Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/RtivmGBiyxos3DdvFwddnuoBRd8.roa
File: RtivmGBiyxos3DdvFwddnuoBRd8.roa (raw, json)
Hash identifier: U60kHDF9jEQUuw/30XoKf4tLZd2j7tJd7L+WJ1YWBes=
Subject key identifier: 46:D8:AF:98:60:62:CB:1A:2C:DC:37:6F:17:07:5D:9E:EA:01:45:DF
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 019E0E5B2E2F6FF8585DE61BB1F0650E23D2
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/RtivmGBiyxos3DdvFwddnuoBRd8.roa
Signing time: Sat 09 May 2026 20:08:37 +0000
ROA not before: Sat 09 May 2026 20:08:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 265919
IP address blocks: 87.76.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:0e:5b:2e:2f:6f:f8:58:5d:e6:1b:b1:f0:65:0e:23:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: May 9 20:08:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=46d8af986062cb1a2cdc376f17075d9eea0145df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:27:d2:64:ae:07:3a:ae:f6:36:ca:32:86:69:
e5:fc:80:20:a4:9e:44:2b:a7:14:de:dd:63:27:8d:
f5:2a:45:0e:1d:14:d0:3f:b8:22:da:c0:14:52:79:
fa:fa:32:a7:16:14:c2:f3:f1:27:21:3d:0e:c6:4f:
69:cb:43:67:ed:d8:a1:1a:7e:4c:80:a5:c5:14:01:
d0:77:d5:48:41:76:d8:7f:21:f8:56:54:8e:17:b9:
ad:1a:80:e8:c9:5d:08:0d:e2:a7:00:8e:26:6e:91:
f8:5e:14:25:47:c1:c3:37:b5:d2:b9:d4:4d:e8:87:
70:c7:f0:45:65:33:bb:ab:d7:dc:20:c7:5d:07:b8:
41:3a:8c:15:0d:91:6c:c8:5c:9f:95:e7:54:f0:d3:
b2:19:45:21:cf:90:c3:c4:e8:75:61:6a:81:42:18:
76:df:c6:f1:96:a0:61:48:3a:5c:0a:61:9c:7b:fa:
13:28:75:b9:61:88:2e:60:c2:b5:a8:bf:3f:2b:c2:
47:af:57:f4:23:b7:a4:0e:4b:3c:9f:63:98:0b:7a:
5b:79:c0:94:7f:8c:d3:65:5d:2c:e9:cb:8a:09:f5:
e5:c8:19:07:8d:81:be:9e:85:a9:29:cf:2e:58:9d:
0f:d6:69:f1:98:6e:40:70:9a:7e:8f:e7:02:ad:c2:
03:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:D8:AF:98:60:62:CB:1A:2C:DC:37:6F:17:07:5D:9E:EA:01:45:DF
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/RtivmGBiyxos3DdvFwddnuoBRd8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.215.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:00:59:43:22:22:7c:95:cb:3d:80:9d:4c:af:fa:85:29:d8:
4c:71:f2:90:5f:20:98:d6:cb:a9:47:16:71:80:7d:76:78:5f:
69:22:17:33:fc:c3:16:83:1a:64:6c:9e:1d:7c:a7:5e:d5:03:
61:8f:3b:63:17:2b:24:0c:f5:37:c1:38:e4:9a:d1:20:05:c4:
2c:da:aa:9d:0e:de:ab:71:88:71:42:e0:0a:90:e6:f5:5b:78:
7c:24:d7:18:b6:d6:30:b9:ba:32:35:fa:97:89:7a:ab:55:06:
1a:56:7e:57:b5:6b:d5:45:94:41:ab:33:42:a4:47:63:1d:59:
45:c0:da:45:6d:4d:24:ea:a8:e2:32:90:93:4b:1c:7b:b9:a9:
01:f4:9a:e3:ce:59:2f:42:b4:90:a1:92:ed:7d:53:fe:00:9a:
eb:d6:d6:90:c8:5e:fa:17:7b:18:f2:67:2e:c7:7d:ee:63:d0:
1f:2a:ee:10:b1:02:25:63:3d:02:7f:29:69:5f:26:24:15:cd:
9f:8b:cf:a9:22:8b:ed:41:49:c1:39:68:49:f9:5f:44:b0:e9:
ee:e7:4c:4b:b0:4d:73:6e:c3:ef:bb:62:76:07:fb:f5:2e:9b:
c9:9a:1f:5c:2b:9e:0c:58:21:fc:38:fd:e7:d4:a5:1a:7e:65:
4f:de:b7:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:47:42 2026 by rpki-client