Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/HUk3Stjsqjp0nm716nchY8HsCLo.roa
File: HUk3Stjsqjp0nm716nchY8HsCLo.roa (raw, json)
Hash identifier: TRPKku4ygFco9sE3L1HiBuI5z042lMVtepv220wF+1c=
Subject key identifier: 1D:49:37:4A:D8:EC:AA:3A:74:9E:6E:F5:EA:77:21:63:C1:EC:08:BA
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 01A07B7CF117D67E7D29F6A8A536D1DF66C2
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/HUk3Stjsqjp0nm716nchY8HsCLo.roa
Signing time: Mon 07 Sep 2026 10:49:40 +0000
ROA not before: Mon 07 Sep 2026 10:49:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211859
IP address blocks: 87.76.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7b:7c:f1:17:d6:7e:7d:29:f6:a8:a5:36:d1:df:66:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Sep 7 10:49:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1d49374ad8ecaa3a749e6ef5ea772163c1ec08ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b2:7a:8d:1a:67:b5:43:c7:2a:df:ec:97:a1:
18:4e:a4:1b:c0:a7:e3:96:4a:a4:9c:fb:8b:80:01:
1f:42:7a:c8:91:e2:df:ee:12:f1:81:de:76:c4:23:
a0:d2:eb:f7:67:35:9a:b5:0a:b7:fb:ff:b7:14:59:
41:6c:ad:22:bb:39:0b:cb:dd:19:25:3c:ba:ba:a4:
97:61:09:71:e2:9e:1d:79:e4:5e:b2:c7:21:cf:3d:
31:a8:b7:dd:6c:73:92:04:19:ce:2e:02:17:90:1a:
d3:ff:61:a8:2c:99:76:63:25:cf:64:f7:12:9e:83:
57:40:93:56:27:51:46:75:0c:87:0f:b2:06:79:8d:
bb:3e:40:7d:81:d1:9a:28:88:6a:f7:81:cb:18:2a:
45:34:f2:41:56:0d:98:69:f6:cf:fb:9f:ed:b8:d5:
ab:19:ae:d4:7b:5b:5c:94:40:2f:05:8f:83:e2:54:
dd:fc:7b:19:38:35:76:fa:6e:80:f7:f1:04:86:a8:
ae:6a:57:ab:34:d5:7f:c9:57:f1:57:5a:8f:69:52:
47:47:40:31:cf:83:75:c7:1f:9b:36:0f:ab:8b:42:
a0:ac:65:50:10:33:cf:34:58:f4:84:63:e2:08:61:
6e:aa:6a:d6:27:07:08:9b:65:ab:f2:e6:c3:00:43:
ab:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:49:37:4A:D8:EC:AA:3A:74:9E:6E:F5:EA:77:21:63:C1:EC:08:BA
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/HUk3Stjsqjp0nm716nchY8HsCLo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.195.0/24
Signature Algorithm: sha256WithRSAEncryption
27:e9:9e:d2:67:96:52:29:7b:4a:9a:84:64:8b:a2:a9:b2:15:
f2:f7:a7:6a:c7:f9:b8:db:c1:a0:4f:2f:fd:86:5b:a6:d6:21:
9c:a5:5d:0f:7a:f0:49:09:cd:05:00:ae:7d:f4:24:52:d7:3b:
04:f5:50:a5:66:9b:2f:01:db:4a:0d:c9:84:45:76:64:44:9f:
6b:b9:dc:c4:a3:dc:c6:4d:9f:65:62:87:70:f1:16:b3:bc:29:
78:f0:87:28:4d:3f:37:c4:c6:45:12:9c:b9:4b:ef:5e:8a:d1:
c0:b4:1f:04:99:79:83:08:c9:fe:14:64:e7:b2:8c:11:e0:e4:
ac:35:86:e9:6e:10:cc:fc:89:78:f7:6f:dd:91:79:6c:3a:11:
96:71:4f:5d:62:9a:21:43:a9:46:c3:fe:71:1b:ea:2c:58:3b:
b5:fc:63:fe:e4:47:7b:0f:8c:ec:3d:b6:31:b2:ab:42:3d:38:
2e:65:df:31:93:c5:8b:6b:dd:8a:99:b0:13:2f:fb:3a:ba:34:
05:9a:26:5f:75:17:66:25:ee:8d:9e:ee:6d:56:b8:76:63:9b:
c5:9a:e8:da:57:fd:0b:26:46:41:f2:4a:c0:16:b1:87:ef:d2:
d4:03:23:ca:a7:51:07:a0:ec:0b:a0:4f:97:c3:6c:75:ed:df:
8c:0f:bb:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 08:21:59 2026 by rpki-client