Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/S6llfF1c5P5V4AIR1RoidxHG1mo.roa
File: S6llfF1c5P5V4AIR1RoidxHG1mo.roa (raw, json)
Hash identifier: 3dNW8tfmrUVB+M5Dj6vmuu8V5s5dJGMMbe054CA4rmI=
Subject key identifier: 4B:A9:65:7C:5D:5C:E4:FE:55:E0:02:11:D5:1A:22:77:11:C6:D6:6A
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 019FC302E98611CDC372E2D3AB57B2EF3A4A
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/S6llfF1c5P5V4AIR1RoidxHG1mo.roa
Signing time: Sun 02 Aug 2026 15:06:15 +0000
ROA not before: Sun 02 Aug 2026 15:06:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219231
IP address blocks: 87.76.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 16:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c3:02:e9:86:11:cd:c3:72:e2:d3:ab:57:b2:ef:3a:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Aug 2 15:06:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4ba9657c5d5ce4fe55e00211d51a227711c6d66a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:31:d2:12:45:10:cd:1e:d6:ba:b2:98:6a:53:
71:91:bd:10:e2:0f:90:84:cb:18:b0:fb:b7:99:06:
9d:b8:71:9b:a0:06:da:16:0d:81:67:8b:af:34:09:
6e:09:cd:41:76:04:77:10:a3:ed:32:33:ed:cc:af:
3c:08:8d:39:8b:ed:32:6d:34:14:f3:01:42:3b:12:
52:a5:f0:2b:80:ab:22:f2:46:be:c7:d9:5c:99:b4:
e9:35:f8:0c:ab:bc:35:18:aa:d6:f6:ca:05:eb:6d:
1e:01:be:df:37:e7:07:40:34:c0:26:11:49:29:ca:
7f:25:dd:5a:ff:e0:1d:29:27:cc:6a:30:0f:c8:15:
19:d5:1b:73:7e:f7:0a:15:9e:2b:fc:fd:71:20:26:
cf:35:95:89:a1:5d:36:d3:b8:a8:d0:fc:fb:56:da:
56:c8:bc:56:55:2b:ce:96:c8:01:f9:99:49:7f:78:
02:85:39:dd:88:09:8c:33:09:6c:e2:ce:e3:14:c3:
59:fb:03:5f:04:2f:da:29:a0:17:7c:19:ce:82:15:
61:24:d2:53:2c:45:e7:09:7a:b0:3e:19:b8:66:3c:
f1:ed:00:37:d9:4a:41:d0:a4:95:55:89:0f:d8:eb:
94:9b:65:c4:c0:66:90:c7:84:b1:fe:09:b6:ce:e2:
94:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:A9:65:7C:5D:5C:E4:FE:55:E0:02:11:D5:1A:22:77:11:C6:D6:6A
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/S6llfF1c5P5V4AIR1RoidxHG1mo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.143.0/24
Signature Algorithm: sha256WithRSAEncryption
68:72:a1:11:a8:63:28:15:f6:fa:9b:a3:3b:3e:41:31:da:b4:
47:31:9a:9c:0d:c1:33:b5:d2:d9:4b:50:12:29:4a:07:e9:9b:
62:ce:a9:98:2c:4a:29:32:82:5e:c3:96:fb:d5:b3:5f:64:f0:
e9:47:f2:72:88:63:b9:1c:bf:99:a3:d4:1f:71:45:7d:8d:ac:
23:30:8d:e9:cc:6b:6d:37:96:3b:7b:72:b9:7e:f5:32:d5:1b:
23:0e:96:7b:e5:ab:99:98:c7:7f:7d:e8:8d:9f:19:05:16:f5:
01:88:ca:74:36:14:0d:b0:96:f1:29:e9:1e:6f:61:8c:64:82:
9e:51:8a:69:ef:6c:79:3f:3e:80:84:9f:a6:73:da:35:d2:03:
30:c9:bf:3f:9d:95:81:09:4c:77:98:f8:00:21:7e:41:ca:57:
5a:8f:5b:fe:a3:ff:40:ba:f3:23:2a:80:fb:34:a3:c4:1b:9d:
f0:67:7f:f7:bd:8d:9a:1b:4d:4e:f1:39:b9:39:fb:76:6f:cf:
9d:45:13:d5:a4:47:89:aa:b9:dd:2a:1d:3d:5b:d7:6a:29:6c:
42:ed:08:ea:cf:12:5e:41:63:a2:7a:24:bc:24:95:d2:2c:1c:
50:e8:2c:ce:94:62:5a:ec:e6:df:d0:92:70:71:f6:f7:7a:46:
13:2b:d5:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 21:25:15 2026 by rpki-client