Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/TTinFgqgRAJED_BYHJ3tK8E1EiI.roa
File: TTinFgqgRAJED_BYHJ3tK8E1EiI.roa (raw, json)
Hash identifier: JvC8X/sasWQ7TRV0PYjonevW4YefTbVr8Fv4hSoB6NA=
Subject key identifier: 4D:38:A7:16:0A:A0:44:02:44:0F:F0:58:1C:9D:ED:2B:C1:35:12:22
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 019E207BFC1735BDD97BC7742B49ADF2EB32
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/TTinFgqgRAJED_BYHJ3tK8E1EiI.roa
Signing time: Wed 13 May 2026 08:37:36 +0000
ROA not before: Wed 13 May 2026 08:37:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199707
IP address blocks: 87.76.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 07:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:7b:fc:17:35:bd:d9:7b:c7:74:2b:49:ad:f2:eb:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: May 13 08:37:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4d38a7160aa04402440ff0581c9ded2bc1351222
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:68:2e:57:92:49:e1:71:d6:00:77:ae:8f:af:
70:51:34:0e:87:30:42:b5:a3:98:55:29:1e:80:4a:
39:36:c8:b8:d8:3b:1d:b5:eb:d5:22:b1:b5:34:e7:
ab:b1:4d:32:69:27:c0:9d:58:1f:2e:63:f2:2d:45:
8b:75:6c:b9:8a:a7:fa:cf:d5:3e:52:2d:06:d9:0a:
7f:cb:46:1b:09:e7:dc:70:19:b6:30:2d:cc:ce:b8:
88:1e:d3:e6:c5:95:f6:9e:8b:00:a4:58:02:c4:d8:
16:42:2b:e3:ac:7a:89:41:c9:c7:da:95:6f:fa:e4:
9d:7d:7b:6a:e3:8b:8c:fe:97:0e:a0:f2:1d:65:5c:
61:67:b7:4b:0b:b2:c6:16:59:14:24:01:c5:c9:c7:
22:d3:42:6f:2f:f0:f8:54:06:c3:69:f7:f2:01:20:
b6:ad:49:dc:29:de:33:d2:a7:73:55:4c:27:c4:f1:
bb:31:23:e7:f5:23:8f:f0:dc:c3:80:04:01:34:22:
17:e7:52:88:8e:39:cf:1e:0c:8a:bd:ad:7d:3d:b4:
0b:58:2f:7c:7d:9a:7f:b9:d5:49:70:64:ea:08:df:
c1:54:d9:e2:6c:36:9d:86:9f:25:cb:35:45:f3:0b:
e8:3d:5d:87:65:43:d0:89:84:61:57:0d:ea:26:72:
cb:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:38:A7:16:0A:A0:44:02:44:0F:F0:58:1C:9D:ED:2B:C1:35:12:22
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/TTinFgqgRAJED_BYHJ3tK8E1EiI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.149.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:99:d0:54:bf:d7:91:94:0a:7e:71:73:dc:76:56:ab:5c:4b:
56:86:f5:c8:36:01:7a:1e:a6:67:2b:a5:c6:d2:6c:64:a7:1f:
85:93:11:a3:5d:e7:d7:c5:b5:4b:48:5c:60:56:49:08:15:da:
0f:02:b9:27:02:91:a4:68:b5:3c:0e:10:f5:e3:24:03:97:38:
76:81:1f:97:40:5a:04:5a:77:85:33:d9:5a:98:dd:99:e8:6a:
21:fb:e8:31:20:d1:aa:8b:ec:dd:21:88:34:f8:ac:ae:25:36:
48:43:12:6b:78:35:64:98:29:44:31:e0:5a:7a:b3:d7:0d:fa:
16:4c:be:3c:af:2d:e4:03:5b:fa:04:3d:d9:b9:bd:3a:c9:c8:
3a:cb:c1:06:94:38:00:4d:13:13:5c:d7:26:a8:a6:a0:b0:69:
ab:c1:1d:32:f4:24:c4:74:3e:ef:d1:5b:7b:17:48:9e:e2:c0:
a8:23:ed:e4:1b:96:d5:a6:a7:8b:d6:b5:be:da:a6:60:af:b1:
87:64:e8:1b:a4:bc:1d:1a:d1:15:f6:60:06:24:86:74:cd:04:
11:1d:f3:33:08:eb:0d:60:3f:61:74:54:16:a1:a2:95:da:06:
a6:7f:16:2e:cd:17:a4:3c:21:1c:3c:e0:8d:9c:f0:e1:bf:a6:
c7:6e:23:9e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ4ge/wXNb3Ze8d0K0mt8usyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyMWYwY2JhMTBkYWEzMDJlM2IxNjdjZWU1Mzk1Zjc0MmY1
MzBiMDkwHhcNMjYwNTEzMDgzNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZDM4YTcxNjBhYTA0NDAyNDQwZmYwNTgxYzlkZWQyYmMxMzUxMjIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA72guV5JJ4XHWAHeuj69wUTQOhzBC
taOYVSkegEo5Nsi42DsdtevVIrG1NOersU0yaSfAnVgfLmPyLUWLdWy5iqf6z9U+
Ui0G2Qp/y0YbCefccBm2MC3MzriIHtPmxZX2nosApFgCxNgWQivjrHqJQcnH2pVv
+uSdfXtq44uM/pcOoPIdZVxhZ7dLC7LGFlkUJAHFycci00JvL/D4VAbDaffyASC2
rUncKd4z0qdzVUwnxPG7MSPn9SOP8NzDgAQBNCIX51KIjjnPHgyKva19PbQLWC98
fZp/udVJcGTqCN/BVNnibDadhp8lyzVF8wvoPV2HZUPQiYRhVw3qJnLLHwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFE04pxYKoEQCRA/wWByd7SvBNRIiMB8GA1UdIwQY
MBaAFFIfDLoQ2qMC47FnzuU5X3QvUwsJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWg4TXVoRGFvd0xqc1dmTzVUbGZkQzlUQ3drLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82OGNlMzYtNzRlNC00NDNiLWFlZjEt
M2JiOGIwNzVkNjlmLzEvVFRpbkZncWdSQUpFRF9CWUhKM3RLOEUxRWlJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82OGNlMzYtNzRlNC00NDNiLWFlZjEtM2JiOGIwNzVkNjlm
LzEvVWg4TXVoRGFvd0xqc1dmTzVUbGZkQzlUQ3drLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV0yVMA0G
CSqGSIb3DQEBCwUAA4IBAQBOmdBUv9eRlAp+cXPcdlarXEtWhvXINgF6HqZnK6XG
0mxkpx+FkxGjXefXxbVLSFxgVkkIFdoPArknApGkaLU8DhD14yQDlzh2gR+XQFoE
WneFM9lamN2Z6Goh++gxINGqi+zdIYg0+KyuJTZIQxJreDVkmClEMeBaerPXDfoW
TL48ry3kA1v6BD3Zub06ycg6y8EGlDgATRMTXNcmqKagsGmrwR0y9CTEdD7v0Vt7
F0ie4sCoI+3kG5bVpqeL1rW+2qZgr7GHZOgbpLwdGtEV9mAGJIZ0zQQRHfMzCOsN
YD9hdFQWoaKV2gamfxYuzRekPCEcPOCNnPDhv6bHbiOe
-----END CERTIFICATE-----
Generated at Thu Jun 4 15:07:26 2026 by rpki-client