Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/9jy009OW32y_6hwUiSikp0VYttc.roa
File: 9jy009OW32y_6hwUiSikp0VYttc.roa (raw, json)
Hash identifier: KMZicphbQf7SztzlGnN+pgEPryfzPMGYMYup8LrraMc=
Subject key identifier: F6:3C:B4:D3:D3:96:DF:6C:BF:EA:1C:14:89:28:A4:A7:45:58:B6:D7
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 01A019B37B39F9A7A852FF40769A96D7031E
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/9jy009OW32y_6hwUiSikp0VYttc.roa
Signing time: Wed 19 Aug 2026 11:06:27 +0000
ROA not before: Wed 19 Aug 2026 11:06:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213243
IP address blocks: 87.76.143.0/24 maxlen: 24
87.76.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:19:b3:7b:39:f9:a7:a8:52:ff:40:76:9a:96:d7:03:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Aug 19 11:06:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f63cb4d3d396df6cbfea1c148928a4a74558b6d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:6c:15:be:cf:b4:91:ad:86:1d:ab:02:85:f4:
0a:ce:2f:8a:42:13:7a:60:a0:1f:e1:8c:0c:de:be:
ee:4d:f2:b5:d6:b9:0e:25:1f:70:11:aa:35:24:d4:
b4:55:b9:1c:72:26:c6:02:81:a2:1d:be:11:57:1d:
b9:c2:79:e2:da:df:ef:61:66:ad:28:cd:81:64:17:
47:3e:60:30:a3:fc:c1:94:ca:3c:35:28:e4:60:0d:
54:eb:91:c8:01:7c:d0:b7:0f:e6:a2:2e:36:65:db:
86:30:d8:fe:23:ab:8f:ec:89:16:37:e5:6b:6a:95:
ee:2f:61:70:c1:33:7a:4c:e7:8a:7b:0a:0f:6d:a5:
f7:ac:45:08:1a:32:c3:54:f0:74:65:3a:35:52:1f:
ca:57:03:23:b0:2a:41:70:7c:72:49:9b:c5:84:cf:
0c:13:9b:36:bc:a5:82:a7:9b:e2:57:98:e4:f2:57:
ca:8d:1d:10:ff:d0:29:56:53:51:3b:3b:00:cd:b9:
f9:dd:87:50:4d:e4:ea:c1:20:a4:93:e8:53:2b:d9:
34:b4:a5:ac:d9:62:ef:55:86:56:fb:f6:55:f5:e1:
d9:71:8d:88:7c:5d:5b:77:e8:04:0f:41:90:06:6c:
a4:d9:cc:04:99:ca:ec:ef:b5:12:96:7f:3e:06:ee:
87:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:3C:B4:D3:D3:96:DF:6C:BF:EA:1C:14:89:28:A4:A7:45:58:B6:D7
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/9jy009OW32y_6hwUiSikp0VYttc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.143.0/24
87.76.155.0/24
Signature Algorithm: sha256WithRSAEncryption
11:08:84:39:7a:07:a0:bd:27:5c:40:66:bf:08:2c:8a:4c:18:
ae:4a:2e:da:32:9f:1a:e4:b8:c4:a0:45:87:3e:f1:b1:4f:b9:
ad:09:52:7a:39:06:61:35:94:60:1c:0c:19:af:69:86:ec:e7:
35:af:66:1b:66:b7:80:d2:55:e9:e4:50:32:e6:8d:33:08:27:
95:cd:72:aa:17:64:2f:81:9b:17:f0:9a:67:79:8f:76:1c:3a:
4b:b5:94:74:98:2a:e6:5e:b5:6b:2b:16:24:cf:e7:04:2a:6d:
3c:f9:99:87:6e:63:d7:20:49:8b:3d:50:8b:84:5e:8c:8c:36:
d4:cc:76:dd:d3:ab:75:df:f1:b7:68:44:f4:b3:f4:f0:7f:6e:
04:d7:5f:ff:19:87:41:e7:9f:73:21:a2:09:12:8e:90:78:e5:
77:82:af:82:fa:bc:b4:6c:d1:79:46:ba:1f:79:d4:5c:ff:96:
b6:9d:0e:a9:be:3c:76:e3:0e:71:4b:e8:c7:c2:d9:f1:11:a9:
5d:9f:92:e4:10:0c:5e:78:40:2b:75:17:d3:79:cd:4e:57:e5:
c1:27:60:12:29:21:5c:18:22:ec:f8:5b:cf:be:05:79:7f:df:
a1:9d:78:b5:1d:9f:0c:f0:73:35:c2:e0:9c:f5:c1:53:7e:ad:
0a:83:94:a8
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaAZs3s5+aeoUv9AdpqW1wMeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyMWYwY2JhMTBkYWEzMDJlM2IxNjdjZWU1Mzk1Zjc0MmY1
MzBiMDkwHhcNMjYwODE5MTEwNjI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNjNjYjRkM2QzOTZkZjZjYmZlYTFjMTQ4OTI4YTRhNzQ1NThiNmQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmwVvs+0ka2GHasChfQKzi+KQhN6
YKAf4YwM3r7uTfK11rkOJR9wEao1JNS0VbkccibGAoGiHb4RVx25wnni2t/vYWat
KM2BZBdHPmAwo/zBlMo8NSjkYA1U65HIAXzQtw/moi42ZduGMNj+I6uP7IkWN+Vr
apXuL2FwwTN6TOeKewoPbaX3rEUIGjLDVPB0ZTo1Uh/KVwMjsCpBcHxySZvFhM8M
E5s2vKWCp5viV5jk8lfKjR0Q/9ApVlNROzsAzbn53YdQTeTqwSCkk+hTK9k0tKWs
2WLvVYZW+/ZV9eHZcY2IfF1bd+gED0GQBmyk2cwEmcrs77USln8+Bu6HewIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFPY8tNPTlt9sv+ocFIkopKdFWLbXMB8GA1UdIwQY
MBaAFFIfDLoQ2qMC47FnzuU5X3QvUwsJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWg4TXVoRGFvd0xqc1dmTzVUbGZkQzlUQ3drLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82OGNlMzYtNzRlNC00NDNiLWFlZjEt
M2JiOGIwNzVkNjlmLzEvOWp5MDA5T1czMnlfNmh3VWlTaWtwMFZZdHRjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82OGNlMzYtNzRlNC00NDNiLWFlZjEtM2JiOGIwNzVkNjlm
LzEvVWg4TXVoRGFvd0xqc1dmTzVUbGZkQzlUQ3drLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAV0yPAwQA
V0ybMA0GCSqGSIb3DQEBCwUAA4IBAQARCIQ5egegvSdcQGa/CCyKTBiuSi7aMp8a
5LjEoEWHPvGxT7mtCVJ6OQZhNZRgHAwZr2mG7Oc1r2YbZreA0lXp5FAy5o0zCCeV
zXKqF2QvgZsX8JpneY92HDpLtZR0mCrmXrVrKxYkz+cEKm08+ZmHbmPXIEmLPVCL
hF6MjDbUzHbd06t13/G3aET0s/Twf24E11//GYdB559zIaIJEo6QeOV3gq+C+ry0
bNF5RrofedRc/5a2nQ6pvjx24w5xS+jHwtnxEaldn5LkEAxeeEArdRfTec1OV+XB
J2ASKSFcGCLs+FvPvgV5f9+hnXi1HZ8M8HM1wuCc9cFTfq0Kg5So
-----END CERTIFICATE-----
Generated at Fri Sep 4 22:48:59 2026 by rpki-client