Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/avCIsPCKJwrBoIbxwHUs65P7EoI.roa
File: avCIsPCKJwrBoIbxwHUs65P7EoI.roa (raw, json)
Hash identifier: iEFphCJHbXyLIp25Lku1/GMTxXnEbaaag79YRp5bHwQ=
Subject key identifier: 6A:F0:88:B0:F0:8A:27:0A:C1:A0:86:F1:C0:75:2C:EB:93:FB:12:82
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 01A0CD919D15FDFF5F181363E684311951C2
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/avCIsPCKJwrBoIbxwHUs65P7EoI.roa
Signing time: Wed 23 Sep 2026 09:21:07 +0000
ROA not before: Wed 23 Sep 2026 09:21:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 141323
IP address blocks: 87.76.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 22:24:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:91:9d:15:fd:ff:5f:18:13:63:e6:84:31:19:51:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Sep 23 09:21:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6af088b0f08a270ac1a086f1c0752ceb93fb1282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c7:26:b9:cb:ec:bf:da:ea:bb:90:78:6a:34:
63:1b:d2:39:eb:37:e7:64:97:30:ef:b2:d0:f0:f7:
83:b4:e3:e0:18:df:0e:98:ff:a1:e7:78:51:f4:b9:
c6:f2:6e:70:da:18:e3:4d:b1:43:a2:7d:c3:fa:92:
d8:b9:30:3c:08:6f:99:83:c9:fb:a1:cb:5a:c5:32:
e4:13:57:93:3c:90:c1:67:c4:e8:a1:84:cf:8f:95:
37:e2:11:5d:50:20:4d:6c:24:61:75:53:03:f4:15:
16:51:35:ce:34:4f:12:e4:da:7a:26:37:d2:89:8a:
e7:27:47:e2:71:14:91:60:25:64:62:47:50:8c:da:
cd:41:3f:b0:6f:93:93:77:90:bd:7f:4c:71:74:a6:
96:f8:50:bb:a3:ea:06:17:4b:67:8e:e6:ea:d4:f1:
94:ad:a0:12:95:8b:f4:a0:aa:b0:f7:83:07:f2:91:
61:8e:bc:19:28:6d:bc:57:ee:14:c5:56:cd:4e:29:
79:1e:33:8a:e3:5b:d3:a6:68:1b:46:d6:1c:1b:4d:
d9:0d:42:87:ce:ba:52:1e:2a:a9:4f:e0:7b:6d:18:
7d:6d:58:7b:e6:77:54:3d:76:d1:44:c6:1d:82:7b:
1d:7e:71:24:8d:36:93:c1:46:2b:e8:21:c5:82:f6:
8c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:F0:88:B0:F0:8A:27:0A:C1:A0:86:F1:C0:75:2C:EB:93:FB:12:82
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/avCIsPCKJwrBoIbxwHUs65P7EoI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.205.0/24
Signature Algorithm: sha256WithRSAEncryption
69:05:21:93:53:30:85:6b:6c:a0:59:2a:11:ad:27:7d:32:46:
bd:17:be:fe:c1:20:5c:02:63:31:c9:e1:53:06:00:07:e7:d4:
7e:ef:7e:f4:6a:f0:af:38:c8:42:f8:98:b4:d9:75:60:31:dd:
dd:5c:66:97:97:c2:8f:3b:1d:ef:b0:49:ad:03:b3:77:73:9a:
41:58:a9:77:8f:ff:c3:47:6e:06:8c:0e:ed:3b:e1:09:8f:45:
dd:2a:d6:f3:a9:b9:42:12:df:ab:78:68:65:b2:b2:d6:dc:4b:
56:37:49:6d:89:8a:ed:c3:4d:c5:7c:99:0e:8f:89:55:08:9c:
9d:55:4e:b6:85:4b:1c:53:92:8b:6d:9b:1b:3e:a8:ff:79:ec:
5c:56:c3:0e:b5:00:05:8b:77:53:82:5e:72:af:e6:ec:6c:17:
e8:c8:c8:fa:c4:4c:dd:aa:80:4e:c4:9a:61:5e:59:1f:27:52:
4c:0c:21:12:80:00:8c:24:92:c3:aa:54:b9:02:03:e1:c4:59:
ec:db:4d:c1:2e:12:8e:ef:d3:7e:51:c5:04:a4:6c:96:bd:53:
21:d6:f6:d9:15:47:64:48:a0:e5:c2:64:54:31:97:3f:96:4e:
c8:23:0d:b6:ef:e9:8f:f6:8a:dc:10:46:55:4c:a4:71:15:5a:
f5:c3:a3:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 06:16:48 2026 by rpki-client