Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/jeKq5aPnxcc1FDXIeVjZsj2EXU8.roa
File: jeKq5aPnxcc1FDXIeVjZsj2EXU8.roa (raw, json)
Hash identifier: M9w6CsXtgRFnANt2vsUwxTnkrMvKT2nVn1QAjTrLZR0=
Subject key identifier: 8D:E2:AA:E5:A3:E7:C5:C7:35:14:35:C8:79:58:D9:B2:3D:84:5D:4F
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 019FBD159369B73CDE07F81139B40E9A7CD0
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/jeKq5aPnxcc1FDXIeVjZsj2EXU8.roa
Signing time: Sat 01 Aug 2026 11:28:55 +0000
ROA not before: Sat 01 Aug 2026 11:28:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 142514
IP address blocks: 87.76.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 16:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:bd:15:93:69:b7:3c:de:07:f8:11:39:b4:0e:9a:7c:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Aug 1 11:28:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8de2aae5a3e7c5c7351435c87958d9b23d845d4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4f:56:91:a6:26:c5:8f:78:7e:27:bb:46:05:
37:87:44:7a:59:2d:65:d6:09:3c:e3:54:ff:35:89:
71:ca:2f:ce:18:5e:f5:1c:64:b6:52:66:86:8a:ac:
9b:d0:61:4c:da:cd:d5:22:2d:a9:59:b4:3d:b7:c8:
37:6d:2a:93:4f:57:85:a3:85:7d:b1:09:6e:ed:43:
b7:86:bb:3d:19:78:a7:88:97:86:ce:32:ee:a1:2d:
9f:14:bd:6c:71:20:09:e8:9e:ac:99:a1:fe:0f:db:
18:0d:e2:d5:12:55:6a:ab:48:30:ce:b5:18:0e:36:
58:43:17:47:74:80:f3:9f:58:79:e0:bf:ed:af:4f:
74:40:d1:90:6a:cb:da:5d:9b:62:f2:4c:dd:28:f5:
9b:f2:02:a7:63:30:07:de:9c:a5:ee:45:e0:b1:43:
04:56:66:e9:b6:a4:7b:33:b3:c9:8d:77:2e:af:b1:
2c:50:54:d1:2e:f6:af:34:91:a2:9a:32:ba:94:4c:
fa:5c:8a:e7:ce:dc:4d:3c:77:1d:44:5d:e7:0f:5e:
95:1b:99:e1:7a:ac:65:32:19:43:6d:85:d1:40:55:
fa:bc:51:a7:c2:8a:da:95:3a:5a:c9:d7:b1:11:53:
7d:b2:55:ab:97:c5:2e:29:a1:7c:b3:6f:b9:0f:2f:
d4:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:E2:AA:E5:A3:E7:C5:C7:35:14:35:C8:79:58:D9:B2:3D:84:5D:4F
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/jeKq5aPnxcc1FDXIeVjZsj2EXU8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.189.0/24
Signature Algorithm: sha256WithRSAEncryption
90:32:4c:30:63:fb:cb:56:e3:40:7e:74:d8:bd:ff:b2:06:9d:
5a:fa:77:a8:f6:35:32:f8:03:9e:a0:5c:a3:a4:6a:5e:f2:d7:
82:b6:ea:d2:85:d9:2b:b6:35:e3:0d:dd:17:17:65:cd:25:65:
bc:c8:ab:66:44:a0:fe:3d:fe:ec:be:b6:03:80:da:7a:c8:6c:
45:6a:ac:bc:cd:0c:4e:bb:fc:42:17:8b:8b:bf:9d:b8:48:89:
57:49:3e:f0:00:1a:4d:9c:40:1c:19:13:bd:e7:5f:f0:9b:2d:
1d:5f:1e:ac:45:72:d6:75:71:ec:f6:ba:f9:3b:74:fb:0a:e8:
26:11:57:35:0a:02:16:e4:2b:a9:f3:16:ee:2d:46:88:42:70:
a9:46:59:24:50:2f:3e:1d:5a:c3:a2:8d:a9:13:4e:20:3b:69:
a1:8e:d5:a3:1f:16:55:bc:6c:1e:46:2c:1e:94:a0:93:71:00:
97:9f:0c:a2:67:8e:3e:b0:0f:d2:88:9e:97:b7:e0:29:1d:0d:
e1:2c:3b:61:03:ac:b6:ef:30:b8:6a:9b:72:d2:0d:f8:b4:fd:
37:29:e1:a4:12:bf:47:03:fb:70:e0:aa:a8:7b:01:41:7a:06:
a2:dd:bf:f0:5d:d1:68:8a:f7:80:0e:ee:98:76:b9:59:da:f0:
60:de:34:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 21:25:35 2026 by rpki-client