Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/V5s6kQxhBYqI6xfv0wg7ZlmSj_4.roa
File: V5s6kQxhBYqI6xfv0wg7ZlmSj_4.roa (raw, json)
Hash identifier: JsouDI+nUKAwzCdid2xTVjr/DY2U1j+UG5MVdHQMTUE=
Subject key identifier: 57:9B:3A:91:0C:61:05:8A:88:EB:17:EF:D3:08:3B:66:59:92:8F:FE
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 01A14BC002B305540ED12AC8F56F5F907235
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/V5s6kQxhBYqI6xfv0wg7ZlmSj_4.roa
Signing time: Sat 17 Oct 2026 21:23:57 +0000
ROA not before: Sat 17 Oct 2026 21:23:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44547
IP address blocks: 87.76.133.0/24 maxlen: 24
87.76.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 16:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4b:c0:02:b3:05:54:0e:d1:2a:c8:f5:6f:5f:90:72:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Oct 17 21:23:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=579b3a910c61058a88eb17efd3083b6659928ffe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0f:9e:de:74:87:44:4e:0e:87:28:6c:92:01:
f6:5d:1b:54:f7:52:e9:d4:1a:b9:0d:6e:95:e2:ea:
b6:27:cd:65:a4:ce:89:d9:99:cb:14:cf:e3:24:2e:
8f:9e:f6:76:20:a5:80:e0:9f:ef:79:e8:2e:16:f6:
1b:82:d1:c6:12:35:e8:83:15:64:67:10:9f:3a:92:
6d:bd:bb:9c:17:2b:38:d7:c7:7c:7f:b8:e3:bd:cc:
77:f2:99:f0:0c:50:01:85:fa:eb:51:b6:9d:51:1f:
2f:c0:da:f5:cb:81:e6:ee:4d:96:ed:bb:42:35:de:
a9:6d:c7:e7:98:cb:d2:89:35:3c:ab:a9:b1:e5:e7:
5f:9b:b0:22:db:9f:57:a9:b3:ad:8c:c9:cb:e0:ad:
0b:64:68:5f:19:a4:69:02:3e:44:7d:7e:42:b4:cf:
80:4b:0a:fa:cc:20:66:a4:43:f7:bf:0f:51:b5:9b:
cb:21:80:12:30:93:96:63:c4:e4:05:02:fa:b5:c5:
3d:88:cd:ba:aa:88:fd:9a:73:4f:ab:4d:63:07:0e:
11:a4:40:64:27:82:46:b0:8e:60:7b:6a:e1:5e:c1:
07:94:3b:4f:fc:ba:5f:d8:39:ae:f9:27:ad:f1:02:
ac:56:45:b5:f8:25:89:8d:e3:28:da:ef:65:9d:cb:
5d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:9B:3A:91:0C:61:05:8A:88:EB:17:EF:D3:08:3B:66:59:92:8F:FE
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/V5s6kQxhBYqI6xfv0wg7ZlmSj_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.133.0/24
87.76.157.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:d7:49:b0:18:72:4f:3b:df:87:34:a9:03:35:7a:f6:ee:ff:
28:53:09:49:09:36:76:a9:a3:5d:fc:8d:93:e1:73:f1:35:53:
13:8e:7c:62:31:f6:f1:84:b7:e8:b0:e8:65:54:fa:7a:46:5f:
e0:ad:84:d4:15:d1:d1:f9:e7:bd:85:60:34:41:f7:46:f2:69:
ef:ad:83:b6:6e:a0:eb:4f:f4:c2:72:56:86:83:2f:5e:29:a4:
6f:1b:83:7e:b3:bb:c4:89:b5:19:1f:5a:6f:60:c1:3c:30:a1:
24:0c:aa:1e:90:ad:50:b4:5b:91:bf:70:38:71:8e:a5:ee:1a:
6d:02:38:ae:53:5e:97:82:20:56:21:0b:6d:ab:62:70:54:b7:
00:40:eb:af:f0:d8:bd:fa:ec:89:97:ac:79:78:44:2b:70:62:
3c:b3:0b:db:fb:49:b9:cb:00:92:ca:02:a7:1c:e1:87:43:50:
db:86:b7:61:e0:91:fd:83:ba:15:b5:44:a4:f6:70:73:9b:7d:
36:60:17:07:b0:e1:98:ef:8d:f4:a2:d0:20:c3:5d:bf:b0:e9:
7d:44:df:b8:2c:6f:1b:32:14:c1:88:74:2b:37:25:27:29:ec:
b7:7a:f6:50:04:c3:9c:45:3e:e2:d7:b0:23:bf:6f:3f:84:b8:
1b:69:b1:1e
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaFLwAKzBVQO0SrI9W9fkHI1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyMWYwY2JhMTBkYWEzMDJlM2IxNjdjZWU1Mzk1Zjc0MmY1
MzBiMDkwHhcNMjYxMDE3MjEyMzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NzliM2E5MTBjNjEwNThhODhlYjE3ZWZkMzA4M2I2NjU5OTI4ZmZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvg+e3nSHRE4OhyhskgH2XRtU91Lp
1Bq5DW6V4uq2J81lpM6J2ZnLFM/jJC6PnvZ2IKWA4J/veeguFvYbgtHGEjXogxVk
ZxCfOpJtvbucFys418d8f7jjvcx38pnwDFABhfrrUbadUR8vwNr1y4Hm7k2W7btC
Nd6pbcfnmMvSiTU8q6mx5edfm7Ai259XqbOtjMnL4K0LZGhfGaRpAj5EfX5CtM+A
Swr6zCBmpEP3vw9RtZvLIYASMJOWY8TkBQL6tcU9iM26qoj9mnNPq01jBw4RpEBk
J4JGsI5ge2rhXsEHlDtP/Lpf2Dmu+Set8QKsVkW1+CWJjeMo2u9lnctdjQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFebOpEMYQWKiOsX79MIO2ZZko/+MB8GA1UdIwQY
MBaAFFIfDLoQ2qMC47FnzuU5X3QvUwsJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWg4TXVoRGFvd0xqc1dmTzVUbGZkQzlUQ3drLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82OGNlMzYtNzRlNC00NDNiLWFlZjEt
M2JiOGIwNzVkNjlmLzEvVjVzNmtReGhCWXFJNnhmdjB3ZzdabG1Tal80LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82OGNlMzYtNzRlNC00NDNiLWFlZjEtM2JiOGIwNzVkNjlm
LzEvVWg4TXVoRGFvd0xqc1dmTzVUbGZkQzlUQ3drLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAV0yFAwQA
V0ydMA0GCSqGSIb3DQEBCwUAA4IBAQBP10mwGHJPO9+HNKkDNXr27v8oUwlJCTZ2
qaNd/I2T4XPxNVMTjnxiMfbxhLfosOhlVPp6Rl/grYTUFdHR+ee9hWA0QfdG8mnv
rYO2bqDrT/TCclaGgy9eKaRvG4N+s7vEibUZH1pvYME8MKEkDKoekK1QtFuRv3A4
cY6l7hptAjiuU16XgiBWIQttq2JwVLcAQOuv8Ni9+uyJl6x5eEQrcGI8swvb+0m5
ywCSygKnHOGHQ1Dbhrdh4JH9g7oVtUSk9nBzm302YBcHsOGY7430otAgw12/sOl9
RN+4LG8bMhTBiHQrNyUnKey3evZQBMOcRT7i17Ajv28/hLgbabEe
-----END CERTIFICATE-----
Generated at Tue Oct 20 20:27:25 2026 by rpki-client