Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/KvZGzSRAbi9tv4QUYuZe70cfWoE.roa
File: KvZGzSRAbi9tv4QUYuZe70cfWoE.roa (raw, json)
Hash identifier: 8jsYIsUqA0SpCzgjM/9wCzQcv/fc4sefpkP0/CFsFVg=
Subject key identifier: 2A:F6:46:CD:24:40:6E:2F:6D:BF:84:14:62:E6:5E:EF:47:1F:5A:81
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 01A125FF8591C115817023724A49F0C9F129
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/KvZGzSRAbi9tv4QUYuZe70cfWoE.roa
Signing time: Sat 10 Oct 2026 13:27:45 +0000
ROA not before: Sat 10 Oct 2026 13:27:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 87.76.137.0/24 maxlen: 24
87.76.140.0/24 maxlen: 24
87.76.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:25:ff:85:91:c1:15:81:70:23:72:4a:49:f0:c9:f1:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Oct 10 13:27:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2af646cd24406e2f6dbf841462e65eef471f5a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:01:fb:7f:af:f2:43:06:f8:a7:68:d5:aa:92:
0b:25:26:68:de:9d:1e:b4:6b:16:e7:e6:ba:bc:b2:
60:fb:52:83:ea:8f:f4:77:b1:ca:83:ee:5b:7e:08:
60:69:ec:62:53:39:af:ea:ff:4b:dc:18:5f:91:64:
ee:0c:66:90:95:d4:14:a2:5a:27:f6:8c:72:fe:73:
71:2b:a0:0d:6b:09:25:4c:63:1a:04:65:70:1f:d4:
fe:f0:8a:3c:c8:90:46:1e:aa:98:0c:57:7e:91:db:
6c:02:0e:54:6f:04:73:32:ad:d6:18:f6:f1:30:ab:
8f:51:38:d8:83:42:4d:9d:fa:6d:85:9b:19:8c:03:
57:e5:b5:9c:90:76:21:af:3c:fd:8d:9a:ba:d7:85:
94:f6:fa:cd:32:52:e7:41:b1:05:ef:2e:37:75:54:
3c:a6:0b:54:c4:20:3a:b0:c7:f1:ac:21:18:1d:ce:
2e:26:c3:e1:e1:87:3b:38:b0:03:ab:14:58:e5:cb:
cd:2d:95:2b:83:70:bf:9e:45:d2:db:5a:74:49:49:
d8:fe:3d:bd:d9:3c:37:c8:ce:ec:7b:36:22:3e:56:
72:ba:cd:f6:ae:40:72:66:e7:36:13:09:29:0c:c3:
6d:10:86:8e:d0:a6:f7:f8:65:ab:a7:be:09:b3:a4:
83:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:F6:46:CD:24:40:6E:2F:6D:BF:84:14:62:E6:5E:EF:47:1F:5A:81
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/KvZGzSRAbi9tv4QUYuZe70cfWoE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.137.0/24
87.76.140.0/24
87.76.189.0/24
Signature Algorithm: sha256WithRSAEncryption
35:0b:c2:fb:0e:7a:e1:a2:0a:ba:13:76:7e:f7:15:b3:76:9c:
09:e4:ac:6f:ac:41:ff:f1:d4:82:1a:80:d0:c4:de:0f:0a:3f:
39:27:bc:04:b7:3f:f6:0c:47:88:c5:87:fa:ae:93:65:ba:73:
84:2c:ca:a1:2d:93:88:13:3c:41:32:b4:38:47:0c:71:72:79:
