Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/GsaxqZOuwkiO9NkIze0r5yVEzR8.roa
File: GsaxqZOuwkiO9NkIze0r5yVEzR8.roa (raw, json)
Hash identifier: FFzwjNGekVYf0OASVzBegzPnoHpS8E/HgQRfvgwskME=
Subject key identifier: 1A:C6:B1:A9:93:AE:C2:48:8E:F4:D9:08:CD:ED:2B:E7:25:44:CD:1F
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 019CAE2C178AC9486C0DF3ABBB60C2BFA12B
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/GsaxqZOuwkiO9NkIze0r5yVEzR8.roa
Signing time: Mon 02 Mar 2026 10:50:51 +0000
ROA not before: Mon 02 Mar 2026 10:50:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63199
IP address blocks: 87.76.217.0/24 maxlen: 24
87.76.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 16:05:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:2c:17:8a:c9:48:6c:0d:f3:ab:bb:60:c2:bf:a1:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Mar 2 10:50:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1ac6b1a993aec2488ef4d908cded2be72544cd1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:4f:8d:7a:93:0d:0b:8c:f5:17:03:f4:63:7f:
9e:88:09:40:53:dc:da:32:d0:45:94:4d:3c:dd:b6:
74:1a:bc:75:f8:47:1a:0e:a2:9d:e6:f2:06:17:56:
7c:dd:80:54:d7:81:3d:87:34:ac:28:6e:9b:f9:5b:
7a:a4:cd:02:16:fb:7d:a4:52:dd:2f:54:6f:d0:6b:
36:4d:98:ea:b2:d1:d2:f6:82:39:36:41:fb:cf:03:
2e:f9:30:1d:3a:f5:87:ce:8b:17:5c:0e:bb:a9:24:
fe:e6:86:95:bc:1d:55:49:9d:70:9b:8b:68:31:3f:
25:d4:5e:e7:70:83:13:fb:9d:ac:e4:f8:08:5a:51:
7b:48:f0:f8:f6:5b:47:6b:19:54:7d:31:af:7a:b9:
73:f7:fb:66:dd:cd:f4:8f:7d:d3:45:e8:97:6a:4c:
1e:f5:1c:07:8b:75:94:78:d4:44:87:94:cc:e1:75:
8c:a8:b2:f4:31:95:6b:59:25:df:c6:e2:05:9e:1d:
e1:52:eb:04:fa:bb:b3:a0:b2:3e:e1:5c:d7:d9:20:
79:41:89:3e:32:90:fb:40:ef:26:f8:02:05:37:7c:
47:0a:7f:e3:da:ed:11:52:c6:95:ff:3b:d9:6a:c9:
d8:5c:56:36:bf:a1:6d:0e:cc:0d:41:be:01:2e:ef:
82:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:C6:B1:A9:93:AE:C2:48:8E:F4:D9:08:CD:ED:2B:E7:25:44:CD:1F
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/GsaxqZOuwkiO9NkIze0r5yVEzR8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.217.0/24
87.76.220.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:44:3f:d3:d3:58:ac:08:2e:a3:e4:27:e3:d0:62:9f:fe:28:
d4:56:81:0c:b1:7d:c2:3a:43:70:c3:3e:d9:db:3d:e5:a9:d9:
3a:4f:47:25:87:63:8e:af:7e:06:75:ce:6d:70:1d:8e:85:1c:
f0:7d:14:cf:bd:2e:34:a8:04:d2:9d:0b:7e:da:15:fa:13:30:
8e:19:90:6c:6c:df:79:94:c0:a1:b7:17:81:ae:84:c2:21:b6:
21:fb:f6:e7:35:8e:82:65:1b:43:bd:ab:86:81:d6:d9:74:e6:
b1:72:d0:3c:0b:da:68:03:81:d2:54:fd:8d:d4:c4:ff:d3:94:
b9:df:fa:8b:38:04:4a:43:0b:3d:1d:02:f8:f3:68:11:c1:5b:
82:c0:75:5e:4d:84:6d:36:c8:56:f6:ea:d9:d3:f7:94:c1:ff:
56:4d:5e:b9:12:11:e8:5f:01:43:0c:81:5f:b8:0d:a8:ee:8b:
44:69:5c:6f:5e:40:e0:70:50:22:07:b3:63:39:b4:ab:02:30:
c9:f7:13:b5:21:99:3c:32:41:43:4f:c8:8e:54:4b:74:f6:dd:
b7:65:a9:c7:83:bb:ae:40:41:77:ba:c4:e4:2a:76:ba:fa:7e:
d7:a3:45:54:b9:45:12:b4:c7:ab:53:31:97:23:ea:fb:d2:6c:
f3:84:11:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 20:43:43 2026 by rpki-client