Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/AG_qKZuCNRTEpFN453wGzMCgR08.roa
File: AG_qKZuCNRTEpFN453wGzMCgR08.roa (raw, json)
Hash identifier: uuNEyiTBNk8J4EVqEpkci17ngUQnhOube1OyuPJritg=
Subject key identifier: 00:6F:EA:29:9B:82:35:14:C4:A4:53:78:E7:7C:06:CC:C0:A0:47:4F
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 019F64B04E9B733CF735010A458ED67FC7F1
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/AG_qKZuCNRTEpFN453wGzMCgR08.roa
Signing time: Wed 15 Jul 2026 07:31:43 +0000
ROA not before: Wed 15 Jul 2026 07:31:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209658
IP address blocks: 87.76.128.0/24 maxlen: 24
87.76.142.0/24 maxlen: 24
87.76.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:64:b0:4e:9b:73:3c:f7:35:01:0a:45:8e:d6:7f:c7:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Jul 15 07:31:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=006fea299b823514c4a45378e77c06ccc0a0474f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:85:85:77:ab:73:b8:fd:46:1c:b3:fa:62:5c:
00:21:e0:4f:45:81:cf:e4:70:af:5c:e0:e6:9a:81:
42:6f:c3:c1:fe:8f:55:b0:58:95:7c:6a:8b:47:e9:
8d:d1:a9:57:ed:9e:ef:59:23:53:85:2f:58:5f:7c:
fe:ed:a9:ef:45:71:fd:be:de:3c:06:95:ac:a1:cf:
4e:4d:9f:53:74:64:a0:e5:df:4b:71:61:01:18:77:
a4:35:b5:e7:ea:b7:75:4c:fb:8e:24:b5:6d:47:bd:
e6:b0:d5:a3:e7:8f:ea:48:2b:60:73:54:b3:d0:72:
0c:f5:6e:36:42:22:9f:41:cd:a7:86:3d:d4:6e:70:
bd:8d:9b:81:44:9e:6c:0b:15:7f:38:30:17:7a:2e:
b5:44:ca:f3:9d:42:e9:6d:60:8e:fb:6a:00:a0:0d:
9c:2c:ba:82:83:7c:01:19:31:e8:df:01:a0:24:79:
a3:fd:18:e6:45:4a:bb:7d:12:cc:5b:6c:ba:a3:19:
fb:52:c5:1b:c8:3a:5a:f4:a2:92:f0:97:c1:b3:43:
b0:87:bf:6c:13:0c:13:92:1e:e9:5c:c2:b0:82:17:
ea:22:9c:56:a2:61:15:ab:1f:3c:b4:97:9e:04:5a:
a2:63:4d:9c:fd:8d:f3:0e:a6:28:c1:98:b2:68:79:
51:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:6F:EA:29:9B:82:35:14:C4:A4:53:78:E7:7C:06:CC:C0:A0:47:4F
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/AG_qKZuCNRTEpFN453wGzMCgR08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.128.0/24
87.76.142.0/24
87.76.157.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:62:db:bb:94:ed:b9:8f:5f:84:4f:3a:81:1c:bc:57:1f:9c:
ec:3c:02:be:ef:b9:33:55:c5:94:6b:50:85:5a:6a:b3:a1:f7:
ea:5b:74:8c:4b:97:50:be:68:0a:92:70:07:d3:0a:8c:af:db:
11:e2:38:21:9c:cf:45:8d:d2:a2:82:9a:50:c5:05:a5:03:b9:
4d:b6:de:e5:90:dc:4d:50:28:91:f9:b6:bb:1d:92:4a:e3:12:
3b:83:83:29:80:78:cb:b8:d6:d5:de:d0:ed:7f:c4:b7:b0:b6:
24:37:80:af:39:2e:1d:ae:18:d5:a4:d3:08:a5:96:3b:e7:33:
f6:b3:cf:56:43:9d:2c:35:54:63:fa:cd:ee:45:43:03:fa:4b:
69:f5:01:63:23:ea:58:78:f7:2d:9e:5f:77:38:ea:85:ba:ba:
64:6a:2a:7c:d8:46:ea:2f:cc:b8:b7:65:17:3b:88:d6:c1:68:
c3:c4:47:6e:82:ff:f5:13:47:52:1f:3d:1f:8f:a8:c1:b9:69:
8d:19:11:72:d3:f5:61:7b:5f:a4:40:51:69:70:0c:2e:a2:03:
dc:8b:65:1b:47:0c:8a:14:34:f2:d1:e5:58:d5:ee:ef:71:04:
f9:0d:fa:48:e8:45:46:f0:cc:fb:ac:b3:28:52:d2:5b:48:2e:
65:7f:92:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:44:01 2026 by rpki-client