Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/l1KFiLyNdyeunkkNIdQ2O4nT0xo.roa
File: l1KFiLyNdyeunkkNIdQ2O4nT0xo.roa (raw, json)
Hash identifier: +lUlFH3hSzJoHRo1ov+gDqA1FB9iza360XncXffz1cw=
Subject key identifier: 97:52:85:88:BC:8D:77:27:AE:9E:49:0D:21:D4:36:3B:89:D3:D3:1A
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 019FCC31AF93814BE275ABF3D6F4D8B5D023
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/l1KFiLyNdyeunkkNIdQ2O4nT0xo.roa
Signing time: Tue 04 Aug 2026 09:53:56 +0000
ROA not before: Tue 04 Aug 2026 09:53:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211859
IP address blocks: 87.76.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 16:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cc:31:af:93:81:4b:e2:75:ab:f3:d6:f4:d8:b5:d0:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Aug 4 09:53:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=97528588bc8d7727ae9e490d21d4363b89d3d31a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:14:3d:3d:c4:9e:21:f4:e2:62:dd:b8:11:ca:
ab:ea:9d:df:c8:da:44:4b:c2:22:ba:a6:89:e1:2e:
28:f9:1a:66:94:1e:bf:63:37:c4:bc:80:2f:4d:64:
67:ef:4e:ff:be:e0:09:22:3d:b3:99:47:49:2a:49:
d0:78:fe:74:c5:83:74:cd:3c:99:3d:f4:d6:73:ca:
8f:b1:50:cf:d4:9c:f1:5c:94:7e:ab:07:18:cf:2b:
1e:39:b8:ae:9a:ef:a6:f6:5e:8a:75:6c:6a:38:51:
7b:db:41:7c:0d:f4:8b:8b:e9:d2:17:d1:f0:e9:69:
d8:3f:fb:c7:b9:76:ea:c7:0f:08:0e:fe:d3:28:ba:
71:aa:fb:97:a3:26:25:a8:7e:78:90:fe:27:f5:fc:
e9:df:22:ca:8e:33:d3:9f:d2:63:0f:a6:8e:f5:ef:
44:75:c9:68:f8:d9:b5:02:9f:c5:44:ca:a0:2b:7f:
5d:ec:02:5d:5e:9c:f2:00:d9:e4:65:ce:8b:d0:98:
48:5f:cb:30:8e:95:ee:47:cc:2a:4e:b8:16:90:85:
3e:2a:b0:65:23:fc:9e:f3:99:33:d5:90:c7:02:79:
00:a7:66:c3:bf:a3:df:8f:c6:46:c7:f5:e9:61:9f:
22:fc:c0:2f:c3:a7:66:ce:1d:e9:1e:8c:3d:79:55:
79:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:52:85:88:BC:8D:77:27:AE:9E:49:0D:21:D4:36:3B:89:D3:D3:1A
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/l1KFiLyNdyeunkkNIdQ2O4nT0xo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.195.0/24
Signature Algorithm: sha256WithRSAEncryption
01:70:81:4e:9c:a5:da:e1:ee:25:ce:5d:02:60:c9:28:2d:07:
8c:25:fd:f7:f3:f1:8a:47:b7:4b:08:9c:7e:0a:0e:07:29:35:
0a:2c:30:19:0b:35:ae:0e:95:3f:11:ac:2b:35:c5:bb:a3:7d:
bd:f3:37:aa:3a:56:a3:2c:52:c3:0d:8a:bc:77:05:f6:4c:94:
90:07:fc:7b:8f:f3:81:68:4d:5a:08:b1:da:c4:af:6b:9f:52:
12:dc:34:63:da:8b:9f:45:6c:a7:e5:67:73:e0:3e:84:4f:7b:
66:9a:64:1d:7f:e6:f0:34:dc:72:80:39:44:28:69:96:aa:c8:
71:46:e4:1f:15:53:d2:be:b4:9f:8d:e9:28:6a:50:fc:03:0f:
5d:f5:20:fe:d2:a0:45:60:56:ff:7f:16:25:d5:5b:0a:53:61:
ef:f5:4f:69:5c:d1:69:63:12:e9:12:35:df:17:23:8b:60:2d:
0b:0b:68:b2:1e:20:b8:c5:62:f5:89:ee:19:90:f7:78:fc:4a:
13:27:c5:f4:49:38:4b:4e:bb:0f:9c:8d:b2:f7:03:71:87:fa:
8c:10:4c:23:e9:b2:da:e6:2a:4a:9f:12:0c:7f:d2:a2:d8:9e:
84:0e:7a:ca:68:16:50:45:8c:d1:c1:54:49:de:b1:49:78:7a:
bc:20:89:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 21:25:52 2026 by rpki-client