Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/AjptTEHVBc9DWrHL5lLyem4DZoM.roa
File: AjptTEHVBc9DWrHL5lLyem4DZoM.roa (raw, json)
Hash identifier: QZpTAN7GACXGDPvB8KRrt2iLrg6bKRBqPSp7hVoJ0PE=
Subject key identifier: 02:3A:6D:4C:41:D5:05:CF:43:5A:B1:CB:E6:52:F2:7A:6E:03:66:83
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 019FE6E05D8CEE1C8D933F4A7323D9D374CE
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/AjptTEHVBc9DWrHL5lLyem4DZoM.roa
Signing time: Sun 09 Aug 2026 14:14:51 +0000
ROA not before: Sun 09 Aug 2026 14:14:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2914
IP address blocks: 87.76.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 16:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:e6:e0:5d:8c:ee:1c:8d:93:3f:4a:73:23:d9:d3:74:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Aug 9 14:14:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=023a6d4c41d505cf435ab1cbe652f27a6e036683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:08:b5:2d:46:f8:ec:af:7c:9f:8f:4e:02:fe:
7e:2a:96:7b:95:45:43:de:01:74:65:46:cd:54:4f:
b0:19:49:94:bb:3e:4b:2b:66:3d:f2:9c:5b:aa:e2:
de:5a:d9:03:3e:75:b7:76:e3:c8:36:e1:b2:62:f8:
3c:b9:9b:ce:99:1f:38:07:96:51:1b:c6:69:ae:aa:
2e:f1:2a:53:a0:33:a8:9b:21:89:8b:dd:65:12:b2:
62:c2:02:e8:24:87:75:62:d5:01:79:5a:91:30:1f:
3c:81:b3:f8:45:df:9d:5d:2f:91:1f:69:78:a3:29:
d7:90:a7:1c:ce:3e:2e:3a:be:27:9e:80:ce:f8:99:
43:72:b4:4a:57:7b:75:02:b8:ef:8e:c0:ca:3e:68:
c5:6d:2e:2d:4d:cc:ba:58:79:96:12:57:c4:dd:0b:
02:4c:a7:4f:1e:54:72:a0:c1:77:65:b4:05:0b:01:
f2:ac:f0:bf:6f:06:07:12:ee:17:af:d6:14:78:95:
9f:d7:b8:47:c0:92:d8:14:a1:fa:e3:d7:c4:e2:a7:
b3:d8:09:6e:38:63:84:45:24:88:8b:d0:8c:c4:44:
75:01:26:a5:21:42:eb:0f:6b:d3:ea:74:8a:a9:0c:
3b:bc:cd:c7:fa:87:b2:e3:61:d1:9d:02:f7:de:ed:
fc:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:3A:6D:4C:41:D5:05:CF:43:5A:B1:CB:E6:52:F2:7A:6E:03:66:83
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/AjptTEHVBc9DWrHL5lLyem4DZoM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.210.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:f7:ef:cd:09:b6:46:76:36:1c:9f:5a:bc:c8:57:87:50:fd:
e2:e3:ba:8a:4d:10:e3:b0:be:99:3f:7c:9c:50:c6:a0:9b:f0:
46:f5:84:92:bd:68:52:30:03:bb:5c:2e:97:79:48:e0:e1:c1:
56:72:a4:22:13:33:3b:cf:44:6c:bf:76:94:c1:10:84:30:74:
37:bd:3b:5c:9f:b5:be:a2:6e:25:36:e5:53:12:d3:66:82:f9:
c6:5a:35:5c:a3:c3:11:02:88:65:f1:c0:1b:29:90:55:60:f4:
8c:6f:cc:c5:69:1c:81:00:bd:29:fa:c6:63:61:ed:e3:d7:89:
ea:aa:c2:c7:47:d7:2e:e9:f0:20:49:6c:f6:ea:9e:5c:18:3a:
55:5d:0d:77:74:46:79:6a:ae:04:2b:1d:0f:2f:26:50:1b:9b:
a6:95:00:1b:1a:3c:7c:56:be:c0:c2:5d:22:d7:ed:8d:d7:a8:
78:16:c1:b5:46:9f:e9:a4:1c:43:36:3e:22:f6:48:0e:a7:35:
86:6f:88:6a:4d:5a:27:52:2f:1f:70:29:ad:01:50:a5:3a:1d:
44:cf:39:5e:97:72:04:9c:92:b1:0c:b7:df:0d:6c:69:0d:3b:
62:95:9d:7f:7e:f4:e3:d7:a4:0f:4d:bd:7e:d5:a7:05:20:95:
81:e7:7e:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 21:25:08 2026 by rpki-client