Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/O2fWrqgI5m_Uf2pF9mQCYNWLAZ8.roa
File: O2fWrqgI5m_Uf2pF9mQCYNWLAZ8.roa (raw, json)
Hash identifier: J3OGfC9Ku3T8EMK8mfv/4qmyD0ZZS/HJlUtVZTkIFKA=
Subject key identifier: 3B:67:D6:AE:A8:08:E6:6F:D4:7F:6A:45:F6:64:02:60:D5:8B:01:9F
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 01A106CD7712A6D622C3AD168A0F4E7B86E9
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/O2fWrqgI5m_Uf2pF9mQCYNWLAZ8.roa
Signing time: Sun 04 Oct 2026 12:04:50 +0000
ROA not before: Sun 04 Oct 2026 12:04:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47172
IP address blocks: 87.76.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:06:cd:77:12:a6:d6:22:c3:ad:16:8a:0f:4e:7b:86:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Oct 4 12:04:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3b67d6aea808e66fd47f6a45f6640260d58b019f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:bf:f6:98:e9:ac:42:44:5e:3d:df:db:c0:8f:
1d:91:2e:8c:1a:2e:34:f0:cc:67:79:ab:63:72:d7:
f6:c7:95:81:81:bf:36:52:17:08:e7:12:70:c3:63:
ac:b1:51:43:cf:eb:97:57:fe:17:1a:97:16:60:c9:
aa:d2:82:19:57:84:13:49:ea:34:b4:85:2e:a2:92:
73:39:b3:a1:b7:5e:90:af:4e:52:bf:08:3c:ce:a8:
54:e9:2b:96:17:6a:d7:eb:5e:d3:71:a5:44:98:a3:
bc:07:6f:a5:ae:42:1c:da:a8:bf:df:85:fc:2f:aa:
0d:56:0b:86:0c:82:92:6c:f0:cc:74:70:f1:66:56:
87:e5:cc:d8:0c:49:60:27:97:4c:00:7d:55:99:56:
41:e9:d6:0b:ce:58:96:47:9d:14:52:91:98:f9:37:
e7:cd:fd:0d:19:54:a4:f5:e9:fb:73:76:bd:06:54:
63:f0:9a:81:b5:fe:bf:89:1b:17:41:45:16:96:af:
f2:58:63:b5:cd:f9:e4:31:b7:b8:a9:65:6c:82:31:
49:bf:b5:22:45:ec:85:09:57:3e:6c:25:38:5a:6f:
f3:d5:d0:82:4f:e1:1a:4b:a9:54:aa:d7:87:3f:2f:
b2:d8:11:be:c3:b0:00:8b:d6:19:45:49:c3:f0:ad:
94:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:67:D6:AE:A8:08:E6:6F:D4:7F:6A:45:F6:64:02:60:D5:8B:01:9F
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/O2fWrqgI5m_Uf2pF9mQCYNWLAZ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.212.0/24
Signature Algorithm: sha256WithRSAEncryption
21:b5:8e:15:4b:3a:90:fd:64:03:66:cc:74:26:70:a4:51:ee:
41:29:69:8d:1e:0c:85:0d:9b:6c:bf:5e:51:b3:11:63:1c:72:
be:cf:8b:74:93:01:6f:aa:dc:f8:1f:99:7a:53:66:09:f4:e4:
12:41:8e:9e:f3:81:31:69:f5:94:8d:45:e3:04:61:d3:5f:df:
78:ab:5a:af:17:2e:fd:71:aa:50:91:57:5b:1a:c7:a7:ef:f2:
1b:74:18:b8:44:59:4d:eb:ff:03:ef:ae:da:27:20:2d:93:c0:
5d:42:79:81:51:93:da:ad:76:e4:8a:e6:f0:02:70:5b:77:60:
ed:45:cc:e0:fb:d8:df:25:ec:d6:6d:98:7b:65:15:f8:db:3b:
fc:62:85:7d:37:e0:8a:ba:60:28:c6:0b:95:12:ce:ad:c6:04:
65:a6:43:f3:9a:89:2f:18:b0:51:06:de:62:16:78:27:79:43:
d5:e9:27:e9:b0:1f:d5:70:ad:d8:91:67:67:10:f0:6d:1d:5f:
ac:ce:49:27:f7:81:5b:9e:f5:4b:f3:39:da:23:8e:ca:ff:53:
ef:d2:2c:77:cb:54:44:68:86:25:c2:a0:c5:9f:8b:d8:2f:53:
3d:0b:7a:46:13:af:e2:42:42:28:6d:02:1e:99:cd:df:da:bc:
1a:1a:9c:d5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaEGzXcSptYiw60Wig9Oe4bpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyMWYwY2JhMTBkYWEzMDJlM2IxNjdjZWU1Mzk1Zjc0MmY1
MzBiMDkwHhcNMjYxMDA0MTIwNDUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYjY3ZDZhZWE4MDhlNjZmZDQ3ZjZhNDVmNjY0MDI2MGQ1OGIwMTlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlr/2mOmsQkRePd/bwI8dkS6MGi40
8Mxneatjctf2x5WBgb82UhcI5xJww2OssVFDz+uXV/4XGpcWYMmq0oIZV4QTSeo0
tIUuopJzObOht16Qr05Svwg8zqhU6SuWF2rX617TcaVEmKO8B2+lrkIc2qi/34X8
L6oNVguGDIKSbPDMdHDxZlaH5czYDElgJ5dMAH1VmVZB6dYLzliWR50UUpGY+Tfn
zf0NGVSk9en7c3a9BlRj8JqBtf6/iRsXQUUWlq/yWGO1zfnkMbe4qWVsgjFJv7Ui
ReyFCVc+bCU4Wm/z1dCCT+EaS6lUqteHPy+y2BG+w7AAi9YZRUnD8K2UHwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDtn1q6oCOZv1H9qRfZkAmDViwGfMB8GA1UdIwQY
MBaAFFIfDLoQ2qMC47FnzuU5X3QvUwsJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWg4TXVoRGFvd0xqc1dmTzVUbGZkQzlUQ3drLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82OGNlMzYtNzRlNC00NDNiLWFlZjEt
M2JiOGIwNzVkNjlmLzEvTzJmV3JxZ0k1bV9VZjJwRjltUUNZTldMQVo4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82OGNlMzYtNzRlNC00NDNiLWFlZjEtM2JiOGIwNzVkNjlm
LzEvVWg4TXVoRGFvd0xqc1dmTzVUbGZkQzlUQ3drLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV0zUMA0G
CSqGSIb3DQEBCwUAA4IBAQAhtY4VSzqQ/WQDZsx0JnCkUe5BKWmNHgyFDZtsv15R
sxFjHHK+z4t0kwFvqtz4H5l6U2YJ9OQSQY6e84ExafWUjUXjBGHTX994q1qvFy79
capQkVdbGsen7/IbdBi4RFlN6/8D767aJyAtk8BdQnmBUZParXbkiubwAnBbd2Dt
Rczg+9jfJezWbZh7ZRX42zv8YoV9N+CKumAoxguVEs6txgRlpkPzmokvGLBRBt5i
FngneUPV6SfpsB/VcK3YkWdnEPBtHV+szkkn94FbnvVL8znaI47K/1Pv0ix3y1RE
aIYlwqDFn4vYL1M9C3pGE6/iQkIobQIemc3f2rwaGpzV
-----END CERTIFICATE-----
Generated at Mon Oct 26 09:46:05 2026 by rpki-client