36:1f:cb:0b:67:87:ef:f7:76:16:52:da:b0:55:f4:e4:cf:a4:
0c:52:0d:9a:b6:93:c3:58:dd:5f:21:e2:71:19:49:46:28:85:
8f:ad:c1:f8:18:c9:12:5b:25:83:e4:39:f2:ee:f6:95:62:a8:
48:e3:76:53:c1:8f:f7:36:d7:f8:88:e9:35:7c:72:d4:e2:49:
55:ca:ba:f0:b1:a2:04:c6:8a:e0:97:9a:2b:c8:72:5f:d4:1b:
a4:5f:02:96:4c:e9:06:e3:ae:2e:60:70:58:ce:74:30:f3:5e:
c1:83:f3:5c:c5:00:b7:d2:dc:ca:34:b6:e2:1d:bf:c9:42:89:
c3:64:6e:c4:67:4e:47:cc:e4:6d:38:d1:e0:8c:39:d3:41:51:
07:37:df:b1:29:4d:6b:43:a8:9a:65:b2:8b:bb:f9:6f:21:bd:
ba:29:3d:c9:a6:c4:6c:06:ed:e1:fe:ac:21:fa:34:58:f0:89:
df:7d:84:f3
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAaEl/4WRwRWBcCNySknwyfEpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyMWYwY2JhMTBkYWEzMDJlM2IxNjdjZWU1Mzk1Zjc0MmY1
MzBiMDkwHhcNMjYxMDEwMTMyNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYWY2NDZjZDI0NDA2ZTJmNmRiZjg0MTQ2MmU2NWVlZjQ3MWY1YTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQH7f6/yQwb4p2jVqpILJSZo3p0e
tGsW5+a6vLJg+1KD6o/0d7HKg+5bfghgaexiUzmv6v9L3BhfkWTuDGaQldQUolon
9oxy/nNxK6ANawklTGMaBGVwH9T+8Io8yJBGHqqYDFd+kdtsAg5UbwRzMq3WGPbx
MKuPUTjYg0JNnfpthZsZjANX5bWckHYhrzz9jZq614WU9vrNMlLnQbEF7y43dVQ8
pgtUxCA6sMfxrCEYHc4uJsPh4Yc7OLADqxRY5cvNLZUrg3C/nkXS21p0SUnY/j29
2Tw3yM7sezYiPlZyus32rkByZuc2EwkpDMNtEIaO0Kb3+GWrp74Js6SDdQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFCr2Rs0kQG4vbb+EFGLmXu9HH1qBMB8GA1UdIwQY
MBaAFFIfDLoQ2qMC47FnzuU5X3QvUwsJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWg4TXVoRGFvd0xqc1dmTzVUbGZkQzlUQ3drLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82OGNlMzYtNzRlNC00NDNiLWFlZjEt
M2JiOGIwNzVkNjlmLzEvS3ZaR3pTUkFiaTl0djRRVVl1WmU3MGNmV29FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82OGNlMzYtNzRlNC00NDNiLWFlZjEtM2JiOGIwNzVkNjlm
LzEvVWg4TXVoRGFvd0xqc1dmTzVUbGZkQzlUQ3drLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAV0yJAwQA
V0yMAwQAV0y9MA0GCSqGSIb3DQEBCwUAA4IBAQA1C8L7Dnrhogq6E3Z+9xWzdpwJ
5KxvrEH/8dSCGoDQxN4PCj85J7wEtz/2DEeIxYf6rpNlunOELMqhLZOIEzxBMrQ4
Rwxxcnk2H8sLZ4fv93YWUtqwVfTkz6QMUg2atpPDWN1fIeJxGUlGKIWPrcH4GMkS
WyWD5Dny7vaVYqhI43ZTwY/3Ntf4iOk1fHLU4klVyrrwsaIExorgl5oryHJf1Buk
XwKWTOkG464uYHBYznQw817Bg/NcxQC30tzKNLbiHb/JQonDZG7EZ05HzORtONHg
jDnTQVEHN9+xKU1rQ6iaZbKLu/lvIb26KT3JpsRsBu3h/qwh+jRY8InffYTz
-----END CERTIFICATE-----
Generated at Tue Oct 27 06:00:49 2026 by rpki-client