Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/ovQZBEjU5EjIGWalj1FpKGZSEeg.roa
File: ovQZBEjU5EjIGWalj1FpKGZSEeg.roa (raw, json)
Hash identifier: AUNR8zo+u6x8iJazSFpIFvZGJuWt9V8YfWaFwhW/rfE=
Subject key identifier: A2:F4:19:04:48:D4:E4:48:C8:19:66:A5:8F:51:69:28:66:52:11:E8
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 01A042A2F06764903E6AA22EE83C8CA7DBE9
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/ovQZBEjU5EjIGWalj1FpKGZSEeg.roa
Signing time: Thu 27 Aug 2026 09:52:49 +0000
ROA not before: Thu 27 Aug 2026 09:52:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 151704
IP address blocks: 87.76.149.0/24 maxlen: 24
87.76.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:42:a2:f0:67:64:90:3e:6a:a2:2e:e8:3c:8c:a7:db:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Aug 27 09:52:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a2f4190448d4e448c81966a58f516928665211e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:96:20:cc:dc:ed:6f:ca:06:87:93:95:47:44:
76:1f:d6:6c:f0:36:5e:40:85:c8:03:99:48:1f:87:
6a:52:b3:16:a6:ac:94:c9:b1:b7:eb:bc:ac:e0:37:
64:4d:cd:f5:89:9b:13:64:ea:1c:28:4b:60:c9:87:
63:50:47:fe:fd:bb:bf:b8:8f:d9:97:97:91:95:25:
0d:99:54:62:ab:32:c8:2a:05:a1:7e:5b:26:88:c0:
e4:2e:f4:02:c7:5b:bb:4f:8c:09:a7:43:cc:3a:86:
2c:00:71:e0:0e:5f:cd:1b:75:32:f8:82:49:62:8c:
5b:b5:ef:f9:3d:31:42:65:f4:5f:39:aa:2f:c1:35:
e2:b2:ed:a7:dc:99:56:28:60:c1:64:14:93:9f:9e:
2e:3b:79:25:5c:c0:ff:0a:46:e8:90:6c:14:e5:82:
e4:89:e2:75:e4:3b:e4:70:0e:b6:fb:ab:f6:41:6d:
51:ac:72:36:cf:1d:8f:c7:a1:8d:19:c1:80:dc:38:
b3:b2:d3:b3:da:c2:7f:3f:9b:b9:ef:99:35:48:bf:
5a:f2:b8:a7:a3:5e:67:ca:ea:82:20:5f:68:2f:c8:
1e:3f:43:bf:77:fd:61:83:3e:3e:00:73:be:d9:25:
53:d2:33:18:1c:c8:9d:c0:be:3c:a1:d3:40:20:5c:
26:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:F4:19:04:48:D4:E4:48:C8:19:66:A5:8F:51:69:28:66:52:11:E8
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/ovQZBEjU5EjIGWalj1FpKGZSEeg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.149.0/24
87.76.217.0/24
Signature Algorithm: sha256WithRSAEncryption
63:cb:be:57:d2:1b:c1:98:da:2f:98:cd:50:a0:82:e3:ce:b9:
5c:7c:10:10:55:32:bd:23:9f:d1:14:43:b1:2e:89:1f:a7:2f:
df:d8:78:00:2b:41:a4:d2:e2:20:f9:42:91:bc:be:92:f9:f9:
25:b4:26:b9:d5:69:c0:9a:90:3d:b9:3e:42:cf:b3:78:15:39:
37:8f:05:d3:16:4b:10:75:0b:07:58:51:d1:c4:ed:ba:7b:34:
fd:a5:e6:f3:e9:c7:66:11:fb:e7:39:97:bd:44:4e:83:2e:12:
c5:e7:3e:0e:d5:26:a0:05:05:ef:6e:45:17:ac:b3:cd:d1:1b:
f6:50:4f:52:9a:dd:72:72:be:b6:64:7f:28:0b:e3:89:1e:42:
01:23:8e:7b:0e:2c:5a:04:b2:6d:d6:2e:e3:d7:d7:4f:c6:37:
2a:11:3e:01:a9:ee:8c:1f:76:20:59:b2:dc:f3:fe:77:86:bf:
56:45:6e:51:4f:4e:78:1d:4c:87:5c:96:ae:e1:bc:06:f8:9e:
5b:58:06:2d:15:37:a2:12:5d:61:92:23:ae:85:a0:c2:46:94:
4e:9f:d8:1a:27:45:f2:d0:2b:0b:4d:83:55:74:ea:92:52:b8:
29:8f:1b:6e:8f:8c:73:3f:ff:2c:90:16:cf:47:a3:07:3b:1a:
11:39:d3:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:44:44 2026 by rpki-client