Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/pmzTpaf6ewNMDwfoZXEx6Tj30jQ.roa
File: pmzTpaf6ewNMDwfoZXEx6Tj30jQ.roa (raw, json)
Hash identifier: XU7Sx32kR6N4GoL02Cwbe4tFNCoqs2vpQdxugwF52C8=
Subject key identifier: A6:6C:D3:A5:A7:FA:7B:03:4C:0F:07:E8:65:71:31:E9:38:F7:D2:34
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 019EEF24EB107926B1DB9BA6647695F533E6
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/pmzTpaf6ewNMDwfoZXEx6Tj30jQ.roa
Signing time: Mon 22 Jun 2026 11:43:54 +0000
ROA not before: Mon 22 Jun 2026 11:43:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13537
IP address blocks: 87.76.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Jun 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ef:24:eb:10:79:26:b1:db:9b:a6:64:76:95:f5:33:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Jun 22 11:43:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a66cd3a5a7fa7b034c0f07e8657131e938f7d234
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:dc:ef:93:74:87:9d:3f:29:7c:10:4a:02:1e:
fd:a4:26:74:fb:fe:63:8f:b9:02:cc:e2:c0:6c:a9:
9a:e6:ce:02:33:09:a9:95:76:dc:73:4f:2a:6b:98:
b8:f6:a9:42:bc:e4:71:8e:ba:b0:63:f3:fe:5d:89:
dd:32:01:a7:c2:e8:79:ae:c9:f6:00:0a:b5:43:af:
96:15:e8:90:19:18:a1:92:20:68:31:2f:80:9d:59:
f2:9f:73:69:32:7b:44:45:5b:2a:49:13:c6:1f:cf:
d5:01:23:a9:7a:cd:0b:6c:ac:0c:ab:f8:1b:89:e9:
b6:5b:33:57:19:a3:00:35:ce:72:b4:4c:a5:1b:b8:
98:d1:71:cf:e9:fe:f6:f7:4d:a8:bb:68:42:ab:bb:
5b:f7:59:1d:50:de:2d:3d:c2:d8:f0:b8:69:d5:4d:
f2:e1:c8:4a:16:59:2f:de:5c:07:3f:21:1d:f2:f1:
eb:5b:d7:b7:a2:fe:a6:b8:81:07:61:52:6b:bc:d2:
cb:cf:d0:11:da:04:54:fa:1c:e3:a3:53:0c:f6:00:
2f:e9:73:93:da:c4:0c:fc:27:c2:86:e5:e8:d9:c8:
14:5b:28:12:22:16:56:f4:c3:b3:ce:c9:97:ad:3e:
f4:0d:b0:ff:2f:c8:9d:d3:a6:25:79:1f:61:33:d5:
cf:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:6C:D3:A5:A7:FA:7B:03:4C:0F:07:E8:65:71:31:E9:38:F7:D2:34
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/pmzTpaf6ewNMDwfoZXEx6Tj30jQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.212.0/24
Signature Algorithm: sha256WithRSAEncryption
02:d9:3d:8d:8c:f5:d8:b6:73:d5:c3:e2:98:fa:aa:b3:86:d8:
5a:e1:65:cc:43:0d:63:03:02:a2:4e:a1:91:1d:2d:0a:c8:51:
5b:ca:c2:23:9d:d3:23:26:04:50:16:cc:8e:ac:50:47:65:e8:
56:67:ce:ce:30:7a:a2:ba:85:1c:df:d6:ee:a8:18:09:a5:4d:
2d:f2:8a:23:5a:05:cc:3c:cd:66:41:44:28:60:ab:e4:86:25:
7d:41:84:92:eb:bc:5f:e4:92:e0:ce:c9:01:ed:aa:4c:36:7f:
25:00:61:a5:e1:74:84:c0:2a:e9:22:36:40:04:22:f2:2c:35:
f8:b8:0d:e5:0f:89:59:e7:be:6c:46:4d:1f:ad:19:d3:09:58:
ec:35:1b:c0:81:da:f5:a5:15:43:31:a8:cf:42:2f:97:ab:f3:
1d:aa:62:cb:41:1f:5d:ab:55:e1:1b:18:ec:9d:02:8e:90:f3:
e4:58:57:c0:77:5a:52:71:7c:75:80:67:a4:2f:6f:95:b9:df:
ca:6a:69:2e:a2:49:f2:dd:2b:98:0e:23:60:76:26:62:e4:fc:
25:19:c0:9b:d4:2f:3b:67:a9:8f:a3:a8:77:12:00:35:64:82:
10:1c:20:5f:1a:81:35:d0:b9:7a:b4:d1:ce:4c:b0:fb:79:5e:
62:38:88:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 20:29:38 2026 by rpki-client