Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/WAe7KOQcM0CQ2HL6am93cnM2Amc.roa
File: WAe7KOQcM0CQ2HL6am93cnM2Amc.roa (raw, json)
Hash identifier: IpIbcgp1nyxQNYqtz32TwnZmZK6Azbxkycq2Or6uB6U=
Subject key identifier: 58:07:BB:28:E4:1C:33:40:90:D8:72:FA:6A:6F:77:72:73:36:02:67
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 019F0457E3D71C93478F5D6CDE3E07E7E565
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/WAe7KOQcM0CQ2HL6am93cnM2Amc.roa
Signing time: Fri 26 Jun 2026 14:31:36 +0000
ROA not before: Fri 26 Jun 2026 14:31:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34346
IP address blocks: 87.76.139.0/24 maxlen: 24
87.76.141.0/24 maxlen: 24
87.76.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Jun 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:04:57:e3:d7:1c:93:47:8f:5d:6c:de:3e:07:e7:e5:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Jun 26 14:31:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5807bb28e41c334090d872fa6a6f777273360267
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:3a:a8:48:39:11:cc:99:cc:3f:6c:e8:f4:53:
9a:e8:85:28:83:6b:8f:36:56:12:d6:6e:73:50:1a:
29:9b:5e:38:6e:8b:4c:70:04:d2:1f:2b:34:b3:6a:
da:3c:2a:17:29:fc:12:82:60:52:6b:2e:30:64:68:
07:ba:86:02:cb:e4:c7:94:eb:6a:aa:48:88:09:e7:
d8:df:10:84:c4:38:01:46:82:82:52:55:95:e6:d2:
e9:c2:e7:a7:4e:31:21:12:81:2e:4e:6a:0b:0f:b9:
a8:e1:53:61:cf:41:5b:2c:ef:cd:44:33:36:c6:60:
b2:6b:07:b1:b7:41:a2:6a:65:67:59:32:3d:d9:a6:
1e:92:30:57:b4:a7:45:d7:8b:e5:87:44:49:d0:64:
5c:24:f6:94:0d:10:2d:ba:65:e8:c4:5b:d0:1a:3d:
9d:e2:e5:82:6d:20:75:38:a2:20:4c:86:d3:5a:e4:
0d:b8:b4:0b:11:d4:ec:9f:18:36:ca:3a:e1:f4:d8:
52:fe:08:7f:4d:32:91:af:4a:79:c4:23:9b:0f:27:
9b:1c:15:09:49:1f:53:17:9f:74:6d:fc:8d:64:16:
4c:32:b1:ed:5e:b0:0d:7e:6f:23:1a:ca:c1:a8:61:
df:ce:68:75:6f:5f:63:4e:cf:fa:91:41:c8:8b:77:
f4:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:07:BB:28:E4:1C:33:40:90:D8:72:FA:6A:6F:77:72:73:36:02:67
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/WAe7KOQcM0CQ2HL6am93cnM2Amc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.139.0/24
87.76.141.0/24
87.76.143.0/24
Signature Algorithm: sha256WithRSAEncryption
99:0f:4d:7a:80:eb:42:b8:53:26:fd:88:fc:ff:66:79:d4:35:
51:f8:d0:62:19:c1:c3:bb:0b:f0:d5:a2:64:c7:06:6d:8f:17:
c2:e8:af:34:e7:ea:fb:fb:c8:05:6d:fd:2b:57:bd:49:31:ed:
b0:43:58:c0:21:98:01:33:df:fd:bd:74:53:18:cb:a8:11:91:
04:30:b2:aa:5b:a8:4c:69:57:c7:c3:59:76:a7:d5:15:22:1f:
f8:b8:d8:78:13:95:b8:71:36:e8:e2:3b:56:aa:f7:a6:2b:81:
fb:6a:1b:3a:22:bc:9a:b3:be:7e:de:77:e4:76:30:32:88:51:
cf:a2:ba:37:97:c8:c1:0c:12:29:9a:33:32:46:8b:59:7f:af:
2b:16:aa:f0:05:ad:1c:e1:58:93:b6:e5:a0:de:8c:cb:57:dc:
f8:05:01:57:97:70:1e:e0:37:3b:6c:da:13:c5:9f:08:83:4b:
2d:15:63:a1:fb:f8:2e:c7:9e:55:77:87:3b:47:8d:5b:40:57:
2a:d0:c6:26:5f:1d:0a:d8:d0:4f:9f:33:6e:f8:12:ec:d8:fb:
c2:e4:ee:d0:8d:4b:a1:1c:bf:dc:2e:c9:f7:e7:af:23:e4:68:
53:78:1c:0e:17:8c:a9:6b:e3:97:8c:29:82:e3:3b:6d:97:07:
32:52:8a:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 20:29:40 2026 by rpki-client