Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/_D2afXC-Va26JzGMBU4pUBzOyH8.roa
File: _D2afXC-Va26JzGMBU4pUBzOyH8.roa (raw, json)
Hash identifier: S/GkiDQrkyvDusYI3/bdrr/K9IvYf84011belRYxEW8=
Subject key identifier: FC:3D:9A:7D:70:BE:55:AD:BA:27:31:8C:05:4E:29:50:1C:CE:C8:7F
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 01A139EB7105773CCD8F73F96F5A7232D868
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/_D2afXC-Va26JzGMBU4pUBzOyH8.roa
Signing time: Wed 14 Oct 2026 10:18:13 +0000
ROA not before: Wed 14 Oct 2026 10:18:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25369
IP address blocks: 87.76.144.0/24 maxlen: 24
87.76.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:39:eb:71:05:77:3c:cd:8f:73:f9:6f:5a:72:32:d8:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Oct 14 10:18:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fc3d9a7d70be55adba27318c054e29501ccec87f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:45:95:18:73:13:9c:9e:a6:9e:9e:59:45:c0:
60:43:be:5c:4b:4d:df:49:9c:28:94:89:9d:aa:32:
55:5a:32:53:f9:4b:c0:85:1a:f5:b3:2a:13:40:df:
12:88:b0:0a:bf:f0:81:2d:17:ba:17:b1:47:61:29:
df:2e:2e:c6:c6:db:63:03:da:1d:14:52:ab:84:5a:
9e:52:0b:45:cd:e1:07:01:12:49:0a:ac:ad:aa:ee:
c3:87:f6:55:37:70:7c:21:40:18:f4:a4:18:ba:c7:
fc:e3:f5:a2:8f:42:af:36:5a:2c:45:03:1b:a9:de:
a7:6a:ca:e9:78:3f:08:13:04:3e:91:2c:a1:11:c3:
56:41:15:01:7d:ba:3b:6e:ad:ec:c9:f4:51:9a:43:
f5:34:f8:84:2d:9b:8d:79:5f:e9:8c:98:65:2e:1b:
cd:b1:3c:97:db:05:d3:58:84:27:bb:c1:4a:4a:d6:
4b:fd:f8:aa:12:bc:2b:b4:04:39:5f:7f:75:9e:00:
7a:43:04:f6:19:d7:c9:3d:96:a9:76:55:52:ee:9f:
b5:06:e0:82:fb:0b:01:ae:7e:35:fd:41:4e:5b:35:
1e:de:47:f1:9b:38:d9:3f:e1:02:42:66:4f:58:de:
2b:e4:ee:c8:a0:17:2d:62:25:0d:d9:a4:1a:fd:db:
22:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:3D:9A:7D:70:BE:55:AD:BA:27:31:8C:05:4E:29:50:1C:CE:C8:7F
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/_D2afXC-Va26JzGMBU4pUBzOyH8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.144.0/24
87.76.173.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:a5:a7:e6:65:f3:f0:ce:a6:e7:0b:cd:72:14:4b:93:35:0e:
a7:2d:3f:dd:37:cd:89:ec:ac:e0:6b:4c:a0:39:59:8a:38:4f:
e9:90:29:c4:03:6f:05:b5:d8:51:43:68:a6:43:d7:00:dc:d3:
19:a3:88:4d:9a:ee:82:82:05:63:2b:8b:5b:8e:e7:91:85:00:
bc:b6:a1:b8:21:8a:e5:02:2d:8d:8d:72:14:3a:7f:d7:71:f4:
b6:6d:64:38:90:e4:7e:dd:c8:81:37:e7:d6:9f:c5:d0:57:b5:
52:45:36:85:fa:49:98:fb:96:d1:14:a8:c9:6a:05:78:64:cd:
cb:71:3e:c6:29:44:23:a4:e9:89:28:fc:0e:ec:4a:1c:74:6c:
3a:74:fa:9c:2a:d3:c3:33:86:0f:b8:a3:b5:ab:e9:6b:3a:8a:
8e:a5:f9:7b:3b:11:2f:68:a4:48:d2:75:eb:65:3f:99:ff:c4:
80:0b:39:28:56:d2:83:25:5f:43:a1:f4:c4:f6:d0:7b:9c:a3:
a3:06:a6:d6:21:8f:4f:c4:61:32:66:71:75:a4:c2:e5:d8:3f:
86:29:b2:47:47:25:23:f3:df:d8:51:45:9f:ab:69:2a:98:44:
16:b9:2f:cf:c3:ea:6f:4c:3d:4b:05:19:27:ae:ba:f4:91:4e:
99:c8:3e:10
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaE563EFdzzNj3P5b1pyMthoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyMWYwY2JhMTBkYWEzMDJlM2IxNjdjZWU1Mzk1Zjc0MmY1
MzBiMDkwHhcNMjYxMDE0MTAxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYzNkOWE3ZDcwYmU1NWFkYmEyNzMxOGMwNTRlMjk1MDFjY2VjODdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUWVGHMTnJ6mnp5ZRcBgQ75cS03f
SZwolImdqjJVWjJT+UvAhRr1syoTQN8SiLAKv/CBLRe6F7FHYSnfLi7GxttjA9od
FFKrhFqeUgtFzeEHARJJCqytqu7Dh/ZVN3B8IUAY9KQYusf84/Wij0KvNlosRQMb
qd6nasrpeD8IEwQ+kSyhEcNWQRUBfbo7bq3syfRRmkP1NPiELZuNeV/pjJhlLhvN
sTyX2wXTWIQnu8FKStZL/fiqErwrtAQ5X391ngB6QwT2GdfJPZapdlVS7p+1BuCC
+wsBrn41/UFOWzUe3kfxmzjZP+ECQmZPWN4r5O7IoBctYiUN2aQa/dsi5wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFPw9mn1wvlWtuicxjAVOKVAczsh/MB8GA1UdIwQY
MBaAFFIfDLoQ2qMC47FnzuU5X3QvUwsJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWg4TXVoRGFvd0xqc1dmTzVUbGZkQzlUQ3drLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82OGNlMzYtNzRlNC00NDNiLWFlZjEt
M2JiOGIwNzVkNjlmLzEvX0QyYWZYQy1WYTI2SnpHTUJVNHBVQnpPeUg4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82OGNlMzYtNzRlNC00NDNiLWFlZjEtM2JiOGIwNzVkNjlm
LzEvVWg4TXVoRGFvd0xqc1dmTzVUbGZkQzlUQ3drLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAV0yQAwQA
V0ytMA0GCSqGSIb3DQEBCwUAA4IBAQANpafmZfPwzqbnC81yFEuTNQ6nLT/dN82J
7Kzga0ygOVmKOE/pkCnEA28FtdhRQ2imQ9cA3NMZo4hNmu6CggVjK4tbjueRhQC8
tqG4IYrlAi2NjXIUOn/XcfS2bWQ4kOR+3ciBN+fWn8XQV7VSRTaF+kmY+5bRFKjJ
agV4ZM3LcT7GKUQjpOmJKPwO7EocdGw6dPqcKtPDM4YPuKO1q+lrOoqOpfl7OxEv
aKRI0nXrZT+Z/8SACzkoVtKDJV9DofTE9tB7nKOjBqbWIY9PxGEyZnF1pMLl2D+G
KbJHRyUj89/YUUWfq2kqmEQWuS/Pw+pvTD1LBRknrrr0kU6ZyD4Q
-----END CERTIFICATE-----
Generated at Tue Oct 20 18:36:23 2026 by rpki-client