Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Hk0g3LsqsrNQWyrUGsQ_RLROTM4.roa
File: Hk0g3LsqsrNQWyrUGsQ_RLROTM4.roa (raw, json)
Hash identifier: QAQ/dNkrPbT3kp+EszwleL2oIHTyrbT2uvMqFFqHU1U=
Subject key identifier: 1E:4D:20:DC:BB:2A:B2:B3:50:5B:2A:D4:1A:C4:3F:44:B4:4E:4C:CE
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 01A0CD8FC92B6C4D33A3C798C0FD48907AC2
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Hk0g3LsqsrNQWyrUGsQ_RLROTM4.roa
Signing time: Wed 23 Sep 2026 09:19:07 +0000
ROA not before: Wed 23 Sep 2026 09:19:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20473
IP address blocks: 87.76.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:8f:c9:2b:6c:4d:33:a3:c7:98:c0:fd:48:90:7a:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Sep 23 09:19:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1e4d20dcbb2ab2b3505b2ad41ac43f44b44e4cce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a9:f8:ab:9a:c4:c3:19:4e:e4:dc:8e:4e:24:
38:c2:e1:ff:ac:0a:5b:93:51:ca:fc:15:b6:f1:ce:
0b:c8:79:32:4d:39:64:b1:6e:9f:97:d5:51:a2:f1:
a1:ef:84:ba:fd:f8:a7:d2:dc:ef:71:8d:32:f4:d8:
29:e0:31:d8:1f:89:5e:3b:17:49:9c:c9:fa:9b:fb:
e3:ea:d2:52:bc:23:16:e2:ed:f9:71:32:5d:60:ca:
a6:0f:82:91:4d:3e:36:77:a0:92:39:8c:1a:eb:d7:
91:89:dd:17:fe:b4:a7:9a:df:19:91:b7:93:d6:8a:
a9:82:68:f8:f1:f9:4d:0d:c4:c7:99:2a:1a:69:b6:
9e:cc:43:35:03:7d:e0:ca:4d:df:08:00:11:0d:1a:
ec:26:da:ab:bf:4e:12:da:ab:2d:10:82:1b:51:b9:
a5:2a:1f:0f:15:6d:2c:d8:0a:07:00:6e:9b:b0:44:
44:3c:54:3f:80:00:d1:c4:78:0d:06:ba:11:01:e9:
9e:ae:a0:4c:1e:12:b3:79:ff:f1:32:1c:d9:c4:68:
7a:f0:86:e0:de:8c:08:b0:97:ea:71:37:91:63:95:
96:a8:39:e7:be:c9:d1:fe:2b:54:5a:cc:b5:3a:1a:
89:54:1e:71:56:d7:f3:60:c2:ed:cd:4b:f5:80:10:
8c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:4D:20:DC:BB:2A:B2:B3:50:5B:2A:D4:1A:C4:3F:44:B4:4E:4C:CE
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Hk0g3LsqsrNQWyrUGsQ_RLROTM4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.196.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:d8:41:84:e0:93:1b:99:52:f6:82:7d:7c:5a:62:6b:4c:36:
9c:50:f4:ae:55:a5:40:15:0c:5c:40:b2:48:4f:83:58:84:8b:
c2:58:b8:48:39:d5:0c:79:dc:c8:2b:d4:0b:26:00:c8:fe:6e:
33:33:2c:64:6c:26:b0:de:58:19:65:fc:74:e7:d0:c1:d7:8c:
cf:e8:5a:86:9b:b9:52:c9:9c:e2:90:50:e2:d8:7d:e9:68:c8:
f0:53:23:86:b1:8c:c4:1e:01:e9:41:63:8e:81:6c:d8:35:27:
bb:c1:1c:1a:7a:93:8a:c9:23:82:85:97:e1:b0:61:76:89:7e:
fe:66:e2:18:a5:fa:fc:fb:1a:3d:c3:14:7e:4f:06:56:cd:f2:
e7:36:0c:2d:41:89:ec:d8:4f:11:48:88:c8:07:c1:1d:ee:7b:
0b:2f:2c:06:83:db:bd:a1:3b:64:b5:a5:b9:df:97:55:7d:aa:
6b:a4:b4:7c:36:60:e4:6a:70:28:c0:c0:d3:08:95:4b:13:52:
ae:41:36:4f:8b:03:31:cd:07:1d:ad:16:65:99:5d:a4:82:7e:
99:b5:07:ae:ee:f2:3c:35:91:03:80:09:95:4a:3f:19:7f:ff:
ab:6e:2b:63:8d:bc:df:22:ad:36:9e:5a:4a:a7:11:64:ce:97:
16:81:f7:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 00:56:02 2026 by rpki-client