Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/CcDEw_DaI3kRXMXjyQPPN-zQ5zM.roa
File: CcDEw_DaI3kRXMXjyQPPN-zQ5zM.roa (raw, json)
Hash identifier: qCEFATYyjxj8r/fA784IyY61OIZMkSV7mjAmhozoBEI=
Subject key identifier: 09:C0:C4:C3:F0:DA:23:79:11:5C:C5:E3:C9:03:CF:37:EC:D0:E7:33
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 019EB3A00F381C96E025712C6939A0C84A12
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/CcDEw_DaI3kRXMXjyQPPN-zQ5zM.roa
Signing time: Wed 10 Jun 2026 22:21:11 +0000
ROA not before: Wed 10 Jun 2026 22:21:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207306
IP address blocks: 87.76.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b3:a0:0f:38:1c:96:e0:25:71:2c:69:39:a0:c8:4a:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Jun 10 22:21:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=09c0c4c3f0da2379115cc5e3c903cf37ecd0e733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4a:08:35:f3:5a:82:a0:22:85:a8:a8:38:5f:
bf:8e:a6:c8:8a:d4:ad:c5:e4:94:89:fc:99:50:f8:
71:b8:f5:d6:31:e5:4a:eb:8e:78:af:0d:c7:39:e7:
79:03:05:f0:ad:c1:dd:5f:ac:f0:8e:3d:b6:2d:69:
4f:55:c7:0b:56:b2:5f:bc:5e:6d:22:e0:38:d4:af:
d9:70:57:41:c5:e3:2b:47:54:79:85:d9:56:f6:0d:
16:95:0a:f8:ae:c1:b3:56:e9:ce:ee:b9:25:bb:bf:
26:f0:c2:47:90:7e:26:59:04:39:56:66:31:e3:63:
fe:86:4b:b3:a4:16:da:40:bb:70:b5:aa:87:80:47:
e1:f8:7a:d7:da:35:81:85:60:ba:a5:b0:fc:ec:9c:
41:05:ca:2e:99:5f:e1:ec:f4:49:77:33:19:34:bc:
27:50:e8:24:4e:18:cc:d8:6b:78:34:d9:25:89:8d:
89:49:d5:e0:92:a0:01:a2:20:87:29:2a:db:bf:53:
d5:b7:09:2d:18:94:14:8c:12:3e:b5:49:5e:b2:31:
c6:14:52:0e:10:4d:da:c8:5f:9f:29:c9:14:eb:76:
ad:cd:b2:be:84:60:49:c1:c4:aa:9a:76:74:ab:43:
37:a3:39:dd:a7:dd:06:ae:a6:88:1f:25:49:b1:0f:
11:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:C0:C4:C3:F0:DA:23:79:11:5C:C5:E3:C9:03:CF:37:EC:D0:E7:33
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/CcDEw_DaI3kRXMXjyQPPN-zQ5zM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.133.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:ed:e1:b2:60:e6:fa:68:80:7e:37:9d:82:03:d2:1b:37:a9:
05:eb:32:a0:bd:08:8c:d9:b1:05:3d:ed:8e:8e:78:73:1d:8d:
a7:54:f9:b0:cb:ac:21:95:15:2e:54:21:98:d7:af:e7:09:5b:
09:e1:0e:ae:75:4a:e3:10:ad:e8:c3:38:a8:9c:6c:34:3e:00:
b9:4b:e0:c0:6d:d9:59:63:38:32:7c:c1:77:5d:36:39:65:1c:
fa:7b:51:ec:1e:69:06:04:96:04:ba:6d:34:d6:d6:1a:ee:29:
b5:fa:32:92:57:74:b4:eb:bf:0d:4c:db:28:65:41:6f:8c:72:
6e:0c:1a:80:fc:c8:06:98:f1:3e:4b:d4:86:77:e4:6e:85:c2:
3d:af:7e:d2:fc:86:c5:7c:5d:ab:63:b9:25:d9:06:52:86:0f:
2b:7d:1e:ef:22:b1:6a:51:a0:f7:8e:89:70:19:a8:0c:a9:6b:
3c:4c:de:bd:99:d6:01:8f:1d:e7:a5:28:bc:dc:06:d6:a3:08:
0a:ab:4a:84:e8:18:1c:0e:b6:2b:45:39:92:f0:4e:ed:76:2d:
4d:55:bc:e1:67:ea:20:71:ab:05:de:ae:0f:3b:dc:7c:63:68:
05:3f:91:c8:47:24:34:d9:68:06:46:91:67:21:0c:35:03:bc:
73:c5:53:23
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ6zoA84HJbgJXEsaTmgyEoSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyMWYwY2JhMTBkYWEzMDJlM2IxNjdjZWU1Mzk1Zjc0MmY1
MzBiMDkwHhcNMjYwNjEwMjIyMTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOWMwYzRjM2YwZGEyMzc5MTE1Y2M1ZTNjOTAzY2YzN2VjZDBlNzMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukoINfNagqAihaioOF+/jqbIitSt
xeSUifyZUPhxuPXWMeVK6454rw3HOed5AwXwrcHdX6zwjj22LWlPVccLVrJfvF5t
IuA41K/ZcFdBxeMrR1R5hdlW9g0WlQr4rsGzVunO7rklu78m8MJHkH4mWQQ5VmYx
42P+hkuzpBbaQLtwtaqHgEfh+HrX2jWBhWC6pbD87JxBBcoumV/h7PRJdzMZNLwn
UOgkThjM2Gt4NNkliY2JSdXgkqABoiCHKSrbv1PVtwktGJQUjBI+tUlesjHGFFIO
EE3ayF+fKckU63atzbK+hGBJwcSqmnZ0q0M3ozndp90GrqaIHyVJsQ8R5wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAnAxMPw2iN5EVzF48kDzzfs0OczMB8GA1UdIwQY
MBaAFFIfDLoQ2qMC47FnzuU5X3QvUwsJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWg4TXVoRGFvd0xqc1dmTzVUbGZkQzlUQ3drLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82OGNlMzYtNzRlNC00NDNiLWFlZjEt
M2JiOGIwNzVkNjlmLzEvQ2NERXdfRGFJM2tSWE1YanlRUFBOLXpRNXpNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82OGNlMzYtNzRlNC00NDNiLWFlZjEtM2JiOGIwNzVkNjlm
LzEvVWg4TXVoRGFvd0xqc1dmTzVUbGZkQzlUQ3drLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV0yFMA0G
CSqGSIb3DQEBCwUAA4IBAQB/7eGyYOb6aIB+N52CA9IbN6kF6zKgvQiM2bEFPe2O
jnhzHY2nVPmwy6whlRUuVCGY16/nCVsJ4Q6udUrjEK3owzionGw0PgC5S+DAbdlZ
YzgyfMF3XTY5ZRz6e1HsHmkGBJYEum001tYa7im1+jKSV3S0678NTNsoZUFvjHJu
DBqA/MgGmPE+S9SGd+RuhcI9r37S/IbFfF2rY7kl2QZShg8rfR7vIrFqUaD3jolw
GagMqWs8TN69mdYBjx3npSi83AbWowgKq0qE6BgcDrYrRTmS8E7tdi1NVbzhZ+og
casF3q4PO9x8Y2gFP5HIRyQ02WgGRpFnIQw1A7xzxVMj
-----END CERTIFICATE-----
Generated at Fri Jun 12 00:05:53 2026 by rpki-client