Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/7Ahc1L2YrYT8n9arnQgabRC2y_g.roa
File: 7Ahc1L2YrYT8n9arnQgabRC2y_g.roa (raw, json)
Hash identifier: mkMUOH7keFLnwMtbVXm3PWQ6IMjwfTA49mJZt0Lq8Zs=
Subject key identifier: EC:08:5C:D4:BD:98:AD:84:FC:9F:D6:AB:9D:08:1A:6D:10:B6:CB:F8
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 01A0E96C762C6D64C2F1F336B663F78454B1
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/7Ahc1L2YrYT8n9arnQgabRC2y_g.roa
Signing time: Mon 28 Sep 2026 19:09:54 +0000
ROA not before: Mon 28 Sep 2026 19:09:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218802
IP address blocks: 87.76.133.0/24 maxlen: 24
87.76.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 08:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e9:6c:76:2c:6d:64:c2:f1:f3:36:b6:63:f7:84:54:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Sep 28 19:09:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ec085cd4bd98ad84fc9fd6ab9d081a6d10b6cbf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2f:c5:1b:ee:3c:af:f5:e7:23:29:68:90:86:
ae:cc:9c:df:7b:0a:e0:77:a8:9e:7c:c9:a3:2f:74:
8b:f9:2f:9d:cd:0d:5f:6b:fb:7c:c8:c8:5e:c9:db:
00:dd:57:73:5c:2d:6f:b9:cc:47:e5:4c:ec:e6:06:
cf:69:ae:5d:9c:80:d5:63:18:2b:15:1a:16:06:94:
75:4c:b6:f0:e0:01:43:66:4b:8d:cb:51:b8:02:45:
bb:6d:4f:3f:a8:84:f2:f5:7d:9e:66:81:57:11:31:
cd:21:4b:57:1e:38:45:35:13:3c:2d:3d:d7:19:2b:
f3:ac:5d:b4:af:e2:81:4f:33:9f:22:7b:67:b0:52:
1d:10:16:df:cc:1a:22:e6:02:01:dd:f0:53:bf:f0:
a8:d8:00:70:93:02:62:3a:80:ca:f6:cd:96:aa:a2:
4e:1c:76:dd:15:3b:81:9e:2b:03:25:ab:5a:be:f9:
bd:c6:39:96:d2:20:b4:8a:3a:2c:2d:c6:e7:68:01:
3f:68:20:19:1e:4e:c7:ef:81:4e:c8:f7:d8:9d:ea:
30:13:4f:19:6e:d5:10:38:9e:3c:20:74:a3:06:00:
0e:2a:ff:4c:f0:76:15:b3:16:c3:0c:06:92:0f:cf:
01:60:55:fa:20:a1:f5:40:e0:76:73:23:06:db:48:
e3:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:08:5C:D4:BD:98:AD:84:FC:9F:D6:AB:9D:08:1A:6D:10:B6:CB:F8
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/7Ahc1L2YrYT8n9arnQgabRC2y_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.133.0/24
87.76.155.0/24
Signature Algorithm: sha256WithRSAEncryption
16:24:05:90:e3:df:9b:0b:8e:c4:c0:02:4e:a6:97:29:48:3c:
14:a6:e2:f6:ec:87:f8:dc:0f:e8:a4:0d:b0:a5:45:5d:df:ce:
50:01:f1:be:9c:ed:80:7c:17:46:e7:a8:36:14:de:2d:ec:8b:
cc:fc:84:7a:3c:4a:94:30:90:32:50:94:8f:cf:94:8a:72:8b:
d5:3f:e8:12:3b:ae:a6:fe:5a:95:84:e1:96:cf:e8:11:35:76:
6a:e5:40:74:6b:a7:47:c3:78:61:78:a5:9d:ca:22:22:5b:57:
11:99:d0:d5:76:22:a8:4d:ca:d1:ea:3d:1d:3d:ec:89:fc:d5:
fe:53:51:33:50:4f:03:74:43:c3:01:14:be:c8:52:df:93:23:
02:03:8b:2c:79:0b:f8:b8:25:48:08:2a:04:f3:04:31:61:f7:
1c:99:4b:3a:8f:0c:b1:ae:c0:51:e2:c5:c8:3c:a7:fa:c6:c6:
33:fc:df:1c:40:a2:bc:7b:31:7d:0e:9e:e7:d3:54:89:ef:ce:
a6:bf:5a:7e:b6:76:0f:7f:24:d4:e5:29:1c:80:33:9f:18:b7:
9b:27:fb:1c:49:b0:b0:2e:01:38:62:9f:28:e4:53:05:2a:62:
83:7b:8e:1f:3f:1a:8c:b4:04:ea:82:7a:ec:7e:24:78:d4:58:
9e:73:97:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 15:16:19 2026 by rpki-client