Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/EcGUi11FAjDE8VBBVTD2gcgJiRM.roa
File: EcGUi11FAjDE8VBBVTD2gcgJiRM.roa (raw, json)
Hash identifier: XC8Oh0fLyFiT4Vf9hhEPTO0Ea3btzPhGIYuZxLQ4jFY=
Subject key identifier: 11:C1:94:8B:5D:45:02:30:C4:F1:50:41:55:30:F6:81:C8:09:89:13
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 019E414E2C0A9108D9139C66ED7481DF50BB
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/EcGUi11FAjDE8VBBVTD2gcgJiRM.roa
Signing time: Tue 19 May 2026 17:35:02 +0000
ROA not before: Tue 19 May 2026 17:35:02 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198339
IP address blocks: 87.76.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 07:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:41:4e:2c:0a:91:08:d9:13:9c:66:ed:74:81:df:50:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: May 19 17:35:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=11c1948b5d450230c4f150415530f681c8098913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:70:b0:ba:7f:f5:37:2f:00:43:93:7a:a2:32:
de:80:9a:88:31:0b:ff:4a:74:be:5a:c1:8f:cf:08:
a9:64:b2:b6:6b:d2:87:09:24:56:b7:3a:04:d2:14:
b6:d9:28:35:51:d2:fe:df:6d:4d:80:fe:f0:76:c3:
2a:a9:0c:05:0b:a3:21:15:ce:ad:7a:01:d4:9d:b4:
76:78:f0:f6:7d:76:93:03:24:57:96:6c:2c:32:ed:
d7:8e:e2:7e:84:56:35:5b:55:0b:f4:e0:97:fa:9e:
fd:52:fb:78:89:82:3d:3c:8f:63:75:79:5f:ee:03:
89:da:09:df:e2:54:37:c9:e2:21:b3:66:62:73:13:
33:a1:86:87:43:b8:63:ac:d7:b1:05:15:3c:a6:5c:
25:de:fe:86:e9:c2:6a:74:03:77:41:c2:4d:7c:ce:
6f:1c:b1:2a:ee:81:d1:db:d5:3d:b9:e3:e0:59:3e:
dc:ba:0d:10:2b:61:f9:36:30:24:8b:bc:04:75:a2:
09:1f:c1:13:fa:b8:d6:7d:1b:b5:6b:82:bd:b5:c0:
8b:52:8f:35:38:15:64:b9:70:36:27:cf:0a:8c:ec:
48:91:a1:b2:12:c6:6d:10:96:38:98:00:15:78:d1:
4c:cd:90:b8:28:a4:36:fb:be:69:b0:50:7e:f0:cf:
c3:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:C1:94:8B:5D:45:02:30:C4:F1:50:41:55:30:F6:81:C8:09:89:13
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/EcGUi11FAjDE8VBBVTD2gcgJiRM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.197.0/24
Signature Algorithm: sha256WithRSAEncryption
73:98:f4:dc:82:30:1e:32:56:8a:39:fb:e8:f4:8a:63:80:e2:
72:25:36:2f:eb:27:01:9a:6d:b0:74:2d:27:6b:f3:4d:7f:62:
2e:0d:eb:0a:bb:79:69:22:16:51:00:b6:08:c6:16:33:09:2e:
81:68:cc:21:b0:3d:eb:2e:13:16:eb:bd:87:96:92:18:b2:d0:
0f:04:c1:bc:0e:69:60:11:71:79:9a:d9:c1:b6:7c:1f:6f:2d:
19:6d:78:c7:8a:24:17:d1:b0:82:8d:14:b0:80:50:cd:4e:bd:
ad:72:e9:63:6a:6a:4b:10:75:6a:31:94:1f:69:46:69:cc:dc:
db:fe:6b:9f:43:6e:5b:33:b2:04:be:bd:77:70:30:01:30:e9:
53:4f:f9:67:19:97:3a:8b:3e:37:d9:a6:07:58:d2:3f:d1:ba:
fc:51:0f:4c:64:e6:ce:ff:66:b6:0a:43:63:d4:47:28:61:11:
96:f2:a6:ea:96:5f:59:b2:ce:64:de:e8:87:6a:87:90:71:33:
8e:95:aa:db:ec:4b:22:8c:0d:ae:92:75:a4:10:05:58:70:ce:
4b:c0:35:6a:17:bc:fc:a5:05:81:02:48:e4:6a:27:d9:c9:e3:
2f:76:38:34:2e:ee:88:7c:cc:ad:55:de:c8:74:dc:24:07:bb:
ec:cc:71:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 15:02:43 2026 by rpki-client