Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/4Fg7BOZpMtl_TFJsumDsTBhG7YM.roa
File: 4Fg7BOZpMtl_TFJsumDsTBhG7YM.roa (raw, json)
Hash identifier: n86IDJBproVkOMaJFHRYtrhXKXvWudLtbgKNnEyzNPY=
Subject key identifier: E0:58:3B:04:E6:69:32:D9:7F:4C:52:6C:BA:60:EC:4C:18:46:ED:83
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 019E639D59626FF806BDEF12AB74D2ED1C98
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/4Fg7BOZpMtl_TFJsumDsTBhG7YM.roa
Signing time: Tue 26 May 2026 09:28:36 +0000
ROA not before: Tue 26 May 2026 09:28:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34346
IP address blocks: 87.76.129.0/24 maxlen: 24
87.76.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 20:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:63:9d:59:62:6f:f8:06:bd:ef:12:ab:74:d2:ed:1c:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: May 26 09:28:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e0583b04e66932d97f4c526cba60ec4c1846ed83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:62:e5:27:0b:16:f4:4d:36:99:ec:60:db:b0:
46:15:11:4a:2f:f4:4a:12:00:d0:b6:37:d0:68:fc:
fc:cd:7b:c9:01:40:98:fe:64:a1:d6:91:5a:05:ba:
2e:9c:9f:5f:e1:58:90:15:6a:ae:d3:cd:c7:5d:18:
20:33:91:48:92:3e:18:b2:ea:ee:82:d9:80:2c:0f:
92:88:f5:7e:87:42:ea:61:a0:38:8a:cb:92:d8:1c:
1f:76:79:ab:51:50:ea:9c:3b:c7:5e:e3:31:f6:24:
68:2d:4a:18:fc:10:a6:07:ce:cd:a5:70:61:a8:56:
08:d1:45:e7:e5:a8:81:6a:81:56:4a:51:e2:b3:72:
53:d3:91:29:a2:e9:9b:d6:15:d9:6a:59:b9:6c:46:
23:38:c8:0f:b2:cb:82:ad:05:4f:64:f4:a3:a9:54:
de:7e:6b:dc:cd:9a:b8:2c:3c:88:2d:97:9a:74:20:
b2:49:e6:1c:9d:91:70:50:d0:0e:43:86:cd:4a:86:
b2:88:8a:98:dd:30:05:05:a2:cb:03:7c:d1:78:de:
e4:83:b9:6c:7b:54:c9:23:5c:90:07:33:3a:3b:f8:
d1:2e:d1:1e:50:43:d1:e4:81:c9:18:c9:3d:cc:8b:
48:a3:2f:bd:e9:9b:63:be:5c:2f:86:02:f2:08:9d:
38:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:58:3B:04:E6:69:32:D9:7F:4C:52:6C:BA:60:EC:4C:18:46:ED:83
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/4Fg7BOZpMtl_TFJsumDsTBhG7YM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.129.0/24
87.76.167.0/24
Signature Algorithm: sha256WithRSAEncryption
72:a6:1d:19:10:d2:2b:d8:09:55:bb:5e:43:da:ec:57:02:5a:
08:1a:db:20:eb:5f:ae:78:ca:b6:82:56:9b:14:73:24:82:94:
99:92:3d:c4:5e:09:5e:f3:7b:8f:62:ea:8b:81:d4:34:c3:5e:
bd:66:5d:5f:64:b4:25:58:15:84:d6:33:fa:62:bb:e4:e0:aa:
05:fd:a7:b6:98:88:86:6a:94:e1:91:aa:84:21:b3:f5:f4:81:
24:8b:7e:e0:da:1a:fe:91:59:37:41:ed:9f:4a:3e:34:9e:53:
2e:bc:7d:cd:f6:43:32:0e:15:a4:c2:55:c8:8b:f5:a7:dc:e5:
92:e5:3f:21:ef:99:31:cd:3f:29:3c:b0:d9:b6:75:86:bc:0b:
e8:d2:6a:75:c1:29:67:45:c7:69:2d:cd:0e:8a:cb:75:66:e9:
81:d5:81:30:70:3e:8c:05:78:2b:cd:15:55:c2:ca:40:ce:6a:
31:4f:bf:7d:f8:32:fc:14:ac:57:00:01:f7:fd:55:05:51:ff:
9d:9e:ed:d3:65:29:d0:fe:b7:4a:ab:94:11:d0:d7:22:e7:af:
b1:3c:4c:22:29:78:0c:c6:b7:52:96:08:71:36:83:9d:de:02:
0e:18:5e:47:77:21:c5:c4:b9:3d:13:ce:1a:23:72:0c:89:d4:
40:c5:ea:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 03:14:32 2026 by rpki-client