Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/8HH0bd9vAj2SVZstNCLqUuirn_0.roa
File: 8HH0bd9vAj2SVZstNCLqUuirn_0.roa (raw, json)
Hash identifier: pGSGd0O3FVuHMyTevA/IAKoJSJPcc3bP/uLdgkkWDXc=
Subject key identifier: F0:71:F4:6D:DF:6F:02:3D:92:55:9B:2D:34:22:EA:52:E8:AB:9F:FD
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 019F43820B67D49648C69C056ACD7F237605
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/8HH0bd9vAj2SVZstNCLqUuirn_0.roa
Signing time: Wed 08 Jul 2026 20:53:43 +0000
ROA not before: Wed 08 Jul 2026 20:53:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204240
IP address blocks: 87.76.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 13:09:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:43:82:0b:67:d4:96:48:c6:9c:05:6a:cd:7f:23:76:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Jul 8 20:53:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f071f46ddf6f023d92559b2d3422ea52e8ab9ffd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:87:7f:5c:61:5e:83:ed:1b:d6:c1:e2:ab:6d:
c8:ce:49:1c:51:c0:1e:57:3b:19:79:6e:a5:1e:db:
19:b2:f4:c2:22:c4:4b:2f:1f:82:8b:b3:ed:5f:ad:
17:5b:b9:ab:3a:a9:7d:c5:26:09:aa:5d:d7:ee:9c:
a1:0e:84:f7:aa:f5:12:f5:b6:7a:ef:c3:b4:df:72:
f6:65:4f:a4:09:fd:aa:d5:44:52:05:72:96:52:10:
67:78:0e:90:10:75:a8:f3:d8:73:60:8a:74:bf:10:
5d:f0:5d:1e:80:d7:da:9f:a5:e5:cb:75:d3:59:07:
76:a8:80:79:aa:25:49:6e:63:0f:73:a9:0e:dd:a6:
3b:be:1b:69:70:21:8c:40:31:76:d4:5e:09:cc:b9:
88:83:61:bf:e2:d0:cf:4f:83:89:88:ee:cd:7e:db:
b2:83:77:6f:ab:1d:19:15:a6:a2:93:b0:ff:73:83:
c1:be:e4:87:57:f5:91:99:7c:88:36:b5:c3:8e:fe:
b3:29:0b:66:98:e5:4c:4c:9a:33:d4:0c:44:82:3a:
7a:11:e2:e6:24:ed:5b:d3:d8:40:39:af:ed:15:ba:
ea:e6:e0:8f:56:85:ec:a6:c6:68:b5:3f:84:49:65:
f8:56:0b:9b:78:e0:ef:7c:ad:50:4a:21:c5:39:75:
4b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:71:F4:6D:DF:6F:02:3D:92:55:9B:2D:34:22:EA:52:E8:AB:9F:FD
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/8HH0bd9vAj2SVZstNCLqUuirn_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.166.0/24
Signature Algorithm: sha256WithRSAEncryption
03:43:b6:18:4d:14:16:bb:d3:42:0f:11:fe:34:70:60:7c:ef:
2d:46:7c:fc:90:91:f6:53:b7:88:34:56:39:0c:98:e3:cc:b6:
72:d9:a5:97:e1:a6:73:12:3d:63:c3:d1:90:cf:91:c4:65:ec:
a1:d7:f5:d5:15:26:cb:6b:14:65:e0:72:a2:15:22:e4:ed:76:
31:17:e9:8d:96:7f:70:96:3a:6a:1b:24:f5:b2:ed:59:9b:22:
b4:bb:8f:62:dc:65:0c:ea:22:af:63:c9:ec:d8:d2:ce:f2:d7:
65:3b:82:44:27:ff:d6:29:06:f0:54:00:24:7b:9e:e5:a3:52:
e3:b3:f9:b4:e4:81:a4:ad:8f:50:29:a8:cf:93:e9:57:5c:69:
be:b5:13:cf:6c:90:21:20:24:a1:a2:e8:c4:23:24:32:02:5e:
ff:8f:eb:83:cd:e0:2c:b0:1f:c7:74:e2:13:f1:d6:20:d4:4d:
bd:58:57:74:69:30:4d:78:83:d9:41:37:50:b5:19:b5:e1:2b:
99:a8:1e:25:ac:49:6f:fd:a3:e0:81:0d:03:f1:34:d7:db:c0:
06:50:d7:e2:41:59:0b:b3:30:13:eb:62:a2:03:44:a3:f3:e0:
fe:fe:4c:2d:bf:1d:f9:6f:b8:34:28:64:b1:38:31:34:14:83:
70:70:a0:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:12:14 2026 by rpki-client