Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/VrZcA8E8AKzx3OJAW00dS1vCtVI.roa
File: VrZcA8E8AKzx3OJAW00dS1vCtVI.roa (raw, json)
Hash identifier: PoLHp8skmPDulqlo/+3gUgYDipULbCfs+g5EP+hgMQ0=
Subject key identifier: 56:B6:5C:03:C1:3C:00:AC:F1:DC:E2:40:5B:4D:1D:4B:5B:C2:B5:52
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 01A10C972D8DB58A33166FE808B877CA45DA
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/VrZcA8E8AKzx3OJAW00dS1vCtVI.roa
Signing time: Mon 05 Oct 2026 15:03:16 +0000
ROA not before: Mon 05 Oct 2026 15:03:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198316
IP address blocks: 87.76.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0c:97:2d:8d:b5:8a:33:16:6f:e8:08:b8:77:ca:45:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Oct 5 15:03:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=56b65c03c13c00acf1dce2405b4d1d4b5bc2b552
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:66:d9:85:26:69:13:6c:e6:d3:04:bb:64:f2:
dc:fe:cc:ed:77:17:2d:f0:81:a4:c1:2d:9c:21:b0:
9c:c9:b8:dc:08:5f:73:29:71:fa:60:d6:8f:47:39:
30:c0:fc:94:ce:1c:da:ad:4e:1d:e9:93:49:8f:e0:
57:b6:9d:b0:49:ec:8b:58:e2:e9:79:66:fe:55:d1:
0b:a8:ed:ee:f9:59:13:f9:bb:4d:65:15:3d:69:8f:
b3:ee:16:de:08:3c:14:af:16:ca:9f:8c:a4:46:04:
f6:09:ca:a8:ca:d9:fa:f6:60:85:57:d9:13:4d:2c:
d4:0c:c5:63:3c:a5:1a:ca:ed:16:79:04:72:bc:55:
96:5f:13:6c:37:f4:0a:34:0f:15:1d:c2:6a:e1:45:
52:82:1a:23:30:43:59:b2:a3:76:d5:47:84:fb:8a:
ba:6b:fc:4a:5d:3f:d0:1b:09:ce:a7:6c:ee:b3:18:
09:d2:2c:22:74:a6:36:26:d4:7a:2f:6e:48:22:16:
79:fa:d7:45:bb:13:d1:eb:7f:90:d8:65:7f:4e:5d:
ab:a3:8e:c1:c8:7c:5e:5c:55:10:0a:a1:f1:6a:3c:
26:60:db:a2:a6:96:7b:8d:83:0d:23:3e:89:81:b5:
4f:4d:80:66:6d:0f:7c:c2:57:92:d0:28:ed:50:58:
9b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:B6:5C:03:C1:3C:00:AC:F1:DC:E2:40:5B:4D:1D:4B:5B:C2:B5:52
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/VrZcA8E8AKzx3OJAW00dS1vCtVI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.220.0/24
Signature Algorithm: sha256WithRSAEncryption
05:36:28:11:38:90:d5:f3:49:21:40:3a:cc:42:36:5d:27:16:
e8:cb:a6:df:7c:84:38:30:82:f5:1e:95:e2:45:c1:9f:e3:fc:
3b:62:96:17:d3:e7:e0:31:e9:20:13:0a:99:0f:1b:92:1c:57:
50:45:f7:e4:b0:5c:c6:7d:03:55:94:c4:20:ff:21:57:0a:b0:
d1:a7:c5:c3:60:8c:92:d2:7d:cc:cb:e7:25:30:e1:ea:bc:83:
a5:5b:42:dc:6c:1e:3f:4f:90:f3:d5:66:39:de:88:59:ae:52:
70:af:74:57:ff:a8:f3:58:96:16:d5:c1:a6:42:34:31:db:38:
bf:53:ef:5a:6b:81:10:7a:38:39:f1:68:35:01:44:13:55:26:
93:e1:54:cd:2c:e4:61:9c:bf:10:11:03:b8:0a:6a:4a:55:cb:
28:bc:55:f7:dd:3d:16:b8:c2:16:0a:22:ff:24:fb:65:b6:75:
03:07:01:39:1c:bc:42:ff:f8:7f:fd:3b:30:b2:57:14:ac:8d:
e3:65:49:77:ad:49:63:e4:e1:35:cd:d1:13:e9:91:48:ab:6c:
6e:cc:16:d3:b7:c3:57:bc:e8:11:54:a1:4c:02:54:b1:7d:c8:
c4:80:fd:89:09:0b:fa:9b:e8:c2:d9:09:76:26:bc:c1:de:33:
e0:76:d6:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 15:37:31 2026 by rpki-client