Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/nlOmJjZw7i5NrksfmugyHbRXSNE.roa
File: nlOmJjZw7i5NrksfmugyHbRXSNE.roa (raw, json)
Hash identifier: kvDMjqyw2HT6CYCRL6pa6+2V19glHcF3kCtNpRcSYec=
Subject key identifier: 9E:53:A6:26:36:70:EE:2E:4D:AE:4B:1F:9A:E8:32:1D:B4:57:48:D1
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 01A019B292C8148C7F1A2C200A03734E1160
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/nlOmJjZw7i5NrksfmugyHbRXSNE.roa
Signing time: Wed 19 Aug 2026 11:05:28 +0000
ROA not before: Wed 19 Aug 2026 11:05:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207483
IP address blocks: 87.76.154.0/24 maxlen: 24
87.76.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:19:b2:92:c8:14:8c:7f:1a:2c:20:0a:03:73:4e:11:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Aug 19 11:05:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9e53a6263670ee2e4dae4b1f9ae8321db45748d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e1:8d:a0:0c:6e:34:d2:7a:64:00:2e:0e:c0:
a5:0b:b5:3d:62:d4:2d:94:53:8c:dc:fe:9d:2d:9b:
ed:7b:45:29:64:89:65:3d:d1:60:2d:a7:99:33:c2:
d3:15:4e:8d:bd:ec:db:eb:79:6c:6b:dc:d7:c9:ce:
04:6b:63:53:b4:a4:f4:91:ab:23:e4:77:7d:31:70:
57:ba:a5:40:96:16:45:cb:3b:4b:cb:cf:e8:45:39:
4a:b0:ad:0d:76:27:a4:de:0e:ee:57:6b:18:02:ad:
2a:84:6f:b5:2c:b5:52:2e:55:48:3a:f2:49:16:c2:
3d:b7:06:16:1c:f3:d6:e6:1b:8f:94:7a:b4:f1:26:
8f:a8:e8:48:7b:c4:83:6e:e8:73:dd:86:9f:23:ec:
58:16:9a:0f:d4:3a:7b:4c:41:14:65:08:4c:06:e1:
76:e2:8d:f4:16:63:0d:f0:19:ca:5d:d3:60:38:19:
ad:6e:d1:5d:a6:cb:a8:31:ec:72:1d:1b:74:7a:33:
2b:9d:89:55:ff:52:6c:3f:ff:5a:ea:ea:0a:4c:ee:
06:ed:03:84:46:08:68:e8:03:cf:1b:19:5f:09:55:
b2:27:3f:d9:a3:05:21:7d:23:f3:d8:d2:4a:ca:c0:
9d:83:30:45:a1:5b:28:d1:39:95:60:3b:08:54:c0:
c6:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:53:A6:26:36:70:EE:2E:4D:AE:4B:1F:9A:E8:32:1D:B4:57:48:D1
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/nlOmJjZw7i5NrksfmugyHbRXSNE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.154.0/24
87.76.156.0/24
Signature Algorithm: sha256WithRSAEncryption
38:be:c2:cb:2e:6d:f2:ff:6f:56:48:09:9b:60:bb:b9:e3:29:
b5:37:d1:f4:bc:8a:78:34:36:1c:1f:42:29:f8:aa:d9:af:43:
b2:b1:c2:b9:b8:ec:93:58:63:e0:23:08:8f:37:53:da:e9:37:
54:11:a7:d6:ce:fb:ad:6b:90:69:e3:63:ab:dc:90:a3:36:55:
1e:fd:84:96:13:33:ae:ae:2e:77:c6:11:3c:cd:f9:18:8d:4a:
c2:6d:55:35:58:93:35:ac:f4:d0:47:83:5b:92:35:07:94:b3:
35:cc:e7:2c:7d:fd:5a:43:de:1f:0d:c0:6d:6d:5f:a2:76:cd:
65:f9:40:0f:21:15:6b:62:51:d8:90:0f:02:de:45:6a:b0:e6:
49:07:fb:15:94:6a:9f:04:1d:31:0a:b9:41:bb:56:89:e9:bd:
e3:ad:d2:51:65:ac:8b:20:12:90:9c:5a:4e:fd:c9:da:e4:69:
6b:2f:23:22:8b:99:eb:e6:6f:3f:66:1a:0e:68:77:4d:40:45:
49:98:51:57:0f:e8:08:23:99:21:b7:42:20:36:34:53:e0:6d:
a5:c1:44:a8:99:9b:41:65:cd:28:d0:b6:6e:82:03:2e:9d:d7:
c4:91:7c:fd:59:99:14:3b:5e:5f:b1:45:ab:f2:4d:ae:67:a5:
70:d0:f6:85
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaAZspLIFIx/GiwgCgNzThFgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyMWYwY2JhMTBkYWEzMDJlM2IxNjdjZWU1Mzk1Zjc0MmY1
MzBiMDkwHhcNMjYwODE5MTEwNTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZTUzYTYyNjM2NzBlZTJlNGRhZTRiMWY5YWU4MzIxZGI0NTc0OGQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruGNoAxuNNJ6ZAAuDsClC7U9YtQt
lFOM3P6dLZvte0UpZIllPdFgLaeZM8LTFU6Nvezb63lsa9zXyc4Ea2NTtKT0kasj
5Hd9MXBXuqVAlhZFyztLy8/oRTlKsK0Ndiek3g7uV2sYAq0qhG+1LLVSLlVIOvJJ
FsI9twYWHPPW5huPlHq08SaPqOhIe8SDbuhz3YafI+xYFpoP1Dp7TEEUZQhMBuF2
4o30FmMN8BnKXdNgOBmtbtFdpsuoMexyHRt0ejMrnYlV/1JsP/9a6uoKTO4G7QOE
Rgho6APPGxlfCVWyJz/ZowUhfSPz2NJKysCdgzBFoVso0TmVYDsIVMDGUwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFJ5TpiY2cO4uTa5LH5roMh20V0jRMB8GA1UdIwQY
MBaAFFIfDLoQ2qMC47FnzuU5X3QvUwsJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWg4TXVoRGFvd0xqc1dmTzVUbGZkQzlUQ3drLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82OGNlMzYtNzRlNC00NDNiLWFlZjEt
M2JiOGIwNzVkNjlmLzEvbmxPbUpqWnc3aTVOcmtzZm11Z3lIYlJYU05FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82OGNlMzYtNzRlNC00NDNiLWFlZjEtM2JiOGIwNzVkNjlm
LzEvVWg4TXVoRGFvd0xqc1dmTzVUbGZkQzlUQ3drLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAV0yaAwQA
V0ycMA0GCSqGSIb3DQEBCwUAA4IBAQA4vsLLLm3y/29WSAmbYLu54ym1N9H0vIp4
NDYcH0Ip+KrZr0OyscK5uOyTWGPgIwiPN1Pa6TdUEafWzvuta5Bp42Or3JCjNlUe
/YSWEzOuri53xhE8zfkYjUrCbVU1WJM1rPTQR4NbkjUHlLM1zOcsff1aQ94fDcBt
bV+ids1l+UAPIRVrYlHYkA8C3kVqsOZJB/sVlGqfBB0xCrlBu1aJ6b3jrdJRZayL
IBKQnFpO/cna5GlrLyMii5nr5m8/ZhoOaHdNQEVJmFFXD+gII5kht0IgNjRT4G2l
wUSomZtBZc0o0LZuggMundfEkXz9WZkUO15fsUWr8k2uZ6Vw0PaF
-----END CERTIFICATE-----
Generated at Sat Sep 5 00:21:03 2026 by rpki-client