Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/aDl1HWN-d078EXKAVjej9T9bJZQ.roa
File: aDl1HWN-d078EXKAVjej9T9bJZQ.roa (raw, json)
Hash identifier: KUXoflsIz6nUZjL5fFk1pOUUP7DqfwZacln3FWu6PYI=
Subject key identifier: 68:39:75:1D:63:7E:77:4E:FC:11:72:80:56:37:A3:F5:3F:5B:25:94
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 019F4D7E32725520254782057CB706F94949
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/aDl1HWN-d078EXKAVjej9T9bJZQ.roa
Signing time: Fri 10 Jul 2026 19:25:43 +0000
ROA not before: Fri 10 Jul 2026 19:25:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13335
IP address blocks: 87.76.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:4d:7e:32:72:55:20:25:47:82:05:7c:b7:06:f9:49:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Jul 10 19:25:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6839751d637e774efc1172805637a3f53f5b2594
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ab:f8:86:c0:3f:76:97:86:24:54:c3:ae:52:
d7:fd:ac:e1:41:b2:0d:7c:0e:0f:2b:91:31:d3:34:
7c:21:c2:e7:71:e0:5d:7d:39:91:34:b7:0e:1c:4c:
da:93:8d:65:32:2e:56:fc:d9:4c:88:65:d6:31:c0:
40:31:83:1b:e1:91:ed:66:d5:45:5c:2d:b7:91:e8:
b3:f5:f0:c0:8e:5a:61:87:1d:05:88:8a:45:f3:6b:
72:00:10:53:7e:01:2f:73:04:3e:3a:44:c0:33:03:
0c:9b:32:8c:87:de:13:aa:28:81:5f:43:dc:70:d8:
e2:b1:ab:b2:b6:7b:63:23:46:d0:93:99:12:68:8a:
d4:bc:74:16:b1:32:21:27:10:ef:87:72:f9:9b:b4:
5c:64:23:3f:f1:cd:ee:83:f2:73:71:0c:b3:6e:a9:
25:22:2e:b6:58:28:d8:da:55:65:d7:78:6a:9d:7d:
9c:a4:5e:73:13:5f:6a:27:bf:3d:2d:7d:a8:b4:ba:
a6:30:a5:fe:66:8d:40:e1:6c:f0:56:b3:26:d7:35:
db:ce:22:32:5c:6d:b3:7f:97:5a:83:75:0f:9f:ea:
83:d8:bf:db:bf:49:cb:96:d6:d4:3c:fd:03:0c:63:
01:95:b2:e0:91:f9:49:0c:35:a1:31:7c:bc:d5:89:
9d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:39:75:1D:63:7E:77:4E:FC:11:72:80:56:37:A3:F5:3F:5B:25:94
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/aDl1HWN-d078EXKAVjej9T9bJZQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.215.0/24
Signature Algorithm: sha256WithRSAEncryption
91:59:80:7a:35:aa:9f:c2:8a:6a:51:46:78:0d:dc:da:5f:8f:
56:b9:53:9e:ca:fd:14:71:32:c7:08:e1:f5:7b:cd:06:bd:a2:
cd:bb:8f:61:8d:d5:a4:0a:21:0c:f2:7f:cf:36:b5:e6:0c:7f:
c6:8e:ae:98:89:e7:92:40:3c:f4:42:3a:8e:3e:b1:e7:42:98:
24:07:31:8c:59:d2:a3:b4:42:ca:77:b8:48:86:ad:17:7c:2e:
9c:8c:c9:98:41:88:89:5d:9d:64:fa:c5:21:59:24:d6:c1:da:
9c:8e:c6:ef:b8:58:f4:80:cf:4b:bf:16:72:46:e7:ce:6c:f1:
2b:e6:92:2f:0f:fa:c6:b9:35:8f:4c:88:ce:f1:ba:b8:bf:48:
6b:23:f3:5c:d3:86:4d:e8:5e:08:1b:0b:69:32:a0:be:86:bd:
c4:0c:be:36:25:c1:ff:00:49:69:fa:f8:42:b5:59:b9:b3:cd:
b1:02:a1:96:ed:eb:42:10:ca:ce:b7:97:22:14:88:53:ee:d4:
62:3f:fb:ea:6f:8b:03:37:a0:6f:aa:91:80:0f:02:db:5c:dd:
7e:17:39:90:9e:5b:2c:b8:4e:96:3f:17:35:b2:f2:11:61:30:
43:f3:92:d7:a0:a0:be:f5:06:f7:db:df:30:68:1d:da:e8:61:
42:b0:55:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:45:45 2026 by rpki-client