Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/IwT28ZzXK95XwEoXW79IHL0rlXM.roa
File: IwT28ZzXK95XwEoXW79IHL0rlXM.roa (raw, json)
Hash identifier: ILG75MAk95DLD6Kfap/StLyaz2gR5Kvzhrb2raf2dv8=
Subject key identifier: 23:04:F6:F1:9C:D7:2B:DE:57:C0:4A:17:5B:BF:48:1C:BD:2B:95:73
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 019FBA67D8C51CA011E87341D604B7C519B1
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/IwT28ZzXK95XwEoXW79IHL0rlXM.roa
Signing time: Fri 31 Jul 2026 22:59:55 +0000
ROA not before: Fri 31 Jul 2026 22:59:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200169
IP address blocks: 87.76.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 16:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ba:67:d8:c5:1c:a0:11:e8:73:41:d6:04:b7:c5:19:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Jul 31 22:59:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2304f6f19cd72bde57c04a175bbf481cbd2b9573
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f3:92:81:8e:6e:20:09:27:0c:25:7f:55:97:
85:1d:06:b6:a8:d3:83:2c:16:bb:eb:4c:85:25:a9:
a6:5f:ab:be:4e:a9:0f:7e:78:66:da:8e:43:be:b4:
12:5f:91:5c:0b:f1:4a:e1:0c:4b:47:66:b3:cc:67:
55:1e:0d:4b:e7:8a:a3:2a:ac:00:9a:6e:de:c1:85:
32:9c:4d:b2:17:b0:31:57:dd:80:1f:99:a4:f8:ab:
cf:39:a5:e4:07:09:e4:bd:a6:7e:14:9a:b9:00:ab:
99:c2:41:21:a1:ce:75:12:8e:bd:fd:41:0a:24:0a:
5d:bc:5e:03:45:1e:66:29:9f:e9:4a:fb:8d:a6:79:
4e:c7:05:2b:ae:c9:84:d7:d3:13:e6:49:a8:cd:f4:
b0:ec:c2:c4:50:0c:8d:1f:ca:18:74:3c:7e:f0:0e:
a2:c4:a2:e9:29:e5:11:3b:4c:30:5b:64:5d:fd:49:
41:e6:b7:cb:b8:05:a7:69:d5:a5:97:df:3e:6b:aa:
da:5b:c3:31:9c:47:03:9d:f6:6a:76:14:5f:d1:ca:
db:ce:4e:a1:b5:e1:b5:5b:d5:e6:a2:ae:5f:26:81:
3f:9f:23:d3:81:74:64:4f:96:ce:01:8d:f1:c6:76:
ca:c6:a5:78:d0:8b:78:8b:16:e6:c6:0c:29:d6:31:
5f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:04:F6:F1:9C:D7:2B:DE:57:C0:4A:17:5B:BF:48:1C:BD:2B:95:73
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/IwT28ZzXK95XwEoXW79IHL0rlXM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.149.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:08:bd:64:d4:f8:39:d7:6e:25:eb:34:f3:72:37:c1:b3:5c:
2b:3d:e6:cd:fc:fe:67:d4:ae:c2:d7:bc:bc:7c:44:27:47:ad:
b5:7f:e9:80:9e:c3:25:1c:4d:25:f5:25:5e:3f:6c:84:02:a5:
af:5c:f7:8c:ed:19:c7:cb:4f:4b:9d:c1:e3:41:21:65:4c:4b:
86:ca:a3:d7:65:dd:6d:66:ba:fd:06:d8:ed:fe:d3:9b:2e:57:
94:55:76:dd:07:78:95:85:ea:16:f8:77:2e:75:a6:f3:3b:7e:
f4:70:af:0d:ea:a8:26:9e:6f:60:59:84:48:2c:1a:51:12:e3:
84:d9:e7:c7:b8:76:4d:c9:58:67:fd:c0:8a:87:b9:91:08:71:
8f:7b:ed:98:88:97:86:f6:2a:dc:97:b3:06:9e:aa:01:9b:44:
48:2b:fb:f8:f1:b5:94:25:d0:a3:ab:a5:39:05:73:fa:c9:19:
6f:11:69:10:75:69:eb:ec:22:83:05:9e:5e:cd:67:54:b8:cc:
fc:54:77:51:78:b5:52:1d:20:1b:69:b2:24:02:ac:c5:dd:c8:
ec:f8:a8:d3:c7:e4:8b:b1:b6:a6:69:c7:2b:18:94:6a:9a:2f:
25:a7:d0:08:99:79:09:dd:54:16:6d:90:a5:c7:db:ce:ac:c3:
a4:c7:dc:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 21:25:32 2026 by rpki-client