Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/erAqQdv4ek0okgzNUjEJUbHDl-M.roa
File: erAqQdv4ek0okgzNUjEJUbHDl-M.roa (raw, json)
Hash identifier: UjC8V5nT2fjyaHmBG/uU01LBvVikDDo0eoyOrTbxKr4=
Subject key identifier: 7A:B0:2A:41:DB:F8:7A:4D:28:92:0C:CD:52:31:09:51:B1:C3:97:E3
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 019D2A070A7A52CC2FEFCDCF71224CF351E6
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/erAqQdv4ek0okgzNUjEJUbHDl-M.roa
Signing time: Thu 26 Mar 2026 12:03:17 +0000
ROA not before: Thu 26 Mar 2026 12:03:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401776
IP address blocks: 87.76.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Mar 2026 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:07:0a:7a:52:cc:2f:ef:cd:cf:71:22:4c:f3:51:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Mar 26 12:03:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7ab02a41dbf87a4d28920ccd52310951b1c397e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:89:81:a4:c3:65:53:0f:70:c4:2a:7a:89:01:
f5:c1:2c:b3:99:06:de:40:a0:4c:8d:fa:51:6a:d8:
60:c0:94:79:d9:98:fb:cc:74:55:ff:18:50:f6:5b:
c4:13:00:2c:63:ea:60:69:2a:24:32:4e:91:23:a1:
81:15:ac:ab:81:e8:2b:69:69:52:b3:70:dc:a3:03:
41:c7:60:ce:a2:1e:ca:6f:79:52:da:aa:30:09:c5:
8b:9c:a3:93:89:9c:17:c3:c2:06:2a:9f:cd:af:be:
6f:af:d7:0e:a2:50:58:9c:5a:77:97:00:ee:7f:0e:
bf:8e:e2:9d:cf:9b:c3:a5:2a:83:31:be:b3:0e:75:
24:0d:8b:07:ce:f1:e6:3d:f9:6e:a1:b3:66:cd:d7:
92:c1:f3:1c:95:c4:e4:2f:7c:9d:02:be:e6:98:85:
33:fe:c7:1c:a5:9b:8a:ef:cb:32:84:a5:b4:41:5d:
bb:3b:26:25:2f:3f:28:f4:c8:2b:0d:15:ca:38:be:
4d:f3:34:75:f5:15:50:78:4b:9a:b1:c2:e0:8a:a4:
f7:3a:0f:65:6b:ec:3a:d7:8b:cc:9d:1a:35:7b:58:
ec:37:7b:6a:a5:1b:b5:e7:36:35:51:0c:bb:5a:92:
c6:2b:98:83:e2:b3:13:89:0b:bd:dc:05:33:36:3e:
5d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:B0:2A:41:DB:F8:7A:4D:28:92:0C:CD:52:31:09:51:B1:C3:97:E3
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/erAqQdv4ek0okgzNUjEJUbHDl-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.185.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:f6:68:26:37:a8:8d:d9:f1:2d:43:15:c3:e2:08:0b:54:b5:
8d:a4:c9:76:4b:1a:58:79:d5:3c:da:7b:94:0f:c6:b0:20:06:
1c:c0:22:93:2a:e7:42:02:20:8e:32:14:2f:2b:65:f1:7c:af:
30:51:32:e2:cd:20:69:71:56:07:d9:e3:e2:b4:32:36:8a:c4:
83:46:10:20:e2:39:4f:34:ae:82:bc:91:72:1d:a4:0e:4b:a4:
ac:d6:8f:70:dd:f3:92:90:31:27:d2:8a:81:e5:b5:25:53:c8:
a8:a5:ea:ff:0f:9d:2b:00:5b:cb:aa:c4:11:91:b5:4b:47:bf:
cf:ce:f9:d1:d6:52:f9:b1:e4:fe:4c:6a:54:75:31:27:d2:3d:
da:a9:8b:6f:49:8f:13:51:75:ed:10:8c:ec:90:d0:41:34:ae:
fe:0e:f8:0b:e3:a4:c3:92:48:2e:11:94:c3:f2:b0:6c:7e:0e:
11:65:c7:b5:74:7e:27:54:cd:3f:30:15:a2:90:1e:e3:0b:32:
ec:93:8e:b6:e8:c8:1d:f4:dc:a4:53:c5:45:fe:2c:7d:e6:14:
f6:df:19:b1:23:a4:13:5f:e5:2b:16:fc:f6:bc:6c:ce:f9:af:
ce:ef:c5:46:84:d5:fb:48:02:27:99:84:f5:09:c1:dd:1a:5a:
4a:d7:0c:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 12:05:38 2026 by rpki-client