Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/IxFRJAWoBW9wFTsy623JnfZdHO8.roa
File: IxFRJAWoBW9wFTsy623JnfZdHO8.roa (raw, json)
Hash identifier: 3vehgvb/Yv/kuJcyTe36nm69wNuY3UsGR3M1E+wpluE=
Subject key identifier: 23:11:51:24:05:A8:05:6F:70:15:3B:32:EB:6D:C9:9D:F6:5D:1C:EF
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 01A0E83AAD9283948657E4C47F383EC10782
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/IxFRJAWoBW9wFTsy623JnfZdHO8.roa
Signing time: Mon 28 Sep 2026 13:35:54 +0000
ROA not before: Mon 28 Sep 2026 13:35:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209658
IP address blocks: 87.76.128.0/24 maxlen: 24
87.76.133.0/24 maxlen: 24
87.76.142.0/24 maxlen: 24
87.76.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 00:44:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:3a:ad:92:83:94:86:57:e4:c4:7f:38:3e:c1:07:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Sep 28 13:35:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2311512405a8056f70153b32eb6dc99df65d1cef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c6:e5:53:27:4e:92:d9:db:1f:c7:c1:19:0b:
17:6a:34:d5:60:5f:af:b0:e8:c6:18:f5:57:e7:7e:
9a:9e:fd:0c:42:1d:14:b6:79:4b:7e:c5:4a:d7:6a:
75:d5:37:90:8c:28:02:dd:c2:d9:ab:9d:de:64:a5:
2c:63:51:6c:fc:ee:19:04:d2:a3:fd:c1:ff:c2:5f:
60:0d:f3:2a:e6:d7:c7:14:df:59:73:fd:0c:cb:55:
63:68:55:83:c4:0d:63:68:59:64:08:19:09:2c:28:
17:b3:12:c5:91:0c:c5:71:1d:3c:96:86:30:c0:78:
ad:cb:ab:40:d3:bb:55:4a:f8:45:a6:b2:04:e2:16:
b4:c1:fa:0f:90:7a:4e:c8:00:3f:ab:fa:1c:9e:91:
56:9e:e4:45:49:93:d5:d8:90:af:5e:56:89:e5:0b:
0c:3d:ca:a9:62:5a:6f:dd:aa:ad:b9:60:13:51:e3:
34:fd:93:d6:ff:ff:0f:1e:0a:bf:1d:24:1d:94:bc:
24:06:7f:85:57:9c:f6:41:e4:42:a1:28:9d:c7:15:
f8:8c:60:18:5e:05:70:01:02:cb:1d:27:ea:d1:13:
7b:8d:88:53:92:9b:73:2b:6c:6b:21:c1:70:5e:34:
0f:4e:a4:32:fd:c1:70:b4:61:4a:dd:ba:5a:24:58:
e4:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:11:51:24:05:A8:05:6F:70:15:3B:32:EB:6D:C9:9D:F6:5D:1C:EF
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/IxFRJAWoBW9wFTsy623JnfZdHO8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.128.0/24
87.76.133.0/24
87.76.142.0/24
87.76.157.0/24
Signature Algorithm: sha256WithRSAEncryption
05:f9:e1:45:13:db:b5:0a:06:a6:b0:3b:22:04:41:b1:52:08:
0c:4d:ff:8c:e8:60:12:f5:3e:05:8f:40:a8:b8:46:c1:bf:62:
19:e8:3c:0c:c5:39:47:ca:8c:c2:e3:fc:e0:ab:13:bc:df:35:
8b:78:ef:b6:98:9c:5e:9b:8c:70:17:de:ac:ac:46:78:4c:3d:
6f:c3:f0:ad:31:86:92:1d:ac:dd:fd:1a:61:d6:f7:5a:59:ae:
f1:94:6c:8d:ec:1e:3f:2d:15:c9:53:63:ce:77:d9:2f:73:e3:
30:30:f2:95:8c:03:b8:d7:9c:81:d0:4c:eb:a2:d1:06:7d:0a:
c9:2b:47:bd:a1:55:b9:a4:46:a4:f1:75:8e:87:0a:40:28:a8:
cd:29:19:b2:17:e8:94:fd:ee:0f:f3:d6:00:f2:1c:2e:09:68:
87:d0:90:53:cc:ca:cf:39:0e:17:db:75:8c:77:9f:80:dc:13:
e1:c9:37:d9:3a:9f:5e:8e:ae:48:96:e5:32:ed:9a:a7:cb:81:
7e:8b:3a:77:34:34:2b:d3:08:12:9b:53:e1:18:94:f3:9b:0e:
60:9f:9c:80:43:97:42:79:fa:d6:4a:57:28:f4:b7:ef:84:01:
14:13:55:83:eb:6e:9c:30:8a:0b:34:40:ec:69:89:44:74:9a:
08:5b:79:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 10:23:09 2026 by rpki-client