Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Z3elbNBXdwdH61ywK5cLuSCetZw.roa
File: Z3elbNBXdwdH61ywK5cLuSCetZw.roa (raw, json)
Hash identifier: HpMlZS3TYrtapLVf0KHkbgeNT581EU64ra8ccHWIkkc=
Subject key identifier: 67:77:A5:6C:D0:57:77:07:47:EB:5C:B0:2B:97:0B:B9:20:9E:B5:9C
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 01A1C502CA7EB5FBB062588D5D4D38F366E6
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Z3elbNBXdwdH61ywK5cLuSCetZw.roa
Signing time: Tue 10 Nov 2026 10:30:56 +0000
ROA not before: Tue 10 Nov 2026 10:30:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 147293
IP address blocks: 87.76.185.0/24 maxlen: 24
87.76.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c5:02:ca:7e:b5:fb:b0:62:58:8d:5d:4d:38:f3:66:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Nov 10 10:30:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6777a56cd057770747eb5cb02b970bb9209eb59c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:1f:3c:6a:46:23:86:33:94:ee:e8:5e:a4:f6:
09:e4:3c:e4:79:74:69:b5:3f:9f:87:9c:b5:84:8a:
02:df:fd:6e:5f:0e:6c:41:16:03:06:7d:6b:78:1c:
45:a4:22:3b:74:4d:ef:fd:1f:aa:96:b9:50:34:87:
a8:5f:7d:27:4f:29:3c:55:c2:65:b9:65:7a:10:06:
df:50:d9:e2:54:44:39:47:56:3b:7d:e6:ed:24:90:
53:97:46:6f:13:5e:64:ad:a7:51:2b:2a:83:3f:77:
03:b5:ff:46:d9:a4:41:96:63:e8:92:8f:a5:89:8b:
86:dc:2d:f3:8c:e8:e1:da:87:7a:11:ba:21:f2:c6:
ac:64:a4:f3:46:b1:63:9f:70:88:ed:ed:38:fe:9e:
ea:1d:78:cf:58:d1:b9:8d:9c:c6:f0:34:16:60:12:
cd:a1:ad:29:bf:7c:a5:98:09:c3:14:49:25:1f:fc:
02:27:ea:fa:93:3d:2b:7f:a8:6e:00:51:18:c3:c1:
81:da:62:ae:78:7e:07:ef:23:6f:ff:ed:fb:40:54:
61:53:ff:21:de:21:f0:65:45:10:fd:16:96:fa:57:
2a:fb:d2:f1:59:9c:bc:8c:1c:f5:48:ef:6c:64:24:
ef:94:85:07:24:8d:48:52:9d:47:a6:10:97:e1:35:
84:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:77:A5:6C:D0:57:77:07:47:EB:5C:B0:2B:97:0B:B9:20:9E:B5:9C
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Z3elbNBXdwdH61ywK5cLuSCetZw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.185.0/24
87.76.202.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:29:a8:de:3b:9d:bb:30:44:7c:93:6f:c7:20:5b:de:38:01:
b1:0e:80:32:51:ec:0f:c3:44:d3:97:a7:55:f1:c7:64:b2:ca:
ed:e7:2c:cb:4d:15:68:4c:36:90:c5:94:33:2d:27:57:38:12:
a0:d6:05:4b:08:c8:b1:06:89:ea:1f:4c:80:3d:33:37:31:31:
2b:dd:10:f5:4b:6a:f3:d8:6a:46:b2:c9:3a:f8:60:30:6d:52:
78:ff:56:2a:c6:97:71:aa:c9:c1:66:0a:e7:e1:d5:c9:2e:3a:
2c:6d:d2:7a:06:4a:1b:5c:9d:a7:db:d8:a0:4a:7b:b1:e7:22:
65:54:b0:04:cd:69:f2:f9:cc:00:83:5e:9f:e1:7f:18:10:4f:
39:17:c5:ce:98:57:b8:dc:69:7b:0c:68:1e:4c:12:7a:66:23:
70:7d:d9:1e:2c:88:10:21:b2:e8:f1:29:9b:a9:b6:ab:b1:14:
1a:a5:25:d7:92:d0:bc:ba:2b:64:c1:1e:cc:a4:49:4e:7e:97:
85:13:82:10:0b:de:09:79:d2:34:39:ec:07:93:b9:5a:e0:01:
6e:48:80:c2:97:16:d8:f5:c7:08:ea:c3:74:df:30:f2:60:c8:
9c:75:7b:db:29:82:e2:8f:eb:2c:ac:f6:6a:d7:c9:22:66:29:
10:9a:fc:d7
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaHFAsp+tfuwYliNXU0482bmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyMWYwY2JhMTBkYWEzMDJlM2IxNjdjZWU1Mzk1Zjc0MmY1
MzBiMDkwHhcNMjYxMTEwMTAzMDU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2Nzc3YTU2Y2QwNTc3NzA3NDdlYjVjYjAyYjk3MGJiOTIwOWViNTljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlx88akYjhjOU7uhepPYJ5DzkeXRp
tT+fh5y1hIoC3/1uXw5sQRYDBn1reBxFpCI7dE3v/R+qlrlQNIeoX30nTyk8VcJl
uWV6EAbfUNniVEQ5R1Y7febtJJBTl0ZvE15kradRKyqDP3cDtf9G2aRBlmPoko+l
iYuG3C3zjOjh2od6Eboh8sasZKTzRrFjn3CI7e04/p7qHXjPWNG5jZzG8DQWYBLN
oa0pv3ylmAnDFEklH/wCJ+r6kz0rf6huAFEYw8GB2mKueH4H7yNv/+37QFRhU/8h
3iHwZUUQ/RaW+lcq+9LxWZy8jBz1SO9sZCTvlIUHJI1IUp1HphCX4TWEbwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGd3pWzQV3cHR+tcsCuXC7kgnrWcMB8GA1UdIwQY
MBaAFFIfDLoQ2qMC47FnzuU5X3QvUwsJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWg4TXVoRGFvd0xqc1dmTzVUbGZkQzlUQ3drLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82OGNlMzYtNzRlNC00NDNiLWFlZjEt
M2JiOGIwNzVkNjlmLzEvWjNlbGJOQlhkd2RINjF5d0s1Y0x1U0NldFp3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82OGNlMzYtNzRlNC00NDNiLWFlZjEtM2JiOGIwNzVkNjlm
LzEvVWg4TXVoRGFvd0xqc1dmTzVUbGZkQzlUQ3drLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAV0y5AwQA
V0zKMA0GCSqGSIb3DQEBCwUAA4IBAQAsKajeO527MER8k2/HIFveOAGxDoAyUewP
w0TTl6dV8cdkssrt5yzLTRVoTDaQxZQzLSdXOBKg1gVLCMixBonqH0yAPTM3MTEr
3RD1S2rz2GpGssk6+GAwbVJ4/1YqxpdxqsnBZgrn4dXJLjosbdJ6BkobXJ2n29ig
Snux5yJlVLAEzWny+cwAg16f4X8YEE85F8XOmFe43Gl7DGgeTBJ6ZiNwfdkeLIgQ
IbLo8SmbqbarsRQapSXXktC8uitkwR7MpElOfpeFE4IQC94JedI0OewHk7la4AFu
SIDClxbY9ccI6sN03zDyYMicdXvbKYLij+ssrPZq18kiZikQmvzX
-----END CERTIFICATE-----
Generated at Sun Nov 15 11:07:50 2026 by rpki-client