Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/JzkkTl-LlrIgnzijMLwRLugzuvI.roa
File: JzkkTl-LlrIgnzijMLwRLugzuvI.roa (raw, json)
Hash identifier: 8rj3/nOKNVb9Xo7R3SUp+r3UgNzun86EmQGYEdJXvOw=
Subject key identifier: 27:39:24:4E:5F:8B:96:B2:20:9F:38:A3:30:BC:11:2E:E8:33:BA:F2
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 019F3BD46C2A19002B302E95492457933DEA
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/JzkkTl-LlrIgnzijMLwRLugzuvI.roa
Signing time: Tue 07 Jul 2026 09:06:44 +0000
ROA not before: Tue 07 Jul 2026 09:06:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 87.76.178.0/24 maxlen: 24
87.76.189.0/24 maxlen: 24
87.76.210.0/24 maxlen: 24
87.76.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3b:d4:6c:2a:19:00:2b:30:2e:95:49:24:57:93:3d:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Jul 7 09:06:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2739244e5f8b96b2209f38a330bc112ee833baf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:41:13:6a:4b:9f:34:c6:8a:60:ec:ef:72:56:
46:aa:c3:de:0d:c6:54:a9:90:ca:2b:a6:40:b8:a5:
3e:be:e2:fc:9e:97:88:48:26:68:ec:9a:26:da:1d:
b1:a6:f5:2e:26:d8:bf:a4:43:5b:dd:f1:82:a9:68:
7a:84:bc:da:47:9f:7a:7e:ba:69:77:f3:17:fa:75:
13:81:51:50:11:51:46:91:88:bb:d7:5e:4e:04:1f:
fb:be:1a:86:c0:15:c9:a5:1b:51:40:3f:d9:4a:8a:
51:6c:ac:44:9a:75:1d:c9:43:02:3b:d2:63:ad:d8:
c4:02:47:f6:49:fb:f6:19:87:4b:24:ea:0d:9e:f5:
39:1b:3f:5a:6f:18:50:9f:03:bd:95:50:a4:22:64:
a0:a5:2a:eb:b8:f5:ef:ff:fa:e1:b0:cd:e0:48:58:
72:1f:a8:a9:8c:11:da:94:90:87:4e:9c:2a:94:63:
83:ca:2c:e6:a5:12:32:77:dc:c7:06:07:b3:78:ef:
c0:c1:fd:5f:21:78:fd:a3:e2:43:f2:c6:20:cb:2a:
92:16:d0:75:cb:4c:e3:36:a9:f9:15:37:98:20:80:
f3:30:30:40:a3:24:65:38:21:2b:43:37:e1:0d:29:
a9:e8:eb:42:34:c3:22:48:75:c0:eb:79:6b:dc:bf:
7c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:39:24:4E:5F:8B:96:B2:20:9F:38:A3:30:BC:11:2E:E8:33:BA:F2
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/JzkkTl-LlrIgnzijMLwRLugzuvI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.178.0/24
87.76.189.0/24
87.76.210.0/24
87.76.223.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:e5:29:48:d7:13:0b:a1:c2:e1:da:26:a6:ca:18:87:29:c1:
be:d6:bf:97:5a:f6:ac:dd:f8:24:b6:51:b0:b7:eb:ad:6d:e6:
7b:34:33:96:d4:d5:b0:90:ce:fa:2a:72:5e:fb:f6:3c:58:20:
9d:87:bb:8e:1a:0b:8d:57:87:93:ab:c5:fd:02:f1:f7:2a:36:
81:ee:ae:63:cd:32:96:84:55:cf:b8:24:48:09:36:58:d1:5d:
68:cd:43:21:47:08:98:a4:ea:8f:4f:d0:88:3c:a0:0f:c5:09:
82:90:a0:05:b7:86:61:4e:78:23:e2:9b:0c:ee:65:0f:d5:5f:
8f:b2:ee:64:cb:97:23:46:4a:84:68:0b:a3:38:04:e7:d7:9e:
ee:93:c0:ca:c1:bc:5d:98:f1:d8:45:56:f7:61:c3:c0:49:56:
b0:b9:23:ef:5d:b8:9f:b5:0c:43:d8:f0:85:e3:c7:8f:19:f1:
fd:26:d6:f3:82:8e:84:de:17:d8:93:c5:d8:d1:e0:50:c3:99:
e9:15:1c:7e:5a:49:e4:22:35:49:65:2f:48:ef:ce:08:d5:b6:
86:7b:c7:eb:09:c0:b9:3d:17:bd:68:ad:a1:e4:9e:42:55:d5:
5c:ab:01:d9:c8:08:12:b8:35:5d:0a:03:73:6f:f0:0d:6f:ee:
5c:3f:97:05
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZ871GwqGQArMC6VSSRXkz3qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyMWYwY2JhMTBkYWEzMDJlM2IxNjdjZWU1Mzk1Zjc0MmY1
MzBiMDkwHhcNMjYwNzA3MDkwNjQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNzM5MjQ0ZTVmOGI5NmIyMjA5ZjM4YTMzMGJjMTEyZWU4MzNiYWYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0ETakufNMaKYOzvclZGqsPeDcZU
qZDKK6ZAuKU+vuL8npeISCZo7Jom2h2xpvUuJti/pENb3fGCqWh6hLzaR596frpp
d/MX+nUTgVFQEVFGkYi7115OBB/7vhqGwBXJpRtRQD/ZSopRbKxEmnUdyUMCO9Jj
rdjEAkf2Sfv2GYdLJOoNnvU5Gz9abxhQnwO9lVCkImSgpSrruPXv//rhsM3gSFhy
H6ipjBHalJCHTpwqlGODyizmpRIyd9zHBgezeO/Awf1fIXj9o+JD8sYgyyqSFtB1
y0zjNqn5FTeYIIDzMDBAoyRlOCErQzfhDSmp6OtCNMMiSHXA63lr3L98zwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFCc5JE5fi5ayIJ84ozC8ES7oM7ryMB8GA1UdIwQY
MBaAFFIfDLoQ2qMC47FnzuU5X3QvUwsJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWg4TXVoRGFvd0xqc1dmTzVUbGZkQzlUQ3drLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82OGNlMzYtNzRlNC00NDNiLWFlZjEt
M2JiOGIwNzVkNjlmLzEvSnpra1RsLUxscklnbnppak1Md1JMdWd6dXZJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82OGNlMzYtNzRlNC00NDNiLWFlZjEtM2JiOGIwNzVkNjlm
LzEvVWg4TXVoRGFvd0xqc1dmTzVUbGZkQzlUQ3drLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAV0yyAwQA
V0y9AwQAV0zSAwQAV0zfMA0GCSqGSIb3DQEBCwUAA4IBAQBM5SlI1xMLocLh2iam
yhiHKcG+1r+XWvas3fgktlGwt+utbeZ7NDOW1NWwkM76KnJe+/Y8WCCdh7uOGguN
V4eTq8X9AvH3KjaB7q5jzTKWhFXPuCRICTZY0V1ozUMhRwiYpOqPT9CIPKAPxQmC
kKAFt4ZhTngj4psM7mUP1V+Psu5ky5cjRkqEaAujOATn157uk8DKwbxdmPHYRVb3
YcPASVawuSPvXbiftQxD2PCF48ePGfH9Jtbzgo6E3hfYk8XY0eBQw5npFRx+Wknk
IjVJZS9I784I1baGe8frCcC5PRe9aK2h5J5CVdVcqwHZyAgSuDVdCgNzb/ANb+5c
P5cF
-----END CERTIFICATE-----
Generated at Sat Jul 18 01:45:50 2026 by rpki-client