:
42:bc:1e:05:c1:c9:59:ed:ff:d2:bb:67:e9:c9:fd:1c:fa:47:
bb:1a:1b:b6:6c:3a:fe:56:60:4c:4f:67:ac:97:45:e1:ec:db:
e2:ed:7e:2a:74:00:80:d7:a6:e8:7f:71:28:87:f1:82:c0:9e:
69:25:54:f7:a7:9f:6e:80:88:cf:04:27:93:8a:64:b6:ba:90:
1d:2c:a1:bf:36:ae:6b:9e:5a:ff:8f:a8:90:51:87:c4:d9:df:
ad:aa:07:fa:1c:0c:7c:3e:b9:f9:9a:3d:8b:42:0c:b5:c9:45:
08:60:3a:c5:5b:4a:56:69:db:63:35:3e:e3:ec:f8:69:85:95:
ba:90:b6:bf:8e:46:b0:89:c9:a6:09:eb:34:17:2c:7b:4e:05:
c6:91:c8:d7:48:58:09:3b:4b:05:2a:eb:8f:0b:00:5f:56:7f:
a0:db:2e:cc:41:d6:54:f6:ef:3c:5e:db:20:cc:32:78:af:de:
09:f6:ce:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 19:36:27 2026 by rpki-client