Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/6G89WJFE6Zrc_jyz4Cv-GMAbi_Q.roa
File: 6G89WJFE6Zrc_jyz4Cv-GMAbi_Q.roa (raw, json)
Hash identifier: ySKTqRwG1YNo4SQRSr101QLTRwyCeF0CqUXHyP3QzLo=
Subject key identifier: E8:6F:3D:58:91:44:E9:9A:DC:FE:3C:B3:E0:2B:FE:18:C0:1B:8B:F4
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 019F0458CE0E065A9DD695D3B8AC9217B44C
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/6G89WJFE6Zrc_jyz4Cv-GMAbi_Q.roa
Signing time: Fri 26 Jun 2026 14:32:36 +0000
ROA not before: Fri 26 Jun 2026 14:32:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63023
IP address blocks: 87.76.129.0/24 maxlen: 24
87.76.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Jun 2026 13:58:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:04:58:ce:0e:06:5a:9d:d6:95:d3:b8:ac:92:17:b4:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Jun 26 14:32:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e86f3d589144e99adcfe3cb3e02bfe18c01b8bf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b8:53:2c:51:1a:40:88:2e:fd:b2:d4:28:31:
7f:15:2f:97:6f:20:df:70:0c:52:da:dc:26:ed:be:
2a:6a:7c:38:98:27:62:0b:63:e3:0c:45:05:a1:d0:
ae:d5:45:9e:75:80:d3:52:ff:d5:a3:33:dc:59:fc:
18:d8:22:04:3c:85:2e:05:7d:24:e8:ce:23:01:89:
b8:c8:13:1f:55:de:6e:db:87:ec:17:72:05:ab:11:
63:10:2f:0f:5b:88:9f:31:82:c0:61:65:d8:49:c6:
ab:a6:15:b1:54:6a:48:9b:3a:86:86:ec:79:5d:cd:
72:ef:41:13:0b:39:12:24:d8:5d:40:c2:c5:d7:93:
cb:17:fe:dc:8e:56:e0:73:9d:56:bb:15:5a:fd:01:
92:d4:28:2b:0e:1a:bd:ba:5e:81:a8:fb:14:38:f3:
58:ec:70:c8:94:42:24:a7:ac:04:38:13:01:22:22:
83:b7:e1:3f:3b:79:7a:2c:38:73:fe:d6:44:77:6b:
cb:6d:f0:a9:c5:08:2f:17:79:ab:1a:a4:69:95:7d:
0c:41:0e:b3:0c:a0:50:93:96:0c:69:b1:f7:ec:70:
45:d5:40:e8:19:e8:f4:cf:70:05:2d:0e:19:f0:34:
df:d2:b7:2b:4e:c0:08:cd:c1:d0:28:62:c4:17:e2:
db:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:6F:3D:58:91:44:E9:9A:DC:FE:3C:B3:E0:2B:FE:18:C0:1B:8B:F4
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/6G89WJFE6Zrc_jyz4Cv-GMAbi_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.129.0/24
87.76.206.0/24
Signature Algorithm: sha256WithRSAEncryption
33:80:03:3d:63:e7:5e:7b:b8:f3:ac:9c:48:dd:63:2e:30:a6:
03:c2:a2:c1:86:7a:82:03:f9:38:44:cf:2e:b0:b9:76:2b:3b:
98:3a:32:bf:db:b4:e8:3c:59:fe:2a:06:10:49:e3:e9:31:19:
cf:7f:c1:33:26:c0:eb:33:00:fb:7c:56:84:f1:10:34:62:fa:
35:da:2d:09:5d:bf:4f:84:68:43:c4:bf:dd:b6:a3:75:a7:55:
3f:32:31:4d:18:b3:14:e5:b8:3f:9b:c0:e2:74:c7:c3:a5:5b:
43:56:53:34:f7:40:1c:42:6f:52:68:03:c9:f4:70:cb:26:a4:
a7:e6:ba:90:67:7a:ed:78:a1:e4:c2:bb:d0:7c:e0:d7:a9:39:
8a:1a:dc:a2:9e:dc:e8:81:48:64:42:05:7f:fd:5d:be:c4:72:
6b:48:e5:be:cd:7d:6b:be:4c:22:a5:c0:89:a8:05:f3:fc:1f:
60:79:ed:a2:90:b1:5f:df:af:47:34:7e:86:c1:58:b0:12:39:
43:c1:38:32:26:30:c0:4a:85:7e:96:85:a4:ed:bb:e1:04:d7:
db:ff:3d:9b:51:88:94:2b:b8:21:c5:4e:f0:df:ae:c0:fb:ce:
27:97:65:80:7e:3e:aa:09:03:6f:2b:f7:50:78:43:d2:0b:82:
4b:55:30:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 20:30:20 2026 by rpki-client