Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/2Vdh38ZxsfI7uRviOq7VMziw0HY.roa
File: 2Vdh38ZxsfI7uRviOq7VMziw0HY.roa (raw, json)
Hash identifier: G4myuG0vFV+Fzb3KalK+ctno/nClExDr0W/R8zD+qVc=
Subject key identifier: D9:57:61:DF:C6:71:B1:F2:3B:B9:1B:E2:3A:AE:D5:33:38:B0:D0:76
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 01A03F7FB0837067D2AE12C168CEF3D9A426
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/2Vdh38ZxsfI7uRviOq7VMziw0HY.roa
Signing time: Wed 26 Aug 2026 19:15:27 +0000
ROA not before: Wed 26 Aug 2026 19:15:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31863
IP address blocks: 87.76.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:7f:b0:83:70:67:d2:ae:12:c1:68:ce:f3:d9:a4:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Aug 26 19:15:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d95761dfc671b1f23bb91be23aaed53338b0d076
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:67:e9:a3:b8:c0:79:c5:17:03:03:f0:3f:27:
4e:b6:71:7c:1f:2f:e0:74:56:cc:4b:8b:35:3b:b5:
4b:63:ab:bc:c7:b9:1a:8f:65:21:1a:d5:4a:36:04:
ad:43:cd:86:e5:3c:b9:d8:fd:c0:17:ca:e9:22:59:
af:8e:2a:eb:66:a2:33:3f:06:82:84:c6:a5:49:6b:
4b:2f:d6:fa:bb:e7:51:22:84:37:59:ce:b4:e7:fa:
8f:44:91:2f:35:5f:bc:00:0c:ba:03:46:f6:c7:99:
5e:34:fc:41:9c:3d:5c:b9:e0:3d:d3:cd:b3:2d:a7:
64:c8:b7:6e:5e:dc:e7:af:8b:14:9c:88:56:f5:70:
a7:96:f4:a0:a1:2b:fd:4a:91:5d:02:dd:a6:f8:97:
af:7e:80:1b:83:75:00:63:c5:e8:25:36:63:5e:1e:
35:33:2b:c8:58:cb:1f:9e:92:0f:b2:64:39:c8:0f:
c2:08:9d:3c:3e:49:96:06:cd:73:23:61:cd:17:cf:
3e:90:c3:74:3c:68:e7:50:5c:9c:ab:8b:fa:be:b2:
52:e2:ac:5a:1c:06:68:87:a3:87:35:61:0d:c9:8a:
0c:80:d7:fb:6a:d9:44:31:53:f2:67:5d:eb:c7:cb:
ae:fa:eb:5d:cd:77:d2:1a:31:6b:70:fa:26:22:d4:
aa:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:57:61:DF:C6:71:B1:F2:3B:B9:1B:E2:3A:AE:D5:33:38:B0:D0:76
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/2Vdh38ZxsfI7uRviOq7VMziw0HY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.149.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:70:48:b3:e3:d0:90:fd:ac:45:b1:26:f6:a8:fd:a2:17:cf:
fa:c8:5e:a6:4d:83:30:87:40:75:32:73:12:fb:3f:80:2e:d9:
4c:ff:30:19:a7:74:d1:08:5f:79:6f:c5:d0:98:a5:ec:4e:1d:
ff:92:43:d3:d9:81:2d:07:73:f8:5f:c3:b2:0e:b5:c8:a5:a0:
7b:eb:28:22:5d:b2:b3:ef:f8:87:d7:80:53:b7:47:a4:13:2a:
c2:d7:66:b2:d2:b0:73:34:92:6e:8b:73:57:56:7d:0c:46:74:
be:6c:7f:bd:59:f4:5a:f8:80:b9:42:4a:f3:52:3b:19:d0:1d:
33:0d:9a:c6:68:ba:f8:c9:27:a7:30:37:20:53:b6:d2:16:12:
36:9f:36:63:0e:b1:7c:81:c5:09:7b:7d:ed:90:4c:8f:9f:46:
ec:92:43:1d:33:77:08:82:11:b8:18:d7:4e:c5:b4:7a:14:02:
8f:d9:e2:d8:5e:68:c5:76:f5:d0:88:92:1b:e2:21:71:0d:ea:
b3:c5:b8:7d:d4:94:02:d2:1d:b8:92:3b:28:fd:df:17:ea:9e:
64:ef:18:93:4c:a2:80:15:52:a0:54:2b:e2:7e:e9:e3:90:2d:
bf:66:ba:ec:1f:df:50:92:2d:4c:d5:f4:64:7d:6a:20:89:32:
94:99:0c:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 16:21:47 2026 by rpki-client