Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/W1Mc6WKU7LvqaeQoSuJUVERQ4JQ.roa
File: W1Mc6WKU7LvqaeQoSuJUVERQ4JQ.roa (raw, json)
Hash identifier: bNmf0M3DBUz97nuhivcm8fGk8Usfy2fgfyGTSdH1m5E=
Subject key identifier: 5B:53:1C:E9:62:94:EC:BB:EA:69:E4:28:4A:E2:54:54:44:50:E0:94
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 019F602EC24F0D1C87CB7288FDEBFB44B7CD
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/W1Mc6WKU7LvqaeQoSuJUVERQ4JQ.roa
Signing time: Tue 14 Jul 2026 10:31:44 +0000
ROA not before: Tue 14 Jul 2026 10:31:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402215
IP address blocks: 87.76.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:60:2e:c2:4f:0d:1c:87:cb:72:88:fd:eb:fb:44:b7:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Jul 14 10:31:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5b531ce96294ecbbea69e4284ae254544450e094
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:91:38:b5:45:09:b3:3d:31:1f:2e:b6:c3:ff:
28:fd:89:3c:73:8b:81:39:c7:be:96:8c:ee:9d:e3:
28:df:4e:1c:10:45:22:fb:7f:47:36:c3:eb:40:52:
54:a4:8b:d1:66:52:c5:c5:0c:49:4e:91:9d:38:2e:
2f:a5:22:4e:4d:da:cd:08:5b:e1:63:8c:ab:e8:1e:
cb:94:e1:7d:f2:1c:cf:9b:73:94:98:55:3a:cd:27:
d5:38:70:49:a3:51:4b:4f:18:72:13:40:6f:ab:fa:
b4:8c:c8:b1:28:71:22:39:d7:8e:71:bc:ca:a5:05:
49:cb:a2:a8:25:b9:c9:ea:23:d1:1a:e2:bb:63:fb:
04:ca:bc:8b:9f:e6:c9:cf:7c:6f:04:2e:f6:eb:c2:
04:ef:a4:17:dd:93:a6:ea:91:f5:e3:d0:17:95:6d:
69:d5:7a:01:7e:d2:38:4e:1a:d1:2e:d2:d0:fc:49:
2f:7f:33:b0:1d:88:89:aa:60:7e:78:be:e0:47:a5:
ec:95:95:2b:fc:31:93:2f:43:69:11:bb:23:31:76:
02:96:b1:9f:b0:09:2b:a0:44:c8:1e:f2:6d:5e:1b:
2b:52:26:33:2d:f6:7e:5d:f2:02:5f:a8:bc:f0:51:
82:46:63:3f:69:f5:ef:30:d9:8d:7f:3f:5c:0c:aa:
a4:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:53:1C:E9:62:94:EC:BB:EA:69:E4:28:4A:E2:54:54:44:50:E0:94
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/W1Mc6WKU7LvqaeQoSuJUVERQ4JQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.213.0/24
Signature Algorithm: sha256WithRSAEncryption
64:23:d0:ff:85:54:1c:31:d0:ce:64:8c:4b:dd:3e:84:2b:ad:
8c:cf:f9:1e:34:72:b5:8b:49:18:a2:ef:41:9a:7a:37:b5:18:
fd:ff:c2:6c:3c:de:3e:15:77:b3:aa:46:fc:a0:af:bb:f7:d5:
55:e1:d8:c9:ac:ec:44:34:ff:47:08:89:27:50:69:b2:9d:a3:
d3:2e:a6:eb:b5:7f:28:a0:eb:04:38:56:9e:31:cf:92:41:34:
2d:23:5d:75:d6:1e:49:c3:31:0f:98:2a:73:95:e9:60:9e:bb:
fc:41:39:6f:d6:21:60:88:87:6d:c0:bb:9d:84:23:c6:8c:6b:
88:91:ec:a3:02:c7:09:e0:c9:52:86:22:fa:d4:db:9a:78:3f:
6c:03:96:c3:6c:d7:c2:b1:98:65:11:74:56:3c:b3:0d:ea:6b:
52:f0:80:46:88:02:a0:71:2f:a7:59:95:af:f0:b9:f8:72:54:
63:59:84:9a:a4:7e:66:cb:0d:e4:32:fc:d2:0d:f8:ed:ee:0f:
0e:78:76:79:40:60:93:e0:a0:f6:ce:8a:2d:9a:02:13:4b:da:
f2:f1:2b:ad:b5:e9:cf:4b:01:5a:9e:1a:1c:86:30:78:83:f2:
cf:8b:59:6f:6e:61:b6:a2:4a:33:35:91:56:fd:1c:0e:f2:0d:
14:77:8a:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:13:32 2026 by rpki-client