Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/TZEj9n_NVFAzGZ9xGA8JpTdnZ0g.roa
File: TZEj9n_NVFAzGZ9xGA8JpTdnZ0g.roa (raw, json)
Hash identifier: YwtFdUsDZolT9m3qgn+o8Lp1GIqlsFAd6lCePSXPxO4=
Subject key identifier: 4D:91:23:F6:7F:CD:54:50:33:19:9F:71:18:0F:09:A5:37:67:67:48
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 01A03076D144E8B67D96021A56064D4B5252
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/TZEj9n_NVFAzGZ9xGA8JpTdnZ0g.roa
Signing time: Sun 23 Aug 2026 21:11:28 +0000
ROA not before: Sun 23 Aug 2026 21:11:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213488
IP address blocks: 87.76.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 11:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:30:76:d1:44:e8:b6:7d:96:02:1a:56:06:4d:4b:52:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Aug 23 21:11:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4d9123f67fcd545033199f71180f09a537676748
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:cb:d0:2b:52:e6:0a:b7:cb:11:ee:1e:10:b6:
39:93:bf:07:1b:81:75:ce:5a:ba:86:ba:36:96:8a:
db:6e:04:02:49:25:1f:88:7f:60:63:66:80:18:ef:
ad:01:0b:06:d2:cc:3d:70:f6:95:65:3f:e9:ae:4a:
b2:db:c9:4b:70:f0:29:59:a6:13:1f:8b:08:ae:0d:
35:c2:d9:ea:1b:90:aa:4e:c0:7d:44:36:89:1d:e9:
83:9c:ef:55:e1:44:86:09:f1:3e:8c:46:d1:91:b6:
63:5d:77:33:f6:c6:24:6d:59:01:bb:7a:da:54:1c:
cc:fc:ad:51:4a:ac:24:7d:ec:c9:94:08:34:4e:71:
b4:45:cc:c2:2a:4d:21:4c:6f:fd:86:74:0b:30:6a:
d7:6b:b4:89:b8:4e:c6:57:c2:1b:94:65:4d:54:64:
b0:94:ed:79:3d:dd:60:c0:ae:a2:34:77:36:36:84:
0b:e0:00:48:4a:f9:ae:82:6c:92:89:7e:af:29:51:
80:3b:c6:eb:0f:b1:cb:ec:df:f7:37:14:30:b8:c6:
c6:cb:73:ee:fa:5b:4e:b2:05:c0:8a:98:28:c7:bd:
3c:1b:c2:8b:c7:68:67:d3:5e:90:f4:68:02:07:5a:
82:81:dd:ae:5f:f2:58:f1:da:c2:44:7a:0e:ae:b4:
53:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:91:23:F6:7F:CD:54:50:33:19:9F:71:18:0F:09:A5:37:67:67:48
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/TZEj9n_NVFAzGZ9xGA8JpTdnZ0g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.195.0/24
Signature Algorithm: sha256WithRSAEncryption
07:2c:5e:14:84:0c:6b:cc:39:6e:8a:ce:6a:fb:28:c4:00:04:
94:25:3d:c8:73:ac:ab:e7:16:5d:c9:35:c3:24:5d:ff:27:ac:
d0:a3:ef:ee:d9:58:31:e4:b5:c8:48:ab:0a:8b:21:47:a1:d1:
e7:e5:1e:a7:c5:ef:a8:21:26:2c:c8:08:54:85:6d:d3:9d:2d:
b2:b2:41:14:5c:86:e9:c6:18:a2:f8:8a:c1:f3:fa:77:63:c3:
e6:38:ce:7f:bf:6a:5f:e5:e7:d5:91:87:79:72:66:88:32:9f:
97:e5:ea:9f:8c:67:d6:74:65:42:21:cd:6e:f5:65:38:ea:35:
82:33:48:39:1f:c4:d2:0a:44:55:2c:7e:20:a2:e6:8a:2a:0e:
e0:58:67:9a:30:81:2b:dd:d0:89:b5:57:7f:37:f4:eb:42:31:
cc:b5:76:a7:54:73:36:51:4a:43:88:ae:a4:42:67:cd:24:f3:
f2:34:6b:55:37:3e:71:0a:40:11:3a:a2:20:1a:38:87:b8:a8:
f5:29:aa:4c:13:d6:bb:2d:81:80:cf:06:6c:08:60:9a:ed:31:
ea:13:4d:14:a1:3e:64:2d:bd:d0:18:96:ee:e2:19:dd:d7:e7:
68:c4:07:c8:c5:69:11:e3:f7:57:8e:45:f2:99:a5:21:6d:75:
ac:a4:eb:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 20:27:54 2026 by rpki-client