Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/gtj5dMg8fnMznzwgqaLKpaildA8.roa
File: gtj5dMg8fnMznzwgqaLKpaildA8.roa (raw, json)
Hash identifier: RasR8oHreYmZ1ISuEPsaoQ4XBQmdeukPCLFP1py4xyw=
Subject key identifier: 82:D8:F9:74:C8:3C:7E:73:33:9F:3C:20:A9:A2:CA:A5:A8:A5:74:0F
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 019FAAB7B7E26E2F7071C082D5A8759A4FE7
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/gtj5dMg8fnMznzwgqaLKpaildA8.roa
Signing time: Tue 28 Jul 2026 21:53:14 +0000
ROA not before: Tue 28 Jul 2026 21:53:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210574
IP address blocks: 87.76.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Aug 2026 12:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:b7:b7:e2:6e:2f:70:71:c0:82:d5:a8:75:9a:4f:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Jul 28 21:53:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=82d8f974c83c7e73339f3c20a9a2caa5a8a5740f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7a:d2:f4:ee:95:27:ed:51:00:5e:d3:3a:9e:
0c:38:4c:aa:95:9c:6f:69:40:80:1c:ef:26:d2:1c:
80:01:a4:76:87:83:7d:72:fd:da:2d:ee:7f:35:f3:
a5:98:9f:de:f6:16:36:32:ad:14:63:d4:0a:40:77:
cb:77:bc:17:23:71:74:8a:01:20:8b:ed:a2:af:7e:
f3:c3:06:03:08:50:42:4a:f6:64:ce:39:2b:90:6b:
24:48:53:35:1b:8b:34:1e:a5:3d:76:0c:c7:c4:ec:
da:12:82:d7:32:5f:00:de:be:65:53:3b:90:59:7f:
de:4c:01:c7:ef:14:08:1a:64:7b:03:3c:d4:1e:ab:
6a:75:ce:1e:b7:bb:ac:4b:6e:50:7e:66:5f:dc:e7:
70:5f:4a:be:72:57:7a:5f:f3:1c:a2:87:8d:60:27:
fb:e4:60:92:9b:0f:55:60:00:39:07:22:fc:41:69:
71:3b:0d:4e:8a:a3:a3:f8:df:73:f4:df:e0:4b:52:
84:b6:3d:6e:55:99:75:16:92:25:e5:70:9d:91:ce:
f7:de:3a:76:21:0c:14:76:f2:32:cb:4d:7e:bd:45:
a2:b3:6e:ad:23:34:e1:d1:67:86:e0:d0:33:07:07:
97:82:ca:cc:0c:f6:d3:64:aa:0e:e6:21:20:c4:8f:
96:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:D8:F9:74:C8:3C:7E:73:33:9F:3C:20:A9:A2:CA:A5:A8:A5:74:0F
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/gtj5dMg8fnMznzwgqaLKpaildA8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.139.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:dd:53:34:e4:39:08:43:e9:de:96:73:f1:d6:ac:b1:79:bf:
0c:6e:c7:0f:5e:20:bb:cc:96:1d:55:a5:e1:09:d4:d2:b7:a0:
d4:3b:67:68:3a:98:2b:7b:25:b2:12:ca:47:03:ae:c6:39:81:
89:d9:2b:96:2b:90:9c:32:71:e5:8a:6a:64:6a:67:8c:13:65:
2b:8b:a1:ab:b9:11:64:f3:b1:59:86:76:ad:9d:d9:d5:d0:c6:
9a:20:12:77:27:59:bd:0a:a5:41:3e:b1:84:29:e6:65:7e:36:
30:89:bc:31:23:e3:17:81:8d:12:ab:71:c0:2c:78:c8:39:99:
1c:91:c8:4c:12:17:63:c1:30:17:be:d7:9d:60:62:c6:a0:93:
fc:db:df:2b:eb:c0:d1:65:e0:96:d7:7f:5c:1d:ec:51:86:e9:
2e:4e:12:5c:61:71:11:7b:d6:55:63:a2:55:c2:2f:68:95:34:
db:5a:86:04:05:20:1e:36:7a:d5:70:f7:7a:69:ee:05:23:9d:
53:b1:2e:32:60:70:3b:4d:8e:03:26:b6:a3:ac:4e:cf:51:d4:
8d:b9:52:07:24:3b:3e:b0:26:66:33:95:ce:92:c5:fb:53:c7:
a0:6a:de:c2:cb:7d:76:ca:8c:d5:21:7d:49:fd:c7:d6:a7:68:
15:ce:a7:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 5 21:42:43 2026 by rpki-client