Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/P_aUKmndhwa4wETdv5SPtxqSowQ.roa
File: P_aUKmndhwa4wETdv5SPtxqSowQ.roa (raw, json)
Hash identifier: Prjc6elUhACuHjZPrF+5MYtJfYDsgxsdgor2uGacLQw=
Subject key identifier: 3F:F6:94:2A:69:DD:87:06:B8:C0:44:DD:BF:94:8F:B7:1A:92:A3:04
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 01A0E83AAE95B0F32FDE39111A933CA3C99B
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/P_aUKmndhwa4wETdv5SPtxqSowQ.roa
Signing time: Mon 28 Sep 2026 13:35:54 +0000
ROA not before: Mon 28 Sep 2026 13:35:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212477
IP address blocks: 87.76.128.0/24 maxlen: 24
87.76.133.0/24 maxlen: 24
87.76.142.0/24 maxlen: 24
87.76.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 19:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:3a:ae:95:b0:f3:2f:de:39:11:1a:93:3c:a3:c9:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Sep 28 13:35:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3ff6942a69dd8706b8c044ddbf948fb71a92a304
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:fd:11:95:95:7a:6c:19:69:ed:94:3a:b1:27:
ee:f0:76:f6:00:5b:9b:49:35:b5:94:b1:b3:7c:4a:
13:1d:c0:d1:c5:e9:db:12:56:85:6a:1b:85:6c:3c:
78:89:a5:b6:00:c8:6b:45:19:60:14:1a:92:6c:c8:
e8:ed:a9:c9:5c:aa:b4:86:83:92:a8:25:ba:2d:9f:
65:1f:5e:77:0a:7f:28:0d:33:e1:82:48:f2:07:f0:
d6:58:a6:a6:b9:7d:91:d2:57:4d:a6:ee:bf:93:b7:
c7:df:85:3c:8a:38:4c:dd:b4:6e:9a:61:08:1b:9a:
d1:c0:8d:d5:a5:e4:86:e8:23:c3:6d:b7:6b:e4:55:
b0:85:a9:0b:7c:2e:64:56:c2:6f:70:be:b3:93:20:
ee:d0:14:c3:ef:54:33:63:f3:c7:b5:17:28:21:5f:
f6:69:0f:8b:82:86:02:99:3d:f3:7b:57:22:1d:ea:
1c:70:ec:63:bb:ee:50:2e:ee:38:ca:72:e4:78:8a:
48:35:a7:d7:5d:d0:42:d9:38:74:40:65:99:c1:7e:
71:65:2c:bf:f0:67:2c:4a:68:a4:2d:6b:0e:43:8d:
72:31:b3:15:9c:0d:37:25:5c:cf:a5:db:59:25:47:
78:86:d6:d0:43:53:1b:c7:0b:b3:02:9d:bd:0b:c9:
7a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:F6:94:2A:69:DD:87:06:B8:C0:44:DD:BF:94:8F:B7:1A:92:A3:04
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/P_aUKmndhwa4wETdv5SPtxqSowQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.128.0/24
87.76.133.0/24
87.76.142.0/24
87.76.157.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:50:f4:12:9e:a3:99:aa:c3:36:cd:f0:ee:7f:2b:27:07:85:
3c:be:09:0b:d1:24:c0:ed:13:1e:84:18:4e:9a:69:2f:f8:c1:
08:7c:fa:80:82:2b:78:0f:3d:18:54:3f:5d:c0:0b:8b:88:a4:
1c:4e:39:cb:e2:e2:9b:ff:4c:11:47:b0:47:b3:16:72:3f:3f:
4b:fc:ca:74:a1:fe:89:e0:94:da:9d:4c:73:8c:37:43:c2:ca:
f7:87:24:52:bb:9f:bc:b1:5f:a7:92:80:26:19:af:1e:45:82:
3f:be:34:60:3e:21:31:3e:4e:2c:7c:9d:78:57:7b:53:93:08:
22:83:4c:f1:15:09:f6:9c:d7:af:7c:d5:88:04:d9:8f:14:39:
23:b0:13:13:70:f7:6f:5c:2e:3e:c1:7c:29:a6:a8:e2:bd:31:
a2:d2:fb:cc:3e:3d:b6:7b:7b:5a:49:19:da:2e:2d:33:da:a2:
9a:1a:e4:84:cd:ab:a1:ab:00:41:86:5e:b7:56:fd:e2:3d:6a:
06:2e:57:60:fa:f0:51:e1:2c:72:ad:99:ea:a0:1b:99:8b:0e:
89:38:74:0b:2d:14:e0:19:e1:38:0a:26:be:c3:7a:fe:2a:bb:
92:5b:28:65:5f:05:ed:35:06:5f:d5:fa:4a:d6:36:c9:3c:73:
99:a7:e7:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 00:18:14 2026 by rpki-client