Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/1StUnapseCiMQWnYb2eTMzCR1G4.roa
File: 1StUnapseCiMQWnYb2eTMzCR1G4.roa (raw, json)
Hash identifier: B7xFqR6+lA6rb6M8+1+NxvfBy9Yh1w4f+NdiwDOlV2k=
Subject key identifier: D5:2B:54:9D:AA:6C:78:28:8C:41:69:D8:6F:67:93:33:30:91:D4:6E
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 019D688FFCEF0D77ED163019373807D96E44
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/1StUnapseCiMQWnYb2eTMzCR1G4.roa
Signing time: Tue 07 Apr 2026 15:29:20 +0000
ROA not before: Tue 07 Apr 2026 15:29:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34989
IP address blocks: 87.76.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 Apr 2026 00:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:68:8f:fc:ef:0d:77:ed:16:30:19:37:38:07:d9:6e:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Apr 7 15:29:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d52b549daa6c78288c4169d86f6793333091d46e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:17:3e:39:48:41:73:b8:8f:d4:a3:d7:a1:c0:
e5:d2:a9:49:91:6a:97:50:a0:3d:46:55:d0:40:1f:
e7:7e:35:69:4a:22:64:b7:e7:fc:21:3a:78:7f:e8:
20:e4:d9:10:be:8a:e9:ee:3e:8f:c6:11:75:94:6e:
cf:bb:5f:8f:93:85:ea:34:a4:bd:be:f6:01:1d:16:
09:78:16:fc:12:6b:5f:9a:e8:34:12:4e:1b:7b:29:
62:cc:03:55:2a:6a:36:71:e2:83:0d:fc:6c:b8:65:
7a:cb:6e:eb:5b:d2:69:26:5a:b0:9d:f7:b5:f8:ef:
38:e1:1c:03:00:d3:09:8c:f9:d8:63:17:ca:9c:73:
e2:3a:54:ce:45:7b:5e:20:a3:c0:fe:f1:d7:9e:5b:
40:df:86:5f:c4:67:84:a5:74:f4:0b:26:cd:bf:cb:
16:ff:d3:ca:36:b6:9d:3f:44:49:0b:10:f3:52:76:
a6:2d:92:42:58:90:d8:66:c2:37:cc:9b:42:61:21:
f2:39:33:08:34:4c:df:d8:40:7b:da:91:da:fd:0a:
e4:e2:11:90:74:57:7e:63:c0:aa:57:81:bd:a3:16:
f5:e7:83:7d:13:3f:14:87:20:7f:fe:7f:19:35:b3:
af:b7:59:8e:c2:52:28:58:b5:ce:d7:9e:69:18:7f:
f2:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:2B:54:9D:AA:6C:78:28:8C:41:69:D8:6F:67:93:33:30:91:D4:6E
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/1StUnapseCiMQWnYb2eTMzCR1G4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.181.0/24
Signature Algorithm: sha256WithRSAEncryption
64:ea:f2:a3:38:6b:20:b1:9f:46:f3:63:6a:06:cc:a5:ec:dd:
ee:6a:3c:ee:c6:8b:43:49:95:85:29:ad:75:cd:d7:b3:a7:7d:
54:4c:84:42:28:b1:fa:55:67:42:f8:18:b1:31:2c:ac:d0:01:
7f:33:aa:65:ec:e2:a8:35:a3:46:9c:cc:03:d5:3b:03:53:ba:
7a:b2:06:c1:0b:dd:17:78:4d:75:1f:c7:90:36:e2:b9:a4:0b:
b2:1a:73:dd:35:fd:47:a1:ac:5d:cd:48:48:3f:f5:ea:67:bb:
2c:83:40:92:be:86:5a:3a:37:5f:fa:6b:f4:b6:6c:63:60:5f:
30:a2:59:65:ba:6a:92:15:62:22:cc:d6:df:e0:04:0f:cb:5d:
97:17:57:76:11:48:d2:20:67:5c:eb:5e:6f:bc:85:a9:8e:8a:
6a:b8:f3:f8:32:02:c1:25:6a:6a:b6:24:38:6a:66:c1:66:91:
6e:ce:3f:0a:27:80:0b:8b:0e:79:31:fd:c7:9d:72:d3:47:09:
27:98:6f:4b:4c:61:3a:38:30:f7:79:77:e2:f8:d9:d6:02:f5:
32:3a:23:e7:00:6f:5d:ce:5e:12:42:30:7e:38:c0:45:ca:77:
6b:9b:c1:4f:52:77:ab:da:17:23:99:30:88:24:82:9d:67:b5:
3c:49:ff:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 08:23:47 2026 by rpki-client