Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Df5np5gReGZxRJaUviKFpSvcC-k.roa
File: Df5np5gReGZxRJaUviKFpSvcC-k.roa (raw, json)
Hash identifier: 1yIPJ9tq68o2MVVF+w9krxeMQ7msa7UJUYCznVLGTkY=
Subject key identifier: 0D:FE:67:A7:98:11:78:66:71:44:96:94:BE:22:85:A5:2B:DC:0B:E9
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 019F4D7D490A524AB6D31B24F100AF867305
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Df5np5gReGZxRJaUviKFpSvcC-k.roa
Signing time: Fri 10 Jul 2026 19:24:43 +0000
ROA not before: Fri 10 Jul 2026 19:24:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219536
IP address blocks: 87.76.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 13:09:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:4d:7d:49:0a:52:4a:b6:d3:1b:24:f1:00:af:86:73:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Jul 10 19:24:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0dfe67a79811786671449694be2285a52bdc0be9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:bd:8e:09:57:05:4c:f5:38:7c:98:53:9e:1e:
52:80:ec:88:11:29:dd:ae:7b:4e:96:08:95:9d:fd:
7a:94:53:55:a7:08:00:42:19:ca:78:5d:72:95:66:
ed:41:fb:79:eb:44:7e:1e:d9:d1:0a:76:68:4d:b1:
91:42:46:7c:92:0a:8e:1f:cc:e9:a5:c5:c6:d6:ca:
01:60:f2:97:a2:a4:e1:b8:e7:7c:10:02:c3:62:a9:
8b:4d:8e:70:e8:56:10:6f:81:1a:a9:5b:d2:fc:31:
1c:53:93:a9:f9:94:0d:9d:4d:29:b6:1d:74:2e:c8:
6b:33:af:ed:e9:d9:dc:c0:4b:91:fe:97:eb:2f:67:
07:e4:84:6e:f9:2f:4e:6a:d8:2d:d6:40:79:c3:36:
02:d1:9d:0d:4c:e2:12:05:73:95:9c:1a:46:52:46:
83:d0:a7:3c:71:d5:da:6a:bc:7a:50:ce:33:c6:27:
c6:80:90:0b:7e:27:11:33:0d:4f:36:0e:98:3d:30:
30:f6:07:39:56:7d:95:00:f6:ea:a7:ff:10:72:77:
95:ba:3a:b1:79:0f:6b:85:f1:91:0c:8d:fe:60:42:
db:66:c4:54:af:0a:4e:11:f0:65:fa:90:10:09:41:
76:68:1e:11:71:fd:4b:67:0f:24:05:0e:d1:12:f9:
34:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:FE:67:A7:98:11:78:66:71:44:96:94:BE:22:85:A5:2B:DC:0B:E9
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Df5np5gReGZxRJaUviKFpSvcC-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.215.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:46:55:48:44:df:3c:aa:1a:01:b1:4d:87:83:eb:ad:bf:40:
ab:4b:fa:da:f3:d0:ac:94:b9:91:82:a2:bc:99:ea:29:80:ae:
3a:d2:29:48:8f:36:ec:40:5c:6a:52:ec:92:53:b9:cb:2c:60:
5e:d0:1c:fb:7d:6e:e9:45:40:e9:87:ad:bd:b6:48:92:fd:8c:
92:17:4d:78:f0:86:61:f3:70:a5:cc:c0:72:4f:85:2e:6b:68:
e4:83:34:52:0c:98:ef:0b:49:d1:34:66:31:16:60:2b:1b:97:
75:d7:96:5b:62:2c:35:45:e7:28:83:0c:db:13:72:c4:b6:99:
93:06:b5:56:03:ec:54:1c:66:d8:34:ea:2f:b0:95:89:7b:17:
69:a8:85:e4:d5:88:52:4d:d8:97:63:1f:ed:17:f0:7c:53:00:
92:ab:27:96:e3:47:56:60:52:10:54:25:a1:14:3f:13:75:00:
00:e1:09:7b:70:47:1d:d4:e7:02:22:bf:c0:02:2d:39:5b:4b:
ff:fa:4f:c4:68:1a:d3:d2:61:a9:1f:96:6f:19:d4:10:d3:1e:
98:de:60:9c:9a:76:b1:0d:a4:fb:6c:82:32:fd:40:b3:df:9c:
24:dd:73:eb:32:e3:20:3d:ed:8a:3b:8f:6c:cb:b4:a6:ba:b3:
92:56:3d:3b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ9NfUkKUkq20xsk8QCvhnMFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyMWYwY2JhMTBkYWEzMDJlM2IxNjdjZWU1Mzk1Zjc0MmY1
MzBiMDkwHhcNMjYwNzEwMTkyNDQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZGZlNjdhNzk4MTE3ODY2NzE0NDk2OTRiZTIyODVhNTJiZGMwYmU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvr2OCVcFTPU4fJhTnh5SgOyIESnd
rntOlgiVnf16lFNVpwgAQhnKeF1ylWbtQft560R+HtnRCnZoTbGRQkZ8kgqOH8zp
pcXG1soBYPKXoqThuOd8EALDYqmLTY5w6FYQb4EaqVvS/DEcU5Op+ZQNnU0pth10
LshrM6/t6dncwEuR/pfrL2cH5IRu+S9Oatgt1kB5wzYC0Z0NTOISBXOVnBpGUkaD
0Kc8cdXaarx6UM4zxifGgJALficRMw1PNg6YPTAw9gc5Vn2VAPbqp/8QcneVujqx
eQ9rhfGRDI3+YELbZsRUrwpOEfBl+pAQCUF2aB4Rcf1LZw8kBQ7REvk0qQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFA3+Z6eYEXhmcUSWlL4ihaUr3AvpMB8GA1UdIwQY
MBaAFFIfDLoQ2qMC47FnzuU5X3QvUwsJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWg4TXVoRGFvd0xqc1dmTzVUbGZkQzlUQ3drLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82OGNlMzYtNzRlNC00NDNiLWFlZjEt
M2JiOGIwNzVkNjlmLzEvRGY1bnA1Z1JlR1p4UkphVXZpS0ZwU3ZjQy1rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82OGNlMzYtNzRlNC00NDNiLWFlZjEtM2JiOGIwNzVkNjlm
LzEvVWg4TXVoRGFvd0xqc1dmTzVUbGZkQzlUQ3drLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV0zXMA0G
CSqGSIb3DQEBCwUAA4IBAQAvRlVIRN88qhoBsU2Hg+utv0CrS/ra89CslLmRgqK8
meopgK460ilIjzbsQFxqUuySU7nLLGBe0Bz7fW7pRUDph629tkiS/YySF0148IZh
83ClzMByT4Uua2jkgzRSDJjvC0nRNGYxFmArG5d115ZbYiw1RecogwzbE3LEtpmT
BrVWA+xUHGbYNOovsJWJexdpqIXk1YhSTdiXYx/tF/B8UwCSqyeW40dWYFIQVCWh
FD8TdQAA4Ql7cEcd1OcCIr/AAi05W0v/+k/EaBrT0mGpH5ZvGdQQ0x6Y3mCcmnax
DaT7bIIy/UCz35wk3XPrMuMgPe2KO49sy7SmurOSVj07
-----END CERTIFICATE-----
Generated at Tue Jul 21 20:29:34 2026 by rpki-client