Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Q9vZWpl1Z2hcmaPR4VVWeZRCL_Q.roa
File: Q9vZWpl1Z2hcmaPR4VVWeZRCL_Q.roa (raw, json)
Hash identifier: FLjPQbOuTtuJnA+RAuH5CM7vm9SLk53ENhc9GzwQM6Q=
Subject key identifier: 43:DB:D9:5A:99:75:67:68:5C:99:A3:D1:E1:55:56:79:94:42:2F:F4
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 019FACE8063BF008A090E70EB98F8BDAEC70
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Q9vZWpl1Z2hcmaPR4VVWeZRCL_Q.roa
Signing time: Wed 29 Jul 2026 08:05:14 +0000
ROA not before: Wed 29 Jul 2026 08:05:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200213
IP address blocks: 87.76.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Aug 2026 02:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:e8:06:3b:f0:08:a0:90:e7:0e:b9:8f:8b:da:ec:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Jul 29 08:05:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=43dbd95a997567685c99a3d1e155567994422ff4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e9:da:d8:b3:5b:f6:17:fc:b5:ee:b6:23:a8:
93:14:75:cd:3a:d4:76:36:56:cd:83:4d:c8:53:e3:
c5:6c:2e:65:12:41:34:f9:55:7b:64:3e:8c:2b:0a:
5d:8f:3d:84:8b:dd:2f:48:15:47:f6:05:a4:fa:98:
b6:24:59:ec:5e:99:ad:04:91:20:ee:62:85:6d:97:
9a:88:ec:97:23:18:a3:07:d4:b9:f4:73:28:89:b8:
13:19:9f:30:ca:2a:2d:3e:69:01:32:62:82:9b:a7:
39:6b:02:8f:ef:eb:fc:2b:72:f0:b2:01:1a:67:e6:
87:90:b0:30:d4:90:48:7d:36:37:6f:d1:67:2d:c5:
c0:d8:b6:2b:ff:35:9c:8f:a0:55:58:0b:0d:ec:fa:
cf:8a:03:82:80:62:3b:bf:d7:e8:32:86:d3:6d:6d:
a7:2d:dd:e5:be:da:2c:46:2c:8a:27:a0:21:4b:01:
e0:31:12:42:64:67:d8:7e:c4:2b:02:2e:c6:2c:d2:
ab:29:05:f7:dd:d9:2b:e8:68:77:73:94:a2:0a:64:
56:38:32:da:4f:6d:d9:ca:44:cb:15:f4:cd:44:47:
39:65:bc:04:9e:39:80:42:94:d7:6c:9e:b2:ca:5c:
9b:42:04:88:84:1d:18:37:20:2d:37:1e:e5:59:ab:
eb:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:DB:D9:5A:99:75:67:68:5C:99:A3:D1:E1:55:56:79:94:42:2F:F4
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Q9vZWpl1Z2hcmaPR4VVWeZRCL_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.214.0/24
Signature Algorithm: sha256WithRSAEncryption
65:c2:d7:37:9b:48:f7:2b:8d:45:e0:66:10:f4:ce:44:3c:73:
64:a3:b3:3c:4d:51:41:b2:ce:a7:fd:a9:f8:eb:bc:8e:ae:9f:
d7:c2:87:a8:be:f0:2a:2b:3c:51:0b:1b:1d:d6:9b:53:bc:eb:
b8:63:41:76:9b:98:db:ab:0a:d1:3a:29:d9:c4:b9:f7:a8:3a:
7c:ee:f4:74:b8:a2:35:5e:a9:54:0a:0b:de:d5:6a:d2:df:8f:
e1:13:8c:b2:3b:d2:ff:42:b3:40:cd:74:ca:12:bb:94:9b:27:
86:45:75:aa:0d:9e:d7:a9:54:c0:08:4a:0c:1f:f9:7a:22:a6:
78:c0:0e:35:a5:2a:ed:4f:b5:e4:0a:1e:0e:c7:a3:18:c4:0d:
21:c3:b4:24:66:fe:53:bb:55:3f:3f:ec:d0:3f:51:13:4f:6c:
49:92:62:20:05:99:05:d7:63:1b:ee:13:b2:7b:07:61:f3:ed:
72:6e:50:2d:65:68:25:e9:f6:ef:15:f3:8e:06:e4:af:07:dd:
84:c7:d7:92:10:30:1a:67:fd:79:e8:9e:61:fe:0c:05:c7:f0:
a5:b9:b2:79:ce:56:51:57:98:d9:ab:a4:5d:88:b8:c3:d8:38:
0e:fc:39:54:94:30:b2:d8:45:a4:3c:df:63:0b:c8:0a:19:d9:
16:20:b3:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 5 12:34:09 2026 by rpki-client