Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/k2R8pFDqlKl2UL9ZzpuWEtd9FP8.roa
File: k2R8pFDqlKl2UL9ZzpuWEtd9FP8.roa (raw, json)
Hash identifier: 0CpYeZH6JO5DbXzIpWCdryk44dGY8VQ8jv/8eAVfLNc=
Subject key identifier: 93:64:7C:A4:50:EA:94:A9:76:50:BF:59:CE:9B:96:12:D7:7D:14:FF
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 019F45BD4F67C9D31F735DDAC9A883C2CD93
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/k2R8pFDqlKl2UL9ZzpuWEtd9FP8.roa
Signing time: Thu 09 Jul 2026 07:17:42 +0000
ROA not before: Thu 09 Jul 2026 07:17:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206446
IP address blocks: 87.76.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 13:09:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:45:bd:4f:67:c9:d3:1f:73:5d:da:c9:a8:83:c2:cd:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Jul 9 07:17:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=93647ca450ea94a97650bf59ce9b9612d77d14ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:c5:f3:9a:d7:a7:14:a4:b6:56:d1:9b:1c:4a:
e3:4b:e8:77:dc:4d:89:66:ab:2a:be:4e:f2:73:6d:
fe:47:b8:a2:6e:32:85:ab:ae:73:5a:50:ca:d6:46:
d0:b6:cb:7b:7d:9d:ef:94:69:ef:5d:0e:a1:d4:d4:
66:aa:95:88:17:b7:08:be:98:76:91:6c:ed:37:87:
74:ab:ba:26:e4:98:cf:5c:a7:f1:70:8d:b5:9f:6c:
bc:8d:3c:57:bd:05:1e:53:87:c1:1b:4c:e3:ef:3b:
81:2b:21:fd:77:a0:de:2b:ea:57:ec:2e:c1:aa:59:
b3:b3:30:c4:73:ec:22:71:81:a2:ac:f4:59:8d:7c:
dd:05:aa:ce:dc:e6:d2:50:37:f3:25:31:a8:16:b1:
b0:ea:c5:ab:aa:14:35:78:cb:6f:7b:e5:70:12:dd:
68:b1:ee:06:6a:19:ff:82:83:96:f0:4d:a2:7c:b0:
14:1c:23:75:e2:bd:89:f4:c7:d5:3e:ea:be:4c:c4:
ca:05:f6:ba:20:49:3e:f9:1e:0c:80:4a:46:22:7d:
e9:7d:27:99:94:53:e2:5e:bc:54:64:47:11:7d:62:
8a:2d:e0:11:53:ea:e7:0c:c8:45:4b:43:99:66:cf:
49:71:eb:92:4b:fe:11:55:3a:09:94:c0:e4:5f:32:
eb:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:64:7C:A4:50:EA:94:A9:76:50:BF:59:CE:9B:96:12:D7:7D:14:FF
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/k2R8pFDqlKl2UL9ZzpuWEtd9FP8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.132.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:0a:8c:91:da:1e:4c:f2:1d:c9:c8:49:fc:87:35:5e:eb:ac:
c8:18:cb:db:1e:14:70:b6:0e:54:5f:ca:1c:b7:b5:fd:14:10:
5c:20:cc:e0:e0:53:47:ea:c3:d1:12:9b:bf:18:7a:8a:14:e1:
d5:89:cb:e3:c8:1f:5f:ae:bf:04:f3:24:28:7c:6b:29:d8:28:
61:39:90:40:cb:93:c5:28:39:99:5b:8a:16:fc:bd:c4:0f:2b:
61:fb:87:9f:1e:51:14:3c:4e:71:c6:bd:8a:c1:d9:f2:79:49:
f3:b1:12:e6:5d:e7:bf:1a:87:62:13:b1:1c:31:6f:5b:60:b8:
2a:ba:eb:32:b4:78:7b:16:c5:d2:88:7e:4a:f4:13:9d:14:14:
23:0f:2c:0e:ba:6a:87:ad:dd:20:84:30:f2:e8:fb:24:4f:7d:
0e:9f:29:f3:c9:ab:a2:d2:77:e6:7e:2c:0c:13:de:55:43:7e:
9a:6e:89:99:fc:f8:7a:65:09:17:c4:d9:59:9d:97:e1:6c:25:
97:49:a9:ce:39:1a:96:2a:3e:4f:67:59:7f:83:da:c1:3b:df:
2c:c9:38:2c:9d:30:2f:2c:a2:79:cc:07:ca:b1:92:43:87:f5:
82:e4:11:93:94:89:82:b4:ba:71:7e:0a:c9:40:3a:f6:79:1b:
5c:2d:5f:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:29:44 2026 by rpki-client