Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/NfyIInEdAjx2vTYLirb9-cFfEdA.roa
File: NfyIInEdAjx2vTYLirb9-cFfEdA.roa (raw, json)
Hash identifier: ntzmbYfHZDrInkae+ciysj0ieUXlJEbCfkqVuQhXntY=
Subject key identifier: 35:FC:88:22:71:1D:02:3C:76:BD:36:0B:8A:B6:FD:F9:C1:5F:11:D0
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 019E698C1024849BF96436F56C3082B11E89
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/NfyIInEdAjx2vTYLirb9-cFfEdA.roa
Signing time: Wed 27 May 2026 13:07:27 +0000
ROA not before: Wed 27 May 2026 13:07:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 87.76.159.0/24 maxlen: 24
87.76.178.0/24 maxlen: 24
87.76.189.0/24 maxlen: 24
87.76.210.0/24 maxlen: 24
87.76.212.0/24 maxlen: 24
87.76.213.0/24 maxlen: 24
87.76.214.0/24 maxlen: 24
87.76.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 15:55:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:69:8c:10:24:84:9b:f9:64:36:f5:6c:30:82:b1:1e:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: May 27 13:07:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=35fc8822711d023c76bd360b8ab6fdf9c15f11d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:3a:fc:b7:94:92:28:f2:0c:94:35:ae:1f:c6:
83:0f:e0:c7:b1:94:3d:a4:9e:6e:0f:fd:bd:e5:34:
06:50:c1:3e:d7:7e:f0:37:73:33:4f:a7:b7:69:db:
8b:92:54:1c:6c:89:86:04:c8:2a:e2:97:79:2b:ae:
83:1e:0e:a4:4a:a1:af:64:90:e7:23:e5:d5:cd:fa:
f3:5d:41:f6:e7:f6:ba:40:51:67:1a:5e:2b:4c:e1:
e1:6e:ca:03:6c:6a:f8:ed:10:eb:be:06:d3:9b:eb:
ed:7f:e8:43:c5:52:e1:6c:84:3a:23:fd:6b:31:27:
59:3c:5d:fb:c1:a3:61:39:d2:f0:db:6e:d6:58:1e:
13:4b:10:30:dd:fc:c4:27:97:d8:8c:7d:3f:aa:2e:
1e:3d:59:a8:38:20:ec:62:53:b8:07:ad:b7:e6:1b:
22:21:b2:74:05:a5:59:dd:23:1e:7e:42:c8:85:f0:
44:35:3a:33:42:b0:3a:86:ec:2e:8c:ad:02:49:e8:
70:d9:64:aa:04:6b:21:53:5e:33:31:0f:ae:0c:49:
75:e5:27:86:87:c9:d1:52:09:ec:a6:3b:07:65:51:
c1:9f:7f:8c:49:bb:6e:2e:fa:22:1e:2a:c7:5f:7e:
69:1c:25:50:a7:29:55:fd:37:39:63:f3:b3:7d:3e:
45:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:FC:88:22:71:1D:02:3C:76:BD:36:0B:8A:B6:FD:F9:C1:5F:11:D0
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/NfyIInEdAjx2vTYLirb9-cFfEdA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.159.0/24
87.76.178.0/24
87.76.189.0/24
87.76.210.0/24
87.76.212.0-87.76.214.255
87.76.223.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:97:fe:6b:9f:01:1b:d9:00:13:b3:63:ef:84:b4:9a:9c:40:
5a:1b:3f:ec:45:e9:37:13:39:f2:ba:49:fc:53:21:be:d1:23:
b9:1b:27:e5:05:3c:a1:dd:e4:46:51:b2:fa:0b:f0:f5:a4:fb:
0e:4a:fe:41:a9:c5:d3:84:4c:9b:77:a4:a0:60:ed:d6:f8:08:
8c:4d:c6:58:37:ac:06:f0:79:e7:8d:9d:b1:68:4a:22:0e:40:
04:87:54:9d:9d:c3:1e:b8:45:bd:06:fc:11:9e:ff:c9:1a:14:
6c:c5:79:77:e9:d1:38:4e:6f:2e:55:12:73:69:fc:3e:5f:bf:
bf:23:dc:14:96:f6:94:a2:a8:15:28:3d:f0:39:0f:fb:84:ec:
95:0d:1a:80:ec:65:d3:ee:49:17:77:64:a7:c4:e2:cf:56:6e:
c9:79:f5:13:65:f1:f0:86:7d:10:77:d4:08:2e:2f:d0:fa:1c:
5f:7e:d0:71:6e:15:69:b1:ef:02:65:0c:f1:8a:91:50:d9:23:
4b:bd:3b:f4:b0:05:12:33:f8:57:a7:fe:1f:8e:0f:6d:c4:0a:
45:5f:97:22:c4:0e:7d:11:92:02:d4:59:5a:0e:e8:84:92:5e:
f6:0f:6c:ae:2e:23:a1:fc:d3:2a:83:82:dd:21:46:9f:01:40:
15:d0:28:b5
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgISAZ5pjBAkhJv5ZDb1bDCCsR6JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyMWYwY2JhMTBkYWEzMDJlM2IxNjdjZWU1Mzk1Zjc0MmY1
MzBiMDkwHhcNMjYwNTI3MTMwNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNWZjODgyMjcxMWQwMjNjNzZiZDM2MGI4YWI2ZmRmOWMxNWYxMWQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Tr8t5SSKPIMlDWuH8aDD+DHsZQ9
pJ5uD/295TQGUME+137wN3MzT6e3aduLklQcbImGBMgq4pd5K66DHg6kSqGvZJDn
I+XVzfrzXUH25/a6QFFnGl4rTOHhbsoDbGr47RDrvgbTm+vtf+hDxVLhbIQ6I/1r
MSdZPF37waNhOdLw227WWB4TSxAw3fzEJ5fYjH0/qi4ePVmoOCDsYlO4B6235hsi
IbJ0BaVZ3SMefkLIhfBENTozQrA6huwujK0CSehw2WSqBGshU14zMQ+uDEl15SeG
h8nRUgnspjsHZVHBn3+MSbtuLvoiHirHX35pHCVQpylV/Tc5Y/OzfT5FHwIDAQAB
o4ICLzCCAiswHQYDVR0OBBYEFDX8iCJxHQI8dr02C4q2/fnBXxHQMB8GA1UdIwQY
MBaAFFIfDLoQ2qMC47FnzuU5X3QvUwsJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWg4TXVoRGFvd0xqc1dmTzVUbGZkQzlUQ3drLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82OGNlMzYtNzRlNC00NDNiLWFlZjEt
M2JiOGIwNzVkNjlmLzEvTmZ5SUluRWRBangydlRZTGlyYjktY0ZmRWRBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82OGNlMzYtNzRlNC00NDNiLWFlZjEtM2JiOGIwNzVkNjlm
LzEvVWg4TXVoRGFvd0xqc1dmTzVUbGZkQzlUQ3drLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsAwQAV0yfAwQA
V0yyAwQAV0y9AwQAV0zSMAwDBAJXTNQDBABXTNYDBABXTN8wDQYJKoZIhvcNAQEL
BQADggEBABuX/mufARvZABOzY++EtJqcQFobP+xF6TcTOfK6SfxTIb7RI7kbJ+UF
PKHd5EZRsvoL8PWk+w5K/kGpxdOETJt3pKBg7db4CIxNxlg3rAbweeeNnbFoSiIO
QASHVJ2dwx64Rb0G/BGe/8kaFGzFeXfp0ThOby5VEnNp/D5fv78j3BSW9pSiqBUo
PfA5D/uE7JUNGoDsZdPuSRd3ZKfE4s9Wbsl59RNl8fCGfRB31AguL9D6HF9+0HFu
FWmx7wJlDPGKkVDZI0u9O/SwBRIz+Fen/h+OD23ECkVflyLEDn0RkgLUWVoO6ISS
XvYPbK4uI6H80yqDgt0hRp8BQBXQKLU=
-----END CERTIFICATE-----
Generated at Tue Jun 2 20:50:32 2026 by rpki-client