Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/0vPGx4VUvFXvBqhmV9hiIyK4bWw.roa
File: 0vPGx4VUvFXvBqhmV9hiIyK4bWw.roa (raw, json)
Hash identifier: rJp7nXTrY3hjBxZiD37Lc81h9L+EYdCivU1bc/WWL00=
Subject key identifier: D2:F3:C6:C7:85:54:BC:55:EF:06:A8:66:57:D8:62:23:22:B8:6D:6C
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 01A086AE5727E96B088F462C802749FFA766
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/0vPGx4VUvFXvBqhmV9hiIyK4bWw.roa
Signing time: Wed 09 Sep 2026 14:59:27 +0000
ROA not before: Wed 09 Sep 2026 14:59:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60602
IP address blocks: 87.76.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 17:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:86:ae:57:27:e9:6b:08:8f:46:2c:80:27:49:ff:a7:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Sep 9 14:59:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d2f3c6c78554bc55ef06a86657d8622322b86d6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c5:a9:64:60:9a:15:9d:f1:f2:4f:3c:6b:b1:
02:a3:66:ba:9f:86:0c:21:e3:4d:f9:1a:71:5a:53:
5b:4b:d8:84:af:69:57:7d:7c:c7:8a:3a:75:f4:97:
78:b9:34:68:b9:f4:09:e6:bd:f6:1f:42:3f:d7:ea:
4e:71:8d:02:64:04:f2:77:f9:0e:76:6e:c7:42:90:
c8:c8:d7:5c:8c:f4:f8:62:e6:40:50:56:13:16:db:
ee:13:fc:6d:d1:bf:d6:18:19:f0:62:00:6b:f4:2a:
37:9c:6c:a4:8d:d5:fa:db:6a:d0:4c:0b:61:82:d1:
e0:e5:2a:fa:8b:a5:25:25:73:2d:8a:24:e3:19:34:
ef:13:55:43:a4:18:6f:93:98:06:2c:ad:ed:85:c4:
51:01:15:87:f3:13:0b:ef:b4:ff:5c:32:fb:f2:5e:
54:fb:3b:2a:86:75:64:22:fc:18:0d:57:4e:4a:e2:
01:97:6c:51:14:2f:96:ac:9c:3d:77:e7:3b:ee:27:
26:b4:68:c2:fd:8a:a2:69:16:a4:25:10:2e:6a:50:
d5:fb:e4:f9:8d:8c:32:27:ae:78:aa:e9:29:11:71:
90:4d:32:cf:8a:3a:39:73:6a:0c:ba:3d:c1:1c:ac:
8b:b2:a0:d2:e4:69:35:76:f9:74:f2:b7:d6:db:a9:
5e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:F3:C6:C7:85:54:BC:55:EF:06:A8:66:57:D8:62:23:22:B8:6D:6C
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/0vPGx4VUvFXvBqhmV9hiIyK4bWw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.181.0/24
Signature Algorithm: sha256WithRSAEncryption
79:f0:cb:ac:d1:73:a2:a9:41:6a:e3:29:6c:bf:cd:00:3c:db:
02:a3:1e:5b:e8:5e:2a:1f:16:0c:d3:24:b2:76:d2:04:58:e2:
75:e5:78:c5:de:73:2f:f7:a6:df:ec:51:f5:ba:36:47:84:59:
c4:ce:a2:88:57:b5:63:82:cc:14:47:37:04:14:8b:a1:7a:d2:
3b:fa:f6:8c:8e:99:23:8d:96:7e:91:ef:d6:82:44:66:48:03:
01:59:b4:3a:98:ed:eb:3d:8a:e9:91:71:89:03:c8:3f:1c:f1:
02:61:67:68:38:df:46:73:43:31:83:3b:a7:65:26:87:2f:9e:
3a:06:60:bf:17:98:41:25:07:34:8f:ce:41:f1:c3:2d:d0:d7:
a2:90:b0:73:04:e8:af:8b:65:73:28:7f:07:15:74:17:e6:2c:
7b:23:02:7f:77:b2:95:f4:e3:f0:20:a6:0c:12:3d:cd:cc:75:
9a:5b:e9:38:26:50:eb:11:06:67:2f:60:03:6e:9b:75:08:b8:
7d:1a:69:7d:cb:d2:0a:09:c5:d7:63:0e:b4:97:72:fd:b3:d6:
e6:5b:b8:43:c8:3e:53:0e:87:f3:3f:d3:82:4c:33:a8:ac:a7:
08:c0:89:47:5f:74:82:73:86:27:1d:95:03:23:ec:a5:ba:65:
51:e3:1e:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 00:03:33 2026 by rpki-client