Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/8fi5iM7BFQj_Bt75OCC-P5CN6zk.roa
File: 8fi5iM7BFQj_Bt75OCC-P5CN6zk.roa (raw, json)
Hash identifier: Bsmzr3yLe5P1CEDMP39xK9eBS/Zhsocr2KSbPcvXVlc=
Subject key identifier: F1:F8:B9:88:CE:C1:15:08:FF:06:DE:F9:38:20:BE:3F:90:8D:EB:39
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 019D01A7D662C3069D74C9593A030DE8FD81
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/8fi5iM7BFQj_Bt75OCC-P5CN6zk.roa
Signing time: Wed 18 Mar 2026 15:54:29 +0000
ROA not before: Wed 18 Mar 2026 15:54:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198087
IP address blocks: 87.76.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 14:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:01:a7:d6:62:c3:06:9d:74:c9:59:3a:03:0d:e8:fd:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Mar 18 15:54:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f1f8b988cec11508ff06def93820be3f908deb39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f7:7a:ab:a2:ce:92:04:92:e1:7b:aa:85:c3:
35:36:3c:84:3e:d5:33:33:ba:fd:b7:d3:4b:29:ab:
c4:8b:77:4b:8a:57:d0:50:c5:cd:c0:db:fc:84:d9:
94:72:66:68:2e:ae:cd:ec:1b:f8:13:06:d2:69:37:
1e:62:a5:03:8c:a4:3e:8b:66:a4:8b:d7:0f:48:48:
be:d2:8c:b0:4c:14:e0:27:54:ca:a3:ff:e3:26:56:
4d:c5:1c:52:9f:91:f5:6e:73:de:c4:16:2c:6f:bc:
75:be:9c:6b:79:74:a4:5a:90:1f:23:35:55:8e:10:
95:4d:c3:6e:8c:95:f2:76:3d:8e:e4:9f:b1:91:4a:
fe:3c:f6:4f:6a:03:eb:4e:e0:67:d7:31:e6:91:74:
19:1d:81:54:5f:d1:a5:37:0f:ea:21:a9:0a:b1:4a:
19:6b:c7:6a:4b:c2:55:fb:82:2e:7f:3a:fa:3a:92:
b3:2d:24:dd:30:63:9e:ef:a8:1b:38:e9:f8:3d:6f:
07:bc:55:27:30:14:11:5a:7c:d7:30:64:7b:d3:6b:
38:eb:ff:15:e1:9d:cd:cd:c5:d3:a3:09:52:ce:1d:
be:71:c8:7f:a2:d6:5d:47:93:5c:c4:13:6e:94:c2:
9d:70:0b:4b:61:f3:ef:da:37:fc:7e:fb:e1:51:9d:
87:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:F8:B9:88:CE:C1:15:08:FF:06:DE:F9:38:20:BE:3F:90:8D:EB:39
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/8fi5iM7BFQj_Bt75OCC-P5CN6zk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.217.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:f9:5d:35:51:a8:94:f7:02:e4:84:5d:a3:42:f6:37:78:4f:
2f:48:a8:00:38:5f:b8:b2:4d:c3:a2:dc:3c:1a:16:3d:a6:95:
3e:f4:70:54:13:7e:b1:cf:43:c4:f6:6a:36:4e:30:c9:82:ef:
88:b5:37:69:ed:a6:91:4b:73:6b:91:6b:1f:3a:77:f4:d2:8b:
6b:b0:8c:e9:ad:87:a3:b4:77:89:8a:03:9f:7d:9c:13:df:4f:
e5:6b:5c:f3:a5:f1:90:5c:29:d8:fc:fb:a1:d1:f2:55:1c:a9:
f7:b8:8f:47:d4:8a:72:bf:85:be:5f:da:78:1f:fe:a3:94:85:
7e:82:ec:e1:dd:e0:af:44:b3:d4:db:54:19:44:22:2d:3b:1c:
73:e9:49:3e:47:af:b8:87:3f:73:f6:03:da:1b:b1:1f:f2:9f:
b3:8f:d0:cf:26:36:47:04:18:4a:66:64:7b:93:c9:df:38:d9:
eb:72:98:30:2c:df:73:f6:b9:48:ad:97:d9:70:61:59:60:5a:
62:1e:5a:ac:28:c5:ca:81:54:31:82:ee:60:00:83:7c:6a:cf:
80:06:21:8d:69:78:fe:9e:12:22:60:3c:49:bd:a4:bf:b6:8f:
6a:5e:19:ec:38:a2:80:d6:57:38:99:6a:53:7c:8f:46:8e:8c:
46:79:ea:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 23:03:49 2026 by rpki-client