Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/LtPcT5Yej_JcV5sC3xHwBzt8nqg.roa
File: LtPcT5Yej_JcV5sC3xHwBzt8nqg.roa (raw, json)
Hash identifier: AmrfGAIc19I9AnHxZPLo58CH5CHRm77A2EqqTg7w5a0=
Subject key identifier: 2E:D3:DC:4F:96:1E:8F:F2:5C:57:9B:02:DF:11:F0:07:3B:7C:9E:A8
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 01A0F434DBE71932541DC266A7A907B2AA8D
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/LtPcT5Yej_JcV5sC3xHwBzt8nqg.roa
Signing time: Wed 30 Sep 2026 21:24:59 +0000
ROA not before: Wed 30 Sep 2026 21:24:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 87.76.189.0/24 maxlen: 24
87.76.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 16:22:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f4:34:db:e7:19:32:54:1d:c2:66:a7:a9:07:b2:aa:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Sep 30 21:24:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2ed3dc4f961e8ff25c579b02df11f0073b7c9ea8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:7b:31:80:80:0a:39:d8:54:d8:0e:b5:18:89:
cc:ff:58:5f:21:69:a5:f4:1d:0d:f3:c6:dd:b5:ae:
66:d6:60:97:79:53:93:91:a7:a5:18:33:50:e5:e0:
51:5d:b9:42:41:b9:c1:20:90:0f:dc:f3:0e:e0:45:
2e:b1:ed:f5:76:10:4c:4c:b8:a2:15:71:5d:be:40:
cf:ae:48:11:39:67:14:22:ca:79:b3:b9:01:7e:de:
4e:86:aa:9d:73:ee:62:42:05:08:87:5b:3f:8d:c0:
da:46:a3:1e:9c:b7:9a:28:bd:6c:7e:b2:08:ec:70:
1e:e4:67:ce:39:ee:b6:a6:c2:1f:fd:61:8b:83:11:
08:cc:e5:78:84:61:84:f8:8a:a7:c8:8c:92:f0:59:
ac:5b:51:2b:b3:7a:cc:e2:3c:55:b2:cd:58:1a:49:
fa:38:e2:22:f3:82:f8:9c:be:7e:13:e7:78:b0:e7:
60:da:fb:53:15:c9:ba:fe:47:95:e2:95:0c:ed:83:
b5:b9:8e:38:2c:11:9a:ba:2d:3c:1e:4c:ec:56:aa:
c8:40:fc:14:39:f7:1f:9d:df:19:e8:de:93:c4:41:
85:34:70:ac:50:61:32:14:e4:ef:28:ab:40:a2:04:
75:13:d5:4c:1d:a4:25:c3:77:ba:6f:6d:e2:10:cd:
a0:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:D3:DC:4F:96:1E:8F:F2:5C:57:9B:02:DF:11:F0:07:3B:7C:9E:A8
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/LtPcT5Yej_JcV5sC3xHwBzt8nqg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.189.0/24
87.76.206.0/24
Signature Algorithm: sha256WithRSAEncryption
97:38:c9:df:ec:ef:e3:16:0a:e0:e1:91:39:43:76:ea:04:de:
1a:c9:e2:11:47:9d:29:eb:82:a3:a9:6e:3e:51:e7:46:04:48:
dc:d0:97:19:34:b4:33:c8:7f:83:79:88:45:5f:d4:5b:31:e2:
f5:bd:3e:15:bb:18:80:d0:39:0f:9e:94:d5:eb:51:22:02:60:
e7:64:90:bf:2b:c5:36:1f:a6:bf:b2:a1:97:13:00:d8:ac:fd:
50:78:27:7e:65:f5:36:a8:c7:76:cc:ff:22:1c:91:4b:60:ab:
70:f5:bf:12:57:71:6e:fc:6c:75:80:8c:ec:f6:d0:95:28:b1:
91:3d:23:91:b5:52:63:4f:59:3b:a8:7f:a4:8f:a6:bd:92:cd:
6d:f9:3f:dc:b4:c1:18:cb:b2:91:b3:55:34:05:82:48:ac:d5:
31:b1:d7:f1:ff:bc:6b:16:a1:09:32:a0:f7:e3:6d:b5:86:d1:
3a:a7:ae:89:a3:62:c7:de:7b:6d:e6:ba:2a:52:63:de:a0:b9:
66:0f:f1:5f:be:5c:b1:f6:e0:b4:86:6c:fd:00:48:ca:36:0a:
b9:17:21:d4:e4:55:8d:72:46:da:96:9a:76:16:23:cc:d4:99:
e9:dc:a4:0c:0a:4e:36:01:41:31:88:c2:b1:a2:f6:09:56:61:
f1:aa:8a:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 08:32:55 2026 by rpki-client