Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/0Zdm_VAJa8PnAg1k5sdfSDGbC-k.roa
File: 0Zdm_VAJa8PnAg1k5sdfSDGbC-k.roa (raw, json)
Hash identifier: KbUyNsOkdVHiothzovjsrbkhJRjuA5CpPJHjSHthUzs=
Subject key identifier: D1:97:66:FD:50:09:6B:C3:E7:02:0D:64:E6:C7:5F:48:31:9B:0B:E9
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 01A10B98A8D9DE258B6D61AD1DAAD71ABE6D
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/0Zdm_VAJa8PnAg1k5sdfSDGbC-k.roa
Signing time: Mon 05 Oct 2026 10:25:16 +0000
ROA not before: Mon 05 Oct 2026 10:25:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198015
IP address blocks: 87.76.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 12:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0b:98:a8:d9:de:25:8b:6d:61:ad:1d:aa:d7:1a:be:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Oct 5 10:25:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d19766fd50096bc3e7020d64e6c75f48319b0be9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9a:d6:1f:96:02:f7:28:b7:a5:da:f0:bd:bd:
75:fa:a6:7b:b4:62:ed:21:59:b1:eb:b0:f3:0a:70:
1f:2b:a1:33:3a:3e:06:1f:68:70:86:1e:30:3e:e2:
3f:e8:1d:e0:30:88:e7:35:9e:15:38:c5:19:c0:fd:
33:54:d8:c4:42:65:3e:3b:80:a0:5c:ec:39:bc:af:
12:bf:20:a9:f2:46:44:c1:56:ea:31:a0:d0:f2:5d:
a2:2d:0d:11:71:94:50:80:6e:ab:fe:e4:82:72:95:
fc:7f:53:12:1a:74:3a:d5:b0:4d:e8:0c:08:24:23:
ce:f2:c9:a0:d2:55:74:d5:2f:07:ec:9b:a0:46:51:
b2:a5:e1:f2:c9:e6:ea:5c:c5:5e:6b:c0:e0:fe:9b:
e2:8a:38:b6:a3:25:76:31:74:52:c0:0c:c4:2b:7f:
06:1d:88:c3:ea:f1:35:4d:68:6c:1a:43:6d:23:11:
8b:a9:ed:ae:8e:65:88:c0:7d:e3:02:f7:7b:0f:26:
3a:22:e9:3f:3f:96:10:4f:d1:8d:c2:d3:80:f0:a2:
06:b1:43:77:b0:60:aa:45:e8:35:5d:da:d6:6d:c6:
bb:5b:07:eb:a4:ea:70:ae:87:da:52:57:40:17:50:
25:44:dd:44:42:5f:4a:47:19:13:a3:09:89:52:0a:
98:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:97:66:FD:50:09:6B:C3:E7:02:0D:64:E6:C7:5F:48:31:9B:0B:E9
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/0Zdm_VAJa8PnAg1k5sdfSDGbC-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.195.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:91:b2:d1:80:cf:b8:37:2c:17:cb:0e:84:6e:9b:6d:a0:94:
de:dc:92:ec:9b:f2:cd:3b:ae:2f:f5:a6:a2:ce:af:f0:2c:cc:
28:db:20:be:a2:53:38:02:5f:4b:1e:cf:a2:61:01:b1:43:47:
b3:21:16:b1:fb:b6:d7:4f:76:7e:73:80:87:75:7d:2c:df:6d:
9e:c4:54:5c:fe:ee:27:65:c1:0d:77:03:75:9a:a9:4d:d7:2d:
ae:7d:32:bc:f6:54:d8:cc:94:60:97:45:ed:14:18:2d:a1:26:
38:c2:17:6a:d1:c7:1d:3f:0e:b7:fd:a3:97:89:15:60:02:95:
e8:66:b5:43:5e:65:85:17:c9:c3:2b:6b:65:72:e5:6d:9d:f3:
0e:2c:d6:a8:0b:da:cd:4b:1d:09:74:65:a4:5c:b1:69:7f:3b:
8c:42:02:b5:b1:2a:cf:52:72:7e:4d:fb:8e:5f:6d:bc:0c:f1:
10:97:4f:e4:d1:4d:16:54:a3:9e:46:59:15:dc:86:b8:ec:26:
9f:7e:7b:64:10:24:b6:85:41:a1:31:47:60:ad:9e:d6:62:13:
a2:2e:f3:dd:42:5d:90:1c:b4:53:27:58:de:d5:13:e6:38:49:
51:d3:86:7f:80:98:05:bc:08:d5:34:42:ec:96:dd:d7:bd:25:
1b:e6:82:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 21:44:11 2026 by rpki-client