Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/WrMzSp8eiPyPM0_Rsz39WZj1x4A.roa
File: WrMzSp8eiPyPM0_Rsz39WZj1x4A.roa (raw, json)
Hash identifier: dmglsP2aElygkHeOEWKVyif0As20BSiR0u0Y6Ei4tIs=
Subject key identifier: 5A:B3:33:4A:9F:1E:88:FC:8F:33:4F:D1:B3:3D:FD:59:98:F5:C7:80
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 019FF5D3447B8ACFF3954C8B35417004FB33
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/WrMzSp8eiPyPM0_Rsz39WZj1x4A.roa
Signing time: Wed 12 Aug 2026 11:54:51 +0000
ROA not before: Wed 12 Aug 2026 11:54:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402288
IP address blocks: 87.76.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 16:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f5:d3:44:7b:8a:cf:f3:95:4c:8b:35:41:70:04:fb:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Aug 12 11:54:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5ab3334a9f1e88fc8f334fd1b33dfd5998f5c780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:27:ac:f7:30:04:57:25:03:04:52:e0:c9:d5:
c8:72:d5:2e:16:bd:5b:73:f2:66:99:59:73:6c:72:
57:51:9c:e6:14:17:17:6a:68:73:e7:85:11:93:1c:
68:e9:e2:e8:e3:bf:24:d0:7b:d6:7c:e4:ee:98:e1:
6f:e6:6a:2c:66:49:0d:bb:c2:6b:35:b9:ae:4f:78:
9f:30:4e:61:86:1a:35:70:f7:e6:00:56:17:5c:ab:
e8:c3:9f:7b:4d:74:92:6b:f7:e8:16:cc:0e:81:f9:
ef:c1:e0:93:76:e6:07:b7:ca:b6:74:ef:de:cd:ec:
93:88:d0:17:98:bb:7c:b2:56:97:37:80:12:02:3f:
83:a9:5e:bb:ba:12:ad:8f:bc:88:14:a3:dd:fb:0b:
a1:2b:41:b9:0a:aa:ef:19:ff:b1:83:91:1f:bf:eb:
df:01:1b:dc:53:01:e1:aa:b4:0f:76:20:56:67:8c:
2f:75:0c:72:ea:7f:70:2b:62:6c:c7:4f:71:f9:3b:
4f:fe:f2:50:8b:0f:37:a9:2e:4a:3a:bb:63:49:f9:
c6:af:ab:e9:93:50:b1:ab:41:95:5b:d3:3c:44:e1:
3b:5b:a0:21:c3:85:ed:34:e4:85:80:04:44:2b:9e:
ac:dc:81:1c:d3:b5:1a:55:1a:64:a1:b8:bb:24:24:
c2:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:B3:33:4A:9F:1E:88:FC:8F:33:4F:D1:B3:3D:FD:59:98:F5:C7:80
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/WrMzSp8eiPyPM0_Rsz39WZj1x4A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.181.0/24
Signature Algorithm: sha256WithRSAEncryption
12:14:d9:3c:c7:e3:13:9f:91:de:53:98:cb:71:9d:1b:35:a6:
88:07:ad:ac:a2:98:bb:ef:2f:07:c8:53:7d:3b:cf:b9:41:b2:
01:b3:fc:7f:45:aa:e9:ff:bb:6c:1d:34:00:8d:22:bb:4a:2b:
2d:8c:cd:50:7d:70:f4:fc:45:fa:97:3f:10:e9:2b:c0:c3:09:
fd:aa:ef:41:f1:29:6e:55:1c:ff:30:4d:94:f4:41:6b:a4:b3:
56:1e:a3:45:42:78:58:b3:10:89:98:e4:e7:8f:26:00:a9:74:
ab:4c:37:03:1e:c6:43:d3:05:56:1a:76:14:ad:37:8d:75:e5:
ff:d7:39:ef:5d:cf:b9:68:93:0e:0a:f1:6f:32:83:34:cc:d8:
52:34:e3:27:a9:55:46:00:40:42:2f:9b:d3:23:c9:ec:1d:fd:
02:e1:66:0f:89:95:83:47:4e:01:85:b0:ac:74:f1:0c:1d:c9:
bb:c6:8e:7b:e9:77:63:37:eb:be:fe:6c:00:20:73:74:68:fb:
b7:a7:01:2c:f9:e3:02:6f:60:d1:97:be:d9:49:a8:44:2f:c1:
f3:21:60:a7:d4:1e:7d:af:f8:b7:b8:3f:0e:37:dd:49:d5:c7:
0e:89:ec:5c:2f:8e:02:75:64:84:d2:1c:cc:0f:00:55:91:18:
9b:5c:4d:e4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ/100R7is/zlUyLNUFwBPszMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyMWYwY2JhMTBkYWEzMDJlM2IxNjdjZWU1Mzk1Zjc0MmY1
MzBiMDkwHhcNMjYwODEyMTE1NDUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YWIzMzM0YTlmMWU4OGZjOGYzMzRmZDFiMzNkZmQ1OTk4ZjVjNzgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwyes9zAEVyUDBFLgydXIctUuFr1b
c/JmmVlzbHJXUZzmFBcXamhz54URkxxo6eLo478k0HvWfOTumOFv5mosZkkNu8Jr
NbmuT3ifME5hhho1cPfmAFYXXKvow597TXSSa/foFswOgfnvweCTduYHt8q2dO/e
zeyTiNAXmLt8slaXN4ASAj+DqV67uhKtj7yIFKPd+wuhK0G5CqrvGf+xg5Efv+vf
ARvcUwHhqrQPdiBWZ4wvdQxy6n9wK2Jsx09x+TtP/vJQiw83qS5KOrtjSfnGr6vp
k1Cxq0GVW9M8ROE7W6Ahw4XtNOSFgAREK56s3IEc07UaVRpkobi7JCTCoQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFqzM0qfHoj8jzNP0bM9/VmY9ceAMB8GA1UdIwQY
MBaAFFIfDLoQ2qMC47FnzuU5X3QvUwsJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWg4TXVoRGFvd0xqc1dmTzVUbGZkQzlUQ3drLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82OGNlMzYtNzRlNC00NDNiLWFlZjEt
M2JiOGIwNzVkNjlmLzEvV3JNelNwOGVpUHlQTTBfUnN6MzlXWmoxeDRBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82OGNlMzYtNzRlNC00NDNiLWFlZjEtM2JiOGIwNzVkNjlm
LzEvVWg4TXVoRGFvd0xqc1dmTzVUbGZkQzlUQ3drLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV0y1MA0G
CSqGSIb3DQEBCwUAA4IBAQASFNk8x+MTn5HeU5jLcZ0bNaaIB62sopi77y8HyFN9
O8+5QbIBs/x/Rarp/7tsHTQAjSK7SistjM1QfXD0/EX6lz8Q6SvAwwn9qu9B8Slu
VRz/ME2U9EFrpLNWHqNFQnhYsxCJmOTnjyYAqXSrTDcDHsZD0wVWGnYUrTeNdeX/
1znvXc+5aJMOCvFvMoM0zNhSNOMnqVVGAEBCL5vTI8nsHf0C4WYPiZWDR04BhbCs
dPEMHcm7xo576XdjN+u+/mwAIHN0aPu3pwEs+eMCb2DRl77ZSahEL8HzIWCn1B59
r/i3uD8ON91J1ccOiexcL44CdWSE0hzMDwBVkRibXE3k
-----END CERTIFICATE-----
Generated at Wed Aug 12 21:25:13 2026 by rpki-client