Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/0VJ0whNixje22DDGoLcESzOhkBo.roa
File: 0VJ0whNixje22DDGoLcESzOhkBo.roa (raw, json)
Hash identifier: vwSk7VJFbdt7rppwHECfJlQSgb6bXYJRCjuui83s5wY=
Subject key identifier: D1:52:74:C2:13:62:C6:37:B6:D8:30:C6:A0:B7:04:4B:33:A1:90:1A
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 019FF706E22E8D6A7914FD172881A24DEDF8
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/0VJ0whNixje22DDGoLcESzOhkBo.roa
Signing time: Wed 12 Aug 2026 17:30:51 +0000
ROA not before: Wed 12 Aug 2026 17:30:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218977
IP address blocks: 87.76.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 16:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f7:06:e2:2e:8d:6a:79:14:fd:17:28:81:a2:4d:ed:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Aug 12 17:30:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d15274c21362c637b6d830c6a0b7044b33a1901a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:3f:62:4f:db:f0:5a:41:93:40:51:26:d6:c9:
47:f1:3d:e2:c9:9f:75:c2:6c:c2:40:6f:3e:70:e6:
02:d8:a7:7d:ea:46:13:13:a8:dd:fb:ce:3a:43:92:
d4:46:49:2b:c4:a9:fc:02:c2:e1:73:a1:c9:e2:4a:
27:e7:f8:f1:67:ca:85:30:00:6b:68:7f:9f:9c:d5:
b5:94:63:19:fb:a3:f0:d7:03:70:49:f9:fb:ec:7a:
b6:e2:41:9e:cf:d1:90:46:6a:81:e7:4c:72:56:0e:
84:a4:82:0e:3d:15:d3:ca:03:ca:07:08:7a:4a:6c:
02:04:78:08:ce:95:ae:db:a7:80:25:d9:15:03:18:
3c:df:a8:22:47:bc:bc:c6:d2:da:35:fd:96:75:c5:
e9:59:a8:46:0c:de:a4:9c:98:a6:0a:81:f5:aa:5c:
ea:c0:38:6d:c9:d9:fd:c9:23:b4:f4:82:6f:e9:d6:
f3:30:5c:78:6d:79:ff:f0:94:c0:3e:d1:b1:60:9c:
fd:1d:0a:b1:48:10:4c:92:68:0d:3a:39:bb:be:06:
8b:30:8c:ed:92:cf:2a:a6:e9:a6:b2:d4:36:5a:72:
04:0d:cc:70:b5:5a:bf:e2:17:2d:23:fa:26:a1:6c:
e0:9b:af:e6:d4:2e:a8:72:cf:d2:1f:5d:29:a4:d8:
ed:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:52:74:C2:13:62:C6:37:B6:D8:30:C6:A0:B7:04:4B:33:A1:90:1A
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/0VJ0whNixje22DDGoLcESzOhkBo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.153.0/24
Signature Algorithm: sha256WithRSAEncryption
35:83:ad:fa:ec:bf:e8:62:56:53:8e:88:f5:7c:ad:4d:b6:12:
bf:a7:6f:75:dc:cd:c6:7c:aa:b4:0d:cd:27:75:a0:a7:7b:2e:
de:48:bc:94:61:18:93:98:4b:7a:db:c7:6d:1a:ea:53:9c:19:
00:1f:be:e7:4f:34:9b:dd:de:4e:a0:a4:d3:8a:11:18:8c:a5:
55:82:a0:9a:53:ac:93:6c:d8:9c:de:8a:1f:d8:15:b1:41:43:
d3:f4:15:b5:cd:30:e5:4d:72:0c:19:6c:4d:fe:d7:8a:48:0a:
19:43:3f:69:20:79:04:c7:c1:5b:01:8b:15:cc:2c:01:cd:e2:
98:3e:32:56:24:41:85:2e:d8:6b:6e:e1:e5:cd:16:95:a6:cb:
30:82:20:7d:95:de:97:7d:d4:4b:da:f7:61:44:3e:25:3f:21:
6e:58:42:8f:52:12:cb:dc:a3:40:aa:a4:cd:c2:15:a3:83:49:
34:7f:8c:34:0d:fe:b6:0e:c5:d7:86:c0:56:e6:00:66:37:42:
ea:e9:f0:1c:95:2c:71:29:93:aa:7c:6c:2e:4f:bf:65:4d:e7:
0b:54:ef:ce:2f:b3:86:5a:6d:7e:82:de:00:84:24:7b:0a:5b:
62:68:fa:16:ff:ea:a3:5e:54:ff:0b:42:67:42:09:0b:e4:19:
f4:bc:06:69
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ/3BuIujWp5FP0XKIGiTe34MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyMWYwY2JhMTBkYWEzMDJlM2IxNjdjZWU1Mzk1Zjc0MmY1
MzBiMDkwHhcNMjYwODEyMTczMDUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMTUyNzRjMjEzNjJjNjM3YjZkODMwYzZhMGI3MDQ0YjMzYTE5MDFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzT9iT9vwWkGTQFEm1slH8T3iyZ91
wmzCQG8+cOYC2Kd96kYTE6jd+846Q5LURkkrxKn8AsLhc6HJ4kon5/jxZ8qFMABr
aH+fnNW1lGMZ+6Pw1wNwSfn77Hq24kGez9GQRmqB50xyVg6EpIIOPRXTygPKBwh6
SmwCBHgIzpWu26eAJdkVAxg836giR7y8xtLaNf2WdcXpWahGDN6knJimCoH1qlzq
wDhtydn9ySO09IJv6dbzMFx4bXn/8JTAPtGxYJz9HQqxSBBMkmgNOjm7vgaLMIzt
ks8qpummstQ2WnIEDcxwtVq/4hctI/omoWzgm6/m1C6ocs/SH10ppNjtOQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNFSdMITYsY3ttgwxqC3BEszoZAaMB8GA1UdIwQY
MBaAFFIfDLoQ2qMC47FnzuU5X3QvUwsJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWg4TXVoRGFvd0xqc1dmTzVUbGZkQzlUQ3drLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82OGNlMzYtNzRlNC00NDNiLWFlZjEt
M2JiOGIwNzVkNjlmLzEvMFZKMHdoTml4amUyMkRER29MY0VTek9oa0JvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82OGNlMzYtNzRlNC00NDNiLWFlZjEtM2JiOGIwNzVkNjlm
LzEvVWg4TXVoRGFvd0xqc1dmTzVUbGZkQzlUQ3drLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV0yZMA0G
CSqGSIb3DQEBCwUAA4IBAQA1g6367L/oYlZTjoj1fK1NthK/p2913M3GfKq0Dc0n
daCney7eSLyUYRiTmEt628dtGupTnBkAH77nTzSb3d5OoKTTihEYjKVVgqCaU6yT
bNic3oof2BWxQUPT9BW1zTDlTXIMGWxN/teKSAoZQz9pIHkEx8FbAYsVzCwBzeKY
PjJWJEGFLthrbuHlzRaVpsswgiB9ld6XfdRL2vdhRD4lPyFuWEKPUhLL3KNAqqTN
whWjg0k0f4w0Df62DsXXhsBW5gBmN0Lq6fAclSxxKZOqfGwuT79lTecLVO/OL7OG
Wm1+gt4AhCR7CltiaPoW/+qjXlT/C0JnQgkL5Bn0vAZp
-----END CERTIFICATE-----
Generated at Wed Aug 12 21:25:31 2026 by rpki-client