Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/A0j7u1dFlvYB-nfe8CQsUR03niw.roa
File: A0j7u1dFlvYB-nfe8CQsUR03niw.roa (raw, json)
Hash identifier: uwXJediYoPzqeK5MF+/6wznic2oljzLRg9nCtjGdZMY=
Subject key identifier: 03:48:FB:BB:57:45:96:F6:01:FA:77:DE:F0:24:2C:51:1D:37:9E:2C
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 019DF42CCB556324FD01DF7704DA12E8C3BC
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/A0j7u1dFlvYB-nfe8CQsUR03niw.roa
Signing time: Mon 04 May 2026 18:07:49 +0000
ROA not before: Mon 04 May 2026 18:07:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 151704
IP address blocks: 87.76.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f4:2c:cb:55:63:24:fd:01:df:77:04:da:12:e8:c3:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: May 4 18:07:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0348fbbb574596f601fa77def0242c511d379e2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:70:9b:ec:c1:c1:c7:4b:26:96:e5:45:35:ce:
52:f4:ab:c1:03:d7:69:14:5d:dc:da:74:32:a0:d3:
4c:08:e7:b3:6e:42:cc:b0:d4:b5:56:17:fc:97:08:
14:ac:cd:ef:7d:11:c6:31:59:3b:76:54:90:de:0c:
70:2c:0c:c6:59:4a:c0:80:6e:4d:39:53:f8:0d:c7:
2e:58:f9:e2:ce:b3:ee:4d:ee:d9:e7:88:f8:7f:ba:
bf:42:83:0c:ed:e5:15:1c:57:b8:dd:d8:b8:19:c4:
87:ae:70:14:4c:59:56:3e:df:f7:60:e4:27:1e:fc:
26:34:15:20:2b:34:ee:d2:1a:60:1a:6e:27:23:95:
af:ce:d5:0a:1e:e9:f2:86:5c:11:df:ea:f0:4d:4c:
26:a1:52:69:bd:2d:c0:72:f9:2a:82:ad:47:7a:c7:
b2:77:bb:d8:eb:8a:76:8c:eb:a2:04:44:9f:43:f6:
99:ef:0e:11:4f:df:ac:79:25:0d:6f:ca:a6:46:d6:
4a:cc:45:9e:2b:0d:0f:3f:6b:ba:d6:20:ea:67:81:
fd:17:2f:2c:00:56:c0:2c:6d:e9:60:e2:b9:32:b7:
c7:e5:75:8e:27:05:39:ad:3e:09:c0:f4:32:d7:44:
70:ec:d4:f2:c7:a0:20:93:9b:c8:ec:d9:fb:03:8b:
9c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:48:FB:BB:57:45:96:F6:01:FA:77:DE:F0:24:2C:51:1D:37:9E:2C
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/A0j7u1dFlvYB-nfe8CQsUR03niw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.217.0/24
Signature Algorithm: sha256WithRSAEncryption
49:ca:92:53:96:fe:16:75:e6:53:18:32:1b:e8:ca:25:b1:44:
7b:50:44:7e:92:36:3d:26:19:48:8b:9a:a4:12:f7:0d:9c:8d:
96:7c:45:86:78:7c:de:81:0c:a1:71:b0:e4:58:a5:80:91:0b:
c1:2f:a4:04:5c:ff:c6:90:20:85:42:5e:3c:9c:5d:6c:65:47:
75:e7:20:6d:8c:55:19:13:7f:fd:5b:b1:08:dd:70:1d:83:28:
5d:59:d1:74:f4:20:81:ca:93:5f:3b:f6:a6:e6:a8:e5:17:7c:
e2:63:08:78:d9:7d:58:8f:c7:90:24:f0:c3:3c:a6:b1:4b:af:
22:e2:64:53:f1:51:3a:3a:69:3b:99:ca:aa:6a:09:77:1c:63:
c6:16:b5:18:de:e6:ed:18:98:5f:ae:36:96:98:60:56:5d:61:
ed:6b:11:aa:e9:04:02:25:00:e4:57:8b:d2:17:2e:14:76:de:
41:0b:a2:7f:7c:c9:e5:23:e3:fa:61:ef:df:c7:46:8b:ff:5f:
41:39:f2:e9:7a:75:fd:86:bd:44:19:92:39:eb:15:7b:8e:a9:
6e:fa:73:6c:21:50:cc:42:09:71:9e:a6:f7:5a:29:aa:32:9c:
f7:94:d5:74:a8:20:9f:8f:a6:14:c9:aa:fb:c0:41:f5:3d:37:
36:2e:08:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:47:42 2026 by rpki-client