Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/MT_TlZcEZk3Hxyi0oT3NKY2HuZU.roa
File: MT_TlZcEZk3Hxyi0oT3NKY2HuZU.roa (raw, json)
Hash identifier: ymNouz/wLXeOdFE4WOButqz1qmxtymcO2hrAKzvNVIs=
Subject key identifier: 31:3F:D3:95:97:04:66:4D:C7:C7:28:B4:A1:3D:CD:29:8D:87:B9:95
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 01A0F99224661EA942CC64983B0B112773AB
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/MT_TlZcEZk3Hxyi0oT3NKY2HuZU.roa
Signing time: Thu 01 Oct 2026 22:24:59 +0000
ROA not before: Thu 01 Oct 2026 22:24:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213570
IP address blocks: 87.76.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 16:22:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f9:92:24:66:1e:a9:42:cc:64:98:3b:0b:11:27:73:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Oct 1 22:24:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=313fd3959704664dc7c728b4a13dcd298d87b995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:42:87:33:46:f5:f2:a9:ab:73:d9:ee:c2:68:
e1:9b:b6:66:89:61:08:0a:71:0c:de:e4:47:8a:a7:
00:f2:c8:87:74:e7:e7:00:85:e8:ed:16:75:49:f1:
f1:6a:ca:17:6d:b4:a3:97:d0:dd:9a:a9:da:a9:0e:
af:c9:7a:01:ac:87:87:13:49:87:ff:2c:77:c0:d6:
5f:24:cd:67:81:0b:76:d5:55:d3:38:cf:ec:94:e2:
70:4d:08:0d:d3:3b:12:cf:f4:dd:cc:b0:8d:fe:98:
c8:4d:bf:8e:ba:e9:b5:58:63:1a:18:6d:11:42:e6:
33:5e:5f:86:48:16:55:d6:3e:67:cd:88:ea:c8:91:
da:de:f9:71:02:bf:9e:df:01:67:6e:94:a1:4d:b4:
49:26:f0:6b:72:ef:97:90:ef:0d:8c:2f:60:30:fc:
20:7b:4b:3c:27:48:7e:88:a3:3e:4a:4b:1f:b4:9a:
21:ed:40:26:77:14:8e:44:02:6a:9b:20:fe:fc:20:
a1:32:c1:48:76:a3:84:f9:c1:88:15:97:a4:15:6c:
9c:71:69:f9:d5:42:fa:53:c5:4f:a7:f3:c6:23:5d:
c0:38:66:87:1d:1d:4d:a3:22:a5:e0:bb:9b:8d:1d:
90:5b:e0:43:22:93:6e:93:24:5a:8a:01:31:2c:40:
df:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:3F:D3:95:97:04:66:4D:C7:C7:28:B4:A1:3D:CD:29:8D:87:B9:95
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/MT_TlZcEZk3Hxyi0oT3NKY2HuZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.136.0/24
Signature Algorithm: sha256WithRSAEncryption
23:ca:c7:13:82:e6:b6:be:b6:bd:d4:eb:1e:fe:21:a1:ef:b0:
2c:48:f9:00:70:98:06:81:47:71:4a:f8:fe:09:70:e1:26:06:
30:e2:96:0b:00:9d:be:d4:bd:5e:44:73:50:4a:d0:df:74:42:
8f:bd:99:dd:85:6e:c8:0d:5a:61:16:cf:de:e6:e1:eb:41:1f:
a6:40:4f:f2:53:8e:39:ee:86:3a:c6:6c:18:b0:bf:d3:a8:1d:
24:97:58:f8:0a:2e:0e:1b:85:80:e1:bb:8e:c3:26:8c:63:4c:
9e:45:5f:36:27:2e:3f:3c:10:b1:ef:15:88:28:9b:70:c7:79:
5f:e8:32:05:38:51:84:d1:ba:83:fd:0c:92:96:ff:29:16:a1:
9b:91:e1:56:f6:b7:b9:fd:d3:7f:b2:d6:06:b9:15:de:60:85:
2f:06:01:03:47:0b:74:7e:a5:6e:b4:6c:53:73:13:ce:75:95:
47:c9:9c:08:99:89:3c:7c:01:9f:8f:a6:f2:de:c2:7b:e1:b2:
10:d5:19:30:2e:df:10:8a:69:bb:9e:ca:62:e1:25:d0:20:72:
77:a3:1d:fe:41:60:0a:12:6c:5e:43:56:53:26:8e:68:0d:0c:
96:3b:cd:25:bd:53:ab:43:f7:59:90:4a:82:17:50:0a:3d:ff:
a8:aa:43:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 08:32:42 2026 by rpki-client