Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/D7gOPIqdm0KxwxzkZj5HRNveIOU.roa
File: D7gOPIqdm0KxwxzkZj5HRNveIOU.roa (raw, json)
Hash identifier: ZCrTFazIovVAEVWzTQCZFSNYsHP6tMC6AO0nwPafdp4=
Subject key identifier: 0F:B8:0E:3C:8A:9D:9B:42:B1:C3:1C:E4:66:3E:47:44:DB:DE:20:E5
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 019FCC3298EE32BB6B39DF2EE135E126995D
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/D7gOPIqdm0KxwxzkZj5HRNveIOU.roa
Signing time: Tue 04 Aug 2026 09:54:55 +0000
ROA not before: Tue 04 Aug 2026 09:54:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6205
IP address blocks: 87.76.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 16:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cc:32:98:ee:32:bb:6b:39:df:2e:e1:35:e1:26:99:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Aug 4 09:54:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0fb80e3c8a9d9b42b1c31ce4663e4744dbde20e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:44:f0:37:b5:b2:8d:69:5a:0e:e9:7f:d9:1d:
89:39:31:4c:53:e1:eb:c5:c1:8e:81:7f:5f:a7:80:
bc:ba:54:a7:72:06:60:3a:c1:77:8a:c1:85:dc:6f:
ca:ee:e5:36:c0:13:c3:71:ae:ef:8c:ea:e8:b4:c8:
49:02:b5:e6:70:ac:17:f5:8c:a1:99:30:61:7d:14:
96:07:fc:70:74:20:c5:3c:84:d0:b7:74:49:10:02:
94:30:c4:93:d2:ec:45:62:bf:fc:02:7f:75:13:bb:
bd:fc:16:5b:04:99:a0:1f:6c:a3:58:a0:84:5b:e5:
fc:bc:1a:09:5b:90:71:90:cb:5a:5f:19:92:96:07:
5e:65:aa:66:f2:63:bf:0c:42:42:d9:10:e9:fa:0b:
31:1e:4d:8e:94:93:a5:41:09:a6:64:96:33:a1:85:
6a:e2:83:5e:8a:37:81:db:1f:79:b8:d0:f7:1c:c4:
95:c3:f7:e7:9b:e6:48:77:5d:07:63:6e:bd:b9:9e:
52:90:64:d0:0a:ca:cc:b4:e6:6f:6a:c6:ee:22:c3:
49:48:50:fa:e9:19:57:89:79:df:bc:f3:73:20:66:
02:20:94:9b:36:7a:4d:7c:b9:49:51:01:d3:4a:34:
ae:26:3f:25:da:1d:d2:06:d0:3f:b1:42:7e:68:b9:
82:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:B8:0E:3C:8A:9D:9B:42:B1:C3:1C:E4:66:3E:47:44:DB:DE:20:E5
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/D7gOPIqdm0KxwxzkZj5HRNveIOU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.195.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:2e:1c:ea:97:ef:39:be:f3:72:e5:14:aa:82:23:df:ca:b0:
76:eb:ad:8f:02:23:a7:df:0d:f5:10:15:15:fe:ee:85:6d:73:
e3:f7:72:8f:e1:37:b6:ee:ae:4f:03:6b:ea:99:40:8c:a4:04:
75:5a:f7:76:70:d2:83:ac:a0:16:0b:85:aa:d8:21:82:23:f7:
70:99:46:7b:42:0a:18:01:7b:c0:73:66:d3:7e:84:d1:1a:d6:
91:9b:da:28:cb:81:ab:c7:8a:87:f0:24:5a:cd:9e:f8:03:5f:
32:ea:1f:fe:f2:0f:51:34:38:86:35:c7:59:84:32:f7:47:88:
7f:dd:d0:1e:01:8b:77:a4:a5:01:bf:bb:d7:df:6d:fb:87:f1:
b1:46:c2:3f:35:2e:f2:38:5e:3e:33:1c:ad:f1:84:cf:84:9d:
2b:9e:be:de:14:45:aa:02:8a:8d:98:5d:30:24:6f:5a:f9:6c:
8b:96:8a:63:c2:97:b7:62:39:c1:34:03:02:9f:83:1d:bc:43:
b5:e8:bc:d7:3c:ac:8a:b6:0b:88:27:cf:7a:fd:d6:52:ac:e4:
46:6f:d1:e7:c2:35:01:7f:af:46:27:a4:13:a3:07:c8:24:b2:
49:d3:e5:42:60:3e:23:f3:0d:ee:10:8b:2b:e7:7c:f9:87:e8:
ce:fb:ae:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 21:25:59 2026 by rpki-client