Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/06b241-6de7-485c-98ae-f9bd64ca6e4c/1/m4dgqt4q3BW8OWqlBOyJfQCkzg4.roa
File: m4dgqt4q3BW8OWqlBOyJfQCkzg4.roa (raw, json)
Hash identifier: RX9ZrO6C2aJh14zzdzbYCuRJ5VKIoTmYAZYYqulZ2cM=
Subject key identifier: 9B:87:60:AA:DE:2A:DC:15:BC:39:6A:A5:04:EC:89:7D:00:A4:CE:0E
Certificate issuer: /CN=aa4aac1948cee23ddf4d715f803522f93b0cddb4
Certificate serial: 019FA90216CAB4B90D640CC7BD1C49C45A06
Authority key identifier: AA:4A:AC:19:48:CE:E2:3D:DF:4D:71:5F:80:35:22:F9:3B:0C:DD:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/06b241-6de7-485c-98ae-f9bd64ca6e4c/1/m4dgqt4q3BW8OWqlBOyJfQCkzg4.roa
Signing time: Tue 28 Jul 2026 13:55:14 +0000
ROA not before: Tue 28 Jul 2026 13:55:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202521
IP address blocks: 87.76.17.0/24 maxlen: 24
87.76.21.0/24 maxlen: 24
185.145.12.0/22 maxlen: 22
185.145.12.0/24 maxlen: 24
2a07:45c4::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/06b241-6de7-485c-98ae-f9bd64ca6e4c/1/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/06b241-6de7-485c-98ae-f9bd64ca6e4c/1/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Aug 2026 13:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:02:16:ca:b4:b9:0d:64:0c:c7:bd:1c:49:c4:5a:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa4aac1948cee23ddf4d715f803522f93b0cddb4
Validity
Not Before: Jul 28 13:55:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9b8760aade2adc15bc396aa504ec897d00a4ce0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:00:ba:fa:6d:f0:6b:47:77:c7:7f:e5:57:f5:
1d:01:82:74:0a:b9:7a:18:2f:cd:94:35:3a:d7:47:
0c:03:70:da:d7:d4:24:f0:f2:af:8b:3c:93:ba:94:
66:14:c8:64:31:21:9f:c0:17:a8:98:db:da:48:46:
1f:4a:b2:8c:1c:ca:30:60:4b:fa:ea:ac:e5:f1:c9:
49:33:ab:4d:93:24:cf:25:72:0c:eb:56:00:88:ee:
b4:3a:f5:81:76:e8:59:2b:c3:89:4a:7a:06:69:d3:
d7:83:f2:17:f9:cb:cc:3c:dc:bb:26:87:fd:89:6c:
d6:b3:c7:85:aa:a9:70:cd:45:5d:f3:95:2b:72:48:
b2:c2:83:5b:3e:c8:8d:1c:d0:c4:fb:a4:69:5d:ee:
7d:ae:e1:c0:06:90:50:0c:82:7c:f6:ff:7b:3b:73:
86:bc:07:d4:0a:e7:a6:45:fb:17:71:1b:a0:ec:67:
14:0c:97:19:ce:05:01:e4:2a:84:b8:59:16:92:5f:
f6:28:34:b7:1d:af:87:2d:e6:3d:69:cb:25:56:28:
6d:5c:9d:3b:f2:e1:23:72:b6:72:76:62:ff:1a:63:
86:39:44:cf:94:07:bb:32:22:fb:eb:97:4e:c4:9a:
7d:5c:5d:31:5b:b3:6d:24:94:af:55:e8:d3:e7:13:
69:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:87:60:AA:DE:2A:DC:15:BC:39:6A:A5:04:EC:89:7D:00:A4:CE:0E
X509v3 Authority Key Identifier:
keyid:AA:4A:AC:19:48:CE:E2:3D:DF:4D:71:5F:80:35:22:F9:3B:0C:DD:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/06b241-6de7-485c-98ae-f9bd64ca6e4c/1/m4dgqt4q3BW8OWqlBOyJfQCkzg4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/06b241-6de7-485c-98ae-f9bd64ca6e4c/1/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.17.0/24
87.76.21.0/24
185.145.12.0/22
IPv6:
2a07:45c4::/40
Signature Algorithm: sha256WithRSAEncryption
06:8a:73:2a:42:af:59:7d:bb:4d:af:9a:30:3d:70:21:b5:84:
d7:82:7b:07:6a:da:9f:f0:4f:05:75:cb:8a:85:67:b0:f2:5b:
32:11:74:aa:06:2e:d9:a2:c8:e1:99:ac:5d:c5:1d:31:d4:b8:
5b:f8:20:50:11:33:b6:c2:ce:0c:f1:b1:80:45:6f:9b:e5:52:
d7:76:ce:81:cd:01:47:be:b2:e4:33:48:1d:da:1e:68:1e:e3:
75:59:e2:19:f2:19:d2:ca:82:04:bc:2b:82:d6:9f:8c:91:f6:
dd:77:71:24:ed:3b:db:10:67:d6:29:73:d0:84:76:d4:06:04:
70:62:dd:bc:ad:23:41:52:a4:07:93:f4:fc:18:ed:51:8d:a7:
63:bc:fa:2b:a0:12:72:de:a1:00:3c:47:41:5c:ef:39:97:ac:
99:5c:4b:b3:fc:b9:8a:b3:1d:83:f8:80:0a:f4:71:68:45:d0:
2a:79:42:b1:fb:dc:3c:35:11:6b:7a:c4:7e:b4:68:3f:f9:a7:
40:19:17:ac:d7:ab:c4:ab:69:b8:73:5d:48:4c:ad:71:f0:22:
81:53:b1:f0:58:e5:f5:d2:74:70:5b:c8:4d:97:f7:ab:33:d5:
b2:92:7b:01:07:bc:fa:1f:15:bc:22:2b:7c:c6:db:45:7c:c7:
a9:47:5a:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 3 15:28:04 2026 by rpki-client