Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Q5jmkg_cEqzvmj1hwJjGNc-vhQk.roa
File: Q5jmkg_cEqzvmj1hwJjGNc-vhQk.roa (raw, json)
Hash identifier: XKl8HnBVrLsFDl7ber0rd0K0Qk6aqpgk89i44/2CzFM=
Subject key identifier: 43:98:E6:92:0F:DC:12:AC:EF:9A:3D:61:C0:98:C6:35:CF:AF:85:09
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 019EFE82FC6725CD9B115B454D62E7963D34
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Q5jmkg_cEqzvmj1hwJjGNc-vhQk.roa
Signing time: Thu 25 Jun 2026 11:20:57 +0000
ROA not before: Thu 25 Jun 2026 11:20:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 135198
IP address blocks: 87.76.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Jun 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fe:82:fc:67:25:cd:9b:11:5b:45:4d:62:e7:96:3d:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Jun 25 11:20:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4398e6920fdc12acef9a3d61c098c635cfaf8509
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:a9:29:5f:1f:98:bf:d5:f1:c0:bb:59:8c:f1:
25:46:40:6e:cd:87:07:56:70:af:51:34:cb:86:6f:
eb:3e:23:57:e9:8c:e2:80:ec:ed:fd:a0:fa:4c:b2:
bb:1a:24:eb:0d:49:b2:df:8e:0e:e2:19:82:de:db:
ef:2c:cc:bc:3a:54:1e:92:59:5b:d0:52:e1:ad:22:
b0:b9:32:44:b3:e1:1e:69:c1:4f:36:52:68:8f:18:
41:e6:c8:f4:21:2e:79:46:8c:e7:11:a8:20:e7:5f:
79:2d:26:71:02:4c:c9:d9:c8:d3:1d:f3:c7:0c:6e:
97:bc:90:f3:45:4d:f1:9b:79:58:d4:ac:9f:0a:25:
70:ba:2d:8e:c5:82:e0:c2:3e:29:fa:7d:57:f0:de:
69:94:82:90:cf:25:45:d3:0b:f0:99:48:b1:d6:42:
af:bc:7f:d0:70:02:36:f8:c9:d1:61:65:7c:bb:27:
cf:0d:4d:c0:8b:19:6a:7e:9f:c8:a9:e0:b6:52:9b:
25:ea:b0:b1:a2:84:49:8e:28:b6:11:27:37:73:b7:
91:f5:52:1d:c9:73:fc:ee:80:a1:b9:1e:47:e2:44:
80:eb:ad:c0:71:c5:be:71:57:6f:ee:c4:3f:12:1b:
51:7b:14:5b:37:a5:11:5c:f3:d0:c1:4c:93:cb:2d:
08:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:98:E6:92:0F:DC:12:AC:EF:9A:3D:61:C0:98:C6:35:CF:AF:85:09
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Q5jmkg_cEqzvmj1hwJjGNc-vhQk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.214.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:ae:ee:c6:b8:55:ee:84:0a:e9:97:40:60:66:3b:de:0e:cd:
ff:a6:e4:29:58:f2:ff:7e:7b:68:ec:e5:26:2b:bf:55:f4:a1:
e6:a4:39:79:60:68:e4:d9:35:8c:6a:65:23:a3:df:50:69:8f:
35:13:c6:ad:cd:26:32:a3:1f:9b:68:79:4e:60:b5:52:5e:23:
85:8f:ab:f8:49:2d:fd:53:2e:0d:5c:9a:3b:cb:75:12:fc:89:
f4:e1:62:47:f1:02:b7:0b:06:86:af:22:92:ae:b4:16:26:be:
8e:86:57:b8:3e:7a:33:d9:37:b4:52:03:24:ce:67:8e:7d:77:
45:e4:e7:5e:c8:6f:c1:a4:2a:b8:71:f0:df:21:92:cf:60:2c:
f2:d4:21:61:4b:28:56:37:4e:47:cc:70:a1:a8:d5:07:f1:65:
5b:0f:d4:ce:cf:65:b3:c8:4b:95:c4:86:00:d1:f4:3d:c6:6c:
7f:3d:5c:8a:a9:0a:df:dd:f9:2d:45:95:fb:1d:c8:e9:a0:8d:
c1:ec:10:62:06:67:68:87:83:80:5a:3a:1d:e1:86:34:6d:b8:
b6:be:b6:cb:9e:6b:6b:af:f3:d0:b8:32:45:96:3b:cb:34:2e:
bb:3b:bd:f1:3d:35:d2:65:42:92:0c:d9:d8:5b:f7:d3:b7:5d:
12:24:c4:69
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ7+gvxnJc2bEVtFTWLnlj00MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyMWYwY2JhMTBkYWEzMDJlM2IxNjdjZWU1Mzk1Zjc0MmY1
MzBiMDkwHhcNMjYwNjI1MTEyMDU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0Mzk4ZTY5MjBmZGMxMmFjZWY5YTNkNjFjMDk4YzYzNWNmYWY4NTA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6qkpXx+Yv9XxwLtZjPElRkBuzYcH
VnCvUTTLhm/rPiNX6YzigOzt/aD6TLK7GiTrDUmy344O4hmC3tvvLMy8OlQekllb
0FLhrSKwuTJEs+EeacFPNlJojxhB5sj0IS55RoznEagg5195LSZxAkzJ2cjTHfPH
DG6XvJDzRU3xm3lY1KyfCiVwui2OxYLgwj4p+n1X8N5plIKQzyVF0wvwmUix1kKv
vH/QcAI2+MnRYWV8uyfPDU3Aixlqfp/IqeC2Upsl6rCxooRJjii2ESc3c7eR9VId
yXP87oChuR5H4kSA663AccW+cVdv7sQ/EhtRexRbN6URXPPQwUyTyy0ItwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEOY5pIP3BKs75o9YcCYxjXPr4UJMB8GA1UdIwQY
MBaAFFIfDLoQ2qMC47FnzuU5X3QvUwsJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWg4TXVoRGFvd0xqc1dmTzVUbGZkQzlUQ3drLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82OGNlMzYtNzRlNC00NDNiLWFlZjEt
M2JiOGIwNzVkNjlmLzEvUTVqbWtnX2NFcXp2bWoxaHdKakdOYy12aFFrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82OGNlMzYtNzRlNC00NDNiLWFlZjEtM2JiOGIwNzVkNjlm
LzEvVWg4TXVoRGFvd0xqc1dmTzVUbGZkQzlUQ3drLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV0zWMA0G
CSqGSIb3DQEBCwUAA4IBAQAfru7GuFXuhArpl0BgZjveDs3/puQpWPL/fnto7OUm
K79V9KHmpDl5YGjk2TWMamUjo99QaY81E8atzSYyox+baHlOYLVSXiOFj6v4SS39
Uy4NXJo7y3US/In04WJH8QK3CwaGryKSrrQWJr6Ohle4Pnoz2Te0UgMkzmeOfXdF
5OdeyG/BpCq4cfDfIZLPYCzy1CFhSyhWN05HzHChqNUH8WVbD9TOz2WzyEuVxIYA
0fQ9xmx/PVyKqQrf3fktRZX7HcjpoI3B7BBiBmdoh4OAWjod4YY0bbi2vrbLnmtr
r/PQuDJFljvLNC67O73xPTXSZUKSDNnYW/fTt10SJMRp
-----END CERTIFICATE-----
Generated at Sat Jun 27 20:30:33 2026 by rpki-client