Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/bvJRM0EZAKR4Vvb7rGOnXg-pzes.roa
File: bvJRM0EZAKR4Vvb7rGOnXg-pzes.roa (raw, json)
Hash identifier: IZ0gNNVUenorbeyRFbd9J8Tlf+k47yKkKaop/Mk5dmA=
Subject key identifier: 6E:F2:51:33:41:19:00:A4:78:56:F6:FB:AC:63:A7:5E:0F:A9:CD:EB
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 019E21656056C3C15410539B58DDF69BCA11
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/bvJRM0EZAKR4Vvb7rGOnXg-pzes.roa
Signing time: Wed 13 May 2026 12:52:32 +0000
ROA not before: Wed 13 May 2026 12:52:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 87.76.212.0/24 maxlen: 24
87.76.213.0/24 maxlen: 24
87.76.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 15 May 2026 23:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:21:65:60:56:c3:c1:54:10:53:9b:58:dd:f6:9b:ca:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: May 13 12:52:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6ef25133411900a47856f6fbac63a75e0fa9cdeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:56:ba:d4:e2:7f:f3:b7:a5:b6:fd:34:e6:cb:
59:ca:b5:98:2b:6f:d5:fc:0b:3d:22:a9:46:c1:c2:
1c:1c:f3:50:2d:74:23:e1:38:9f:21:d4:8b:5c:cc:
35:77:30:e9:a3:df:a8:d3:f6:c3:e1:38:79:b0:33:
92:61:dc:01:0c:e6:3e:ab:e9:6a:3b:c4:6c:72:dd:
cc:63:37:3d:61:b4:61:75:ec:7f:41:1e:1a:e3:48:
c8:68:7e:02:37:40:ca:8a:50:31:72:bd:e6:8c:75:
e4:81:35:ae:8e:b9:44:07:d9:25:03:ef:8a:8d:66:
34:e0:92:fa:20:66:94:96:8f:7a:19:37:59:27:38:
af:5c:6b:b7:c2:7a:72:c2:98:2e:ff:1c:fe:d7:d3:
aa:b1:c2:c1:08:24:37:bc:1d:00:37:c2:0c:9b:bf:
66:f5:d3:3b:50:26:27:78:95:7d:a3:92:cb:4f:78:
0e:d0:25:c4:41:ed:f5:59:04:68:30:38:f3:a2:7b:
3e:cc:bc:ba:e4:35:fc:f8:c7:b1:90:f2:e6:30:b7:
41:e9:51:70:54:7f:de:df:38:c5:37:6f:2e:0a:a3:
7e:85:8d:e7:8c:f5:ef:04:e7:2a:6e:c7:40:95:94:
ec:9e:60:18:ed:c1:ce:72:ed:d0:0b:89:1f:e0:4f:
f8:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:F2:51:33:41:19:00:A4:78:56:F6:FB:AC:63:A7:5E:0F:A9:CD:EB
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/bvJRM0EZAKR4Vvb7rGOnXg-pzes.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.212.0-87.76.214.255
Signature Algorithm: sha256WithRSAEncryption
02:9e:b2:b9:50:a1:be:15:a3:a2:aa:83:68:4c:e8:d1:e1:79:
af:ad:7f:6b:29:72:4a:1c:ad:68:20:92:59:5b:47:43:9a:35:
c4:f4:1d:1b:d5:1c:0b:3b:6c:4c:24:cf:69:f5:d3:08:85:e0:
2c:11:38:f3:61:ca:11:ee:b1:9d:b9:d1:d7:12:fd:41:47:eb:
c8:f9:f5:ff:8b:f6:44:da:b6:8e:34:03:f7:72:b2:6f:63:a1:
01:0e:b1:d0:bd:04:5d:59:cb:99:ea:1d:67:e6:70:54:b4:ab:
2f:f6:bb:bd:55:0d:70:66:87:3e:a0:75:73:01:61:b4:c2:24:
03:26:50:da:bb:28:fc:49:f9:be:e6:40:3b:73:0f:38:91:5e:
29:1c:82:68:7e:85:01:bd:58:16:ee:8a:af:f6:25:6b:21:94:
75:99:33:c8:41:77:54:1a:32:d0:dd:3a:c1:a5:12:1d:2f:a4:
44:f6:95:da:a4:04:b9:1b:9a:3f:d0:5e:2b:8a:b1:ec:df:3f:
f8:c3:19:e2:08:38:d3:e4:05:ea:af:df:f6:df:22:54:ef:ef:
ac:7c:73:cc:5d:14:da:d5:e3:2f:6c:fa:84:cb:f1:9c:3b:38:
7d:67:3d:e1:f3:78:35:95:77:13:51:1a:24:6b:63:8c:ab:aa:
83:7e:9f:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 08:17:32 2026 by rpki-client