Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/p-fPiyQf1Pg1AzkMzObWKZ6cFNg.roa
File: p-fPiyQf1Pg1AzkMzObWKZ6cFNg.roa (raw, json)
Hash identifier: XklUMkOQZ9op97WvMAr6tKjkza7z8dd2ZUaQopIs1Ls=
Subject key identifier: A7:E7:CF:8B:24:1F:D4:F8:35:03:39:0C:CC:E6:D6:29:9E:9C:14:D8
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 019FFC56167A591E84C37B9B1979E4D6B65F
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/p-fPiyQf1Pg1AzkMzObWKZ6cFNg.roa
Signing time: Thu 13 Aug 2026 18:15:27 +0000
ROA not before: Thu 13 Aug 2026 18:15:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25369
IP address blocks: 87.76.144.0/24 maxlen: 24
87.76.173.0/24 maxlen: 24
87.76.177.0/24 maxlen: 24
87.76.182.0/24 maxlen: 24
87.76.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 21:41:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fc:56:16:7a:59:1e:84:c3:7b:9b:19:79:e4:d6:b6:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Aug 13 18:15:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a7e7cf8b241fd4f83503390ccce6d6299e9c14d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:b0:00:c8:8b:09:0e:65:3a:5a:f2:43:ef:15:
2d:c9:6c:00:b5:61:8d:1f:4e:a4:1b:c5:34:c8:eb:
ea:b0:73:70:7b:36:95:6f:ee:76:5b:16:7e:24:c0:
e7:a2:af:87:dd:e4:b2:dd:b7:89:e0:00:29:bb:79:
7a:27:bd:49:c8:13:80:86:e3:40:e7:3f:d3:55:d8:
2c:e2:7d:4d:e1:8a:8c:39:71:69:b4:ad:f9:b8:ee:
95:ae:4c:51:d6:60:8b:93:f4:07:12:72:f3:bd:be:
a6:6b:81:d2:59:a9:8a:34:dd:99:ad:38:f8:4b:a6:
17:c1:48:aa:fb:7b:29:d8:28:be:49:50:1a:c2:d0:
30:c2:c0:11:db:fe:00:ec:d6:ec:61:33:7c:e8:a1:
d5:52:b7:a6:07:22:ab:84:a1:39:36:08:6b:c5:22:
9c:a7:95:c8:2d:4d:df:a0:9b:c2:69:72:d2:21:19:
3c:36:d7:a2:7a:41:ce:73:23:10:8f:8b:3b:fd:0b:
04:ce:fe:ab:55:96:e2:60:5a:38:b4:61:5c:6c:ea:
e1:0e:7c:a1:7a:3c:e8:1d:6c:34:11:47:e0:cb:13:
87:ee:e9:e2:24:90:55:b1:aa:c4:d6:dc:b1:6c:f5:
e5:f7:d5:b2:9a:2d:d7:f2:67:b3:8d:84:08:61:f1:
a3:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:E7:CF:8B:24:1F:D4:F8:35:03:39:0C:CC:E6:D6:29:9E:9C:14:D8
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/p-fPiyQf1Pg1AzkMzObWKZ6cFNg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.144.0/24
87.76.173.0/24
87.76.177.0/24
87.76.182.0/24
87.76.208.0/24
Signature Algorithm: sha256WithRSAEncryption
21:b1:bb:f7:1c:7b:79:c6:b9:c0:a4:da:a9:ea:4f:e0:e9:ec:
3b:11:6f:b8:33:ad:5e:74:43:6a:96:d3:73:b2:d6:82:7a:28:
b9:4a:35:73:fd:40:e1:0a:74:41:2b:7f:36:ec:fc:c0:be:88:
1c:89:3f:0b:7a:7c:d7:85:55:64:5c:7e:94:b4:0c:a7:a1:4b:
8b:3f:0e:1d:05:68:25:51:c1:7a:10:f6:c2:bc:a0:41:35:cc:
12:5f:9f:89:ff:0a:f6:d9:49:b6:9c:26:2e:3b:79:e5:d9:8a:
bf:d6:b1:31:18:1d:da:6f:7c:73:ab:41:12:f3:b5:1a:d1:a4:
c1:b0:d6:18:06:63:1c:64:84:83:a0:96:09:6c:28:85:3c:21:
5f:49:06:2c:4e:7e:a8:09:6f:ac:78:a6:5e:b9:2f:7b:4b:9e:
ec:ac:34:61:99:76:80:64:28:ac:82:b3:22:6d:04:f7:9d:62:
05:c7:4a:08:86:a7:dc:10:07:ba:d2:d1:a5:27:7d:3f:6f:fc:
43:d0:cd:a2:a4:32:2e:be:6f:d9:72:9e:bb:0e:db:e2:5b:ba:
0e:27:89:45:51:ee:49:c5:b2:3f:95:64:23:76:a1:63:4f:ab:
09:86:0b:3a:5c:1b:27:20:4c:47:d4:4b:35:61:19:3f:b3:58:
95:a6:ab:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 03:29:59 2026 by rpki-client