Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/nof3SaE8lbg06iQgRzkz32RZnDg.roa
File: nof3SaE8lbg06iQgRzkz32RZnDg.roa (raw, json)
Hash identifier: dcq1n/N6pf1Us1S05c8N3ZBbdAkmT/rQTVvqWr+aRqU=
Subject key identifier: 9E:87:F7:49:A1:3C:95:B8:34:EA:24:20:47:39:33:DF:64:59:9C:38
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 019FE6DE882D4EC5D9AEA4B9FCE8CBA08C8F
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/nof3SaE8lbg06iQgRzkz32RZnDg.roa
Signing time: Sun 09 Aug 2026 14:12:51 +0000
ROA not before: Sun 09 Aug 2026 14:12:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214432
IP address blocks: 87.76.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 16:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:e6:de:88:2d:4e:c5:d9:ae:a4:b9:fc:e8:cb:a0:8c:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Aug 9 14:12:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9e87f749a13c95b834ea2420473933df64599c38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fa:e4:15:1f:ac:0d:f0:29:22:44:98:e9:f7:
b0:20:ba:66:a6:84:0b:7c:07:cf:c6:9a:75:4c:56:
13:e9:10:0c:83:c4:81:8b:9a:aa:96:16:14:f8:93:
4c:4e:3c:76:4a:86:f7:71:41:f4:4e:ec:c7:74:de:
40:b3:32:31:be:71:1a:63:93:49:4c:4b:fc:ce:3c:
09:79:1f:04:b2:57:1c:5f:bc:d3:74:38:e4:44:d1:
3d:51:4e:6c:64:db:a5:97:2c:37:d1:bd:e3:87:ae:
1d:54:c5:33:3b:8a:e2:f8:e7:8a:4b:cb:ac:54:3a:
fc:1c:d5:65:1b:76:7a:f7:97:86:cf:e6:fe:58:b9:
68:8e:63:0f:37:1c:fa:11:15:28:29:a6:5e:9f:e1:
58:d4:7e:dd:d8:89:ed:ca:75:1d:d0:1d:7f:cb:26:
4f:14:d4:1d:5a:db:55:cb:29:ce:81:02:d6:eb:fc:
99:a0:2c:bc:b8:cc:65:d3:56:aa:55:a3:b0:dc:70:
cd:39:fc:cb:76:8e:cc:31:a2:1c:eb:9a:4f:6f:d9:
70:85:ec:42:5c:43:33:8c:11:fe:e1:b9:7e:47:fc:
55:20:f8:dc:95:59:66:ea:0a:1d:ce:1b:84:a4:a6:
d6:e7:4c:fb:f6:fe:b6:a5:c7:02:1b:c4:bf:07:1e:
11:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:87:F7:49:A1:3C:95:B8:34:EA:24:20:47:39:33:DF:64:59:9C:38
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/nof3SaE8lbg06iQgRzkz32RZnDg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.210.0/24
Signature Algorithm: sha256WithRSAEncryption
51:74:4d:81:24:75:ff:13:bf:78:97:3b:52:bb:84:f9:0a:5d:
f6:b0:e0:1f:6e:b4:b5:50:4d:c4:f4:b4:5a:25:54:7e:57:18:
02:c0:9c:e7:0c:7e:12:5b:ee:d0:c6:23:62:f9:69:af:eb:da:
ba:23:28:f8:0f:8b:96:0c:65:c4:59:01:b7:bb:08:a0:b7:7c:
cb:3c:d7:cd:d2:43:f4:50:54:dd:6a:74:6a:40:8a:af:7b:10:
1c:4f:ee:39:fb:56:01:c5:d0:9a:62:67:0d:43:8c:60:04:e4:
db:09:ef:94:8c:d4:5f:ae:39:c3:d1:ab:41:c8:03:89:e3:62:
fa:6c:d8:a7:e4:7a:85:4b:82:99:00:a8:00:3b:c7:5b:a8:91:
b4:f5:ad:7c:27:4e:b3:b9:f4:6e:b6:bb:74:15:3b:ab:87:ef:
7c:2b:69:2d:7e:70:d0:01:b8:f3:93:c1:4f:ae:a5:09:6b:73:
4a:6b:79:dd:cd:de:e9:10:c5:8c:ca:f8:70:b2:36:37:59:bb:
09:08:57:2b:bc:97:0c:b0:23:f3:6e:08:6c:89:c5:79:a6:fd:
19:9c:ce:a4:e6:e4:2c:33:65:53:c2:cf:ce:2e:9f:e4:2b:c8:
73:a6:76:4f:df:16:24:47:7c:b5:e0:19:b7:03:13:e9:94:dc:
7a:48:82:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 21:26:12 2026 by rpki-client