Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/06aY5sUiLwUJYb7Sqx4zUqypUt8.roa
File: 06aY5sUiLwUJYb7Sqx4zUqypUt8.roa (raw, json)
Hash identifier: XeqxPW/4MduzopPGQSF0zz5a8guA8N3bo4jJDZfZ3R0=
Subject key identifier: D3:A6:98:E6:C5:22:2F:05:09:61:BE:D2:AB:1E:33:52:AC:A9:52:DF
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 019EFB5CFA28218A9FEDBDD1EB9FA1FA49D5
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/06aY5sUiLwUJYb7Sqx4zUqypUt8.roa
Signing time: Wed 24 Jun 2026 20:40:34 +0000
ROA not before: Wed 24 Jun 2026 20:40:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213488
IP address blocks: 87.76.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Jun 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fb:5c:fa:28:21:8a:9f:ed:bd:d1:eb:9f:a1:fa:49:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Jun 24 20:40:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d3a698e6c5222f050961bed2ab1e3352aca952df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:24:01:c5:76:c4:d7:a6:a2:d5:06:4d:c4:27:
77:24:58:de:93:39:69:48:d7:57:a4:a0:1f:00:dc:
a1:86:8e:a7:f5:e1:f6:1d:68:74:d6:d8:3d:43:f4:
94:94:1e:41:c4:b2:f1:b2:73:67:f1:a0:cf:e0:1b:
f8:bc:9d:5a:09:3f:5f:1e:10:92:94:25:a2:41:da:
34:60:7e:f6:46:84:08:af:3d:7c:f8:53:ed:d9:ab:
fc:cf:e0:11:bf:2d:20:00:dd:9a:a8:f9:41:ff:6f:
ef:a1:95:9f:01:10:97:96:74:4c:9c:1c:35:69:c2:
ba:7b:bb:c8:44:af:47:3f:2d:7e:e6:ec:11:00:c1:
52:a2:31:10:79:9c:62:50:a3:a7:af:a9:a7:41:c2:
f6:14:28:44:93:ab:37:b6:80:c6:eb:10:23:b6:f9:
dc:6b:cb:51:92:1d:bd:e7:62:bd:46:37:c3:16:e6:
a3:56:72:c6:9a:09:33:ab:92:b6:8d:5f:3f:fd:0d:
5f:3f:2f:ca:b2:61:fe:fb:b2:67:c7:8c:fa:59:e0:
11:c1:bf:eb:77:3a:88:fb:ef:f8:b6:22:ee:c4:24:
70:e7:3f:1e:a4:01:c6:f0:c9:1d:9a:a4:5c:58:db:
6b:84:13:39:e2:1d:ac:b0:57:68:4a:1a:5d:1a:db:
b4:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:A6:98:E6:C5:22:2F:05:09:61:BE:D2:AB:1E:33:52:AC:A9:52:DF
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/06aY5sUiLwUJYb7Sqx4zUqypUt8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.195.0/24
Signature Algorithm: sha256WithRSAEncryption
85:ec:62:e8:78:f8:2a:e1:d3:e3:76:cf:b0:d6:f6:e9:da:e8:
b8:d0:a6:90:c8:75:eb:bb:19:e3:78:be:28:27:f8:d8:6b:5e:
b7:5d:bd:08:d7:9d:77:cf:85:f5:e9:82:4f:86:46:6e:5f:6b:
d0:c1:f6:f1:d5:37:10:fb:b5:25:f1:8a:01:61:38:bf:52:e2:
0e:b8:fc:ca:d5:1a:14:a8:41:75:b5:d4:be:df:4f:4b:47:91:
75:d9:23:12:38:f4:2f:83:fc:14:37:ef:e3:31:74:47:e4:5c:
96:3a:9d:2e:65:ad:37:12:8f:a7:c7:5f:d7:d0:62:fc:5f:9f:
17:2f:69:8c:1d:bc:f4:ac:4e:e8:53:45:bf:2f:a3:96:89:7e:
87:82:da:3f:92:16:b6:01:09:5d:84:47:bf:03:cb:a4:3d:08:
2f:1a:06:c2:ac:74:bf:83:d5:28:80:f9:c0:b1:5e:df:32:dc:
bd:5a:68:d9:88:9c:39:ea:aa:20:8f:9a:60:73:10:ce:83:45:
cf:73:c4:f2:bf:96:4f:21:d2:b0:46:3c:15:6e:33:bb:33:eb:
88:5c:86:ed:96:8b:da:b7:51:b1:7d:c6:ae:08:8f:43:a3:8e:
aa:f1:59:06:7d:5e:b5:c3:1d:ae:21:cc:62:58:18:5a:7a:2e:
2b:7e:60:89
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ77XPooIYqf7b3R65+h+knVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyMWYwY2JhMTBkYWEzMDJlM2IxNjdjZWU1Mzk1Zjc0MmY1
MzBiMDkwHhcNMjYwNjI0MjA0MDM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkM2E2OThlNmM1MjIyZjA1MDk2MWJlZDJhYjFlMzM1MmFjYTk1MmRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCQBxXbE16ai1QZNxCd3JFjekzlp
SNdXpKAfANyhho6n9eH2HWh01tg9Q/SUlB5BxLLxsnNn8aDP4Bv4vJ1aCT9fHhCS
lCWiQdo0YH72RoQIrz18+FPt2av8z+ARvy0gAN2aqPlB/2/voZWfARCXlnRMnBw1
acK6e7vIRK9HPy1+5uwRAMFSojEQeZxiUKOnr6mnQcL2FChEk6s3toDG6xAjtvnc
a8tRkh2952K9RjfDFuajVnLGmgkzq5K2jV8//Q1fPy/KsmH++7Jnx4z6WeARwb/r
dzqI++/4tiLuxCRw5z8epAHG8MkdmqRcWNtrhBM54h2ssFdoShpdGtu0HQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNOmmObFIi8FCWG+0qseM1KsqVLfMB8GA1UdIwQY
MBaAFFIfDLoQ2qMC47FnzuU5X3QvUwsJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWg4TXVoRGFvd0xqc1dmTzVUbGZkQzlUQ3drLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82OGNlMzYtNzRlNC00NDNiLWFlZjEt
M2JiOGIwNzVkNjlmLzEvMDZhWTVzVWlMd1VKWWI3U3F4NHpVcXlwVXQ4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82OGNlMzYtNzRlNC00NDNiLWFlZjEtM2JiOGIwNzVkNjlm
LzEvVWg4TXVoRGFvd0xqc1dmTzVUbGZkQzlUQ3drLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV0zDMA0G
CSqGSIb3DQEBCwUAA4IBAQCF7GLoePgq4dPjds+w1vbp2ui40KaQyHXruxnjeL4o
J/jYa163Xb0I1513z4X16YJPhkZuX2vQwfbx1TcQ+7Ul8YoBYTi/UuIOuPzK1RoU
qEF1tdS+309LR5F12SMSOPQvg/wUN+/jMXRH5FyWOp0uZa03Eo+nx1/X0GL8X58X
L2mMHbz0rE7oU0W/L6OWiX6Hgto/kha2AQldhEe/A8ukPQgvGgbCrHS/g9UogPnA
sV7fMty9WmjZiJw56qogj5pgcxDOg0XPc8Tyv5ZPIdKwRjwVbjO7M+uIXIbtlova
t1GxfcauCI9Do46q8VkGfV61wx2uIcxiWBhaei4rfmCJ
-----END CERTIFICATE-----
Generated at Sat Jun 27 20:30:22 2026 by rpki-client