Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/D27wJ8jxjF3SkAFDQKKunM5lrTw.roa
File: D27wJ8jxjF3SkAFDQKKunM5lrTw.roa (raw, json)
Hash identifier: 3IbAhQoAWfQUB68Nb0tJqAuGS9a0EJvKb9VxOUlUv9I=
Subject key identifier: 0F:6E:F0:27:C8:F1:8C:5D:D2:90:01:43:40:A2:AE:9C:CE:65:AD:3C
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 019FDF8C72A6D182AF363592A3E8649584FB
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/D27wJ8jxjF3SkAFDQKKunM5lrTw.roa
Signing time: Sat 08 Aug 2026 04:05:51 +0000
ROA not before: Sat 08 Aug 2026 04:05:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210542
IP address blocks: 87.76.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 16:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:df:8c:72:a6:d1:82:af:36:35:92:a3:e8:64:95:84:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Aug 8 04:05:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0f6ef027c8f18c5dd290014340a2ae9cce65ad3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:21:26:3f:6a:bb:f2:0e:d3:4a:96:95:17:e0:
c2:74:3c:7e:35:18:2e:57:ee:28:a2:b2:ab:df:17:
60:c8:ba:70:46:e5:4a:6a:ca:e8:0d:bd:ea:4b:87:
b0:c6:ba:d9:e6:98:37:2c:c3:ad:63:e8:1f:6b:f6:
de:c8:54:fa:08:72:f3:22:e4:5c:5d:9b:c1:10:e4:
14:01:ff:04:6d:ed:4b:82:1b:7b:21:31:89:d6:51:
87:5c:74:f2:43:84:59:8d:c0:29:c1:57:69:77:49:
4f:4a:7f:fe:a7:d5:fd:46:53:11:fb:0c:90:b1:66:
64:8d:ac:f8:f9:fe:99:b3:8b:3f:ee:54:d4:e1:ae:
1b:8f:43:29:04:3e:50:09:84:af:15:61:ea:fb:6c:
82:41:6a:98:22:e8:da:60:1d:b5:7f:47:ee:e2:a8:
80:b3:ed:6f:a4:d7:28:4c:ff:f4:06:6e:b5:44:17:
0e:bb:f6:e3:8a:d7:0b:a5:77:2b:cb:ca:bb:c4:f6:
9c:72:75:74:ee:ac:00:7b:bb:b7:4f:fe:16:67:26:
d9:6a:63:6a:4b:9e:02:0c:85:c6:d4:22:e8:7c:a8:
95:f7:c8:d3:28:01:0e:ae:be:d1:a9:28:2a:1d:03:
14:1f:f6:02:ef:3f:83:bd:01:84:a1:27:20:ec:78:
de:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:6E:F0:27:C8:F1:8C:5D:D2:90:01:43:40:A2:AE:9C:CE:65:AD:3C
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/D27wJ8jxjF3SkAFDQKKunM5lrTw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.181.0/24
Signature Algorithm: sha256WithRSAEncryption
33:5b:13:96:f6:47:2b:f5:3e:86:5c:57:93:11:09:82:3d:bb:
b4:6d:eb:7e:ba:d8:e7:f7:b4:60:18:83:33:aa:94:ea:9c:b1:
94:56:1f:c4:03:21:06:30:ff:45:0c:4c:48:ae:86:33:b4:c3:
83:87:ec:ac:1f:a9:ed:a1:1e:b9:98:7b:5e:aa:6e:24:c7:d4:
06:cb:71:c1:02:1c:e3:2a:c3:6f:ec:fc:cd:5d:e6:77:61:89:
d9:92:79:77:63:0a:f3:8d:a8:8e:98:07:6d:00:a4:ff:cb:80:
f3:ac:45:fe:de:9d:66:e1:86:e9:e4:56:4e:09:f2:7d:04:78:
0e:b0:69:d3:72:37:2b:a4:6a:d1:38:c9:4a:85:cb:e1:49:80:
7c:1a:3c:05:3d:58:06:62:52:d1:fa:c2:14:82:48:53:81:6a:
58:b5:9e:47:1f:8f:d4:11:89:f8:2c:d2:9f:fe:ba:1e:af:83:
e9:87:9a:78:6a:35:03:f4:76:53:c8:05:61:07:b7:88:a9:d0:
0b:4c:ff:24:7f:99:c7:2c:8f:1f:41:04:5f:77:42:51:93:ee:
65:d4:d9:45:60:b7:17:1a:2e:3f:47:8a:79:55:43:2a:d4:1e:
86:61:fa:5a:09:c8:55:30:75:57:0f:f7:f3:7f:45:17:22:c2:
02:97:e4:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 21:25:51 2026 by rpki-client