Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/q4iBT7ZJdNJBR0nlLIAGjINL5t0.roa
File: q4iBT7ZJdNJBR0nlLIAGjINL5t0.roa (raw, json)
Hash identifier: bEAUisgmc9fMMbDNiCSDGVO0Etjujzr23e59uwY+81g=
Subject key identifier: AB:88:81:4F:B6:49:74:D2:41:47:49:E5:2C:80:06:8C:83:4B:E6:DD
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 019F45F7ED9BC4690B1FCCF3B639188F9112
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/q4iBT7ZJdNJBR0nlLIAGjINL5t0.roa
Signing time: Thu 09 Jul 2026 08:21:43 +0000
ROA not before: Thu 09 Jul 2026 08:21:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198624
IP address blocks: 87.76.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Jul 2026 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:45:f7:ed:9b:c4:69:0b:1f:cc:f3:b6:39:18:8f:91:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Jul 9 08:21:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ab88814fb64974d2414749e52c80068c834be6dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:7b:84:0d:69:f1:9c:81:61:82:70:3a:53:e4:
c4:16:f2:d5:6c:79:07:56:0d:a3:5e:8b:61:5d:5b:
df:de:5c:2c:45:5f:72:04:46:09:d9:16:90:93:3c:
d1:e6:aa:f7:6a:c9:25:3d:83:85:be:cb:33:08:d1:
e2:69:0a:bc:ee:45:0c:00:6c:f3:2e:7d:25:71:ee:
48:5d:e4:ed:31:fe:75:00:18:15:b5:47:7d:5d:6c:
4a:3b:60:1c:a2:3f:df:63:07:48:ca:d0:87:31:7d:
b7:f5:16:15:75:7c:5e:70:f2:32:69:f2:0b:93:0d:
76:4a:4c:a3:d5:66:57:01:2d:d6:e4:b6:3d:6a:1c:
3e:64:a7:5a:25:6b:38:9c:c8:f3:2c:5d:33:a0:22:
e1:24:02:ad:5c:ea:ff:8c:08:cf:3c:a3:d5:d9:39:
59:3a:56:00:75:f0:33:4b:bd:41:61:f4:64:53:c3:
03:14:40:75:cc:3d:7a:31:73:33:cc:86:d7:e5:53:
57:7c:41:52:1c:84:98:8e:44:6d:e9:52:a5:57:e4:
71:85:fa:44:ca:b6:0c:9b:c6:b8:0d:30:ee:c2:30:
ad:05:cf:8d:53:f2:50:51:5a:e6:d1:89:cc:06:2f:
ec:05:ca:f4:ac:6c:db:70:a5:48:f6:dc:b2:21:01:
04:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:88:81:4F:B6:49:74:D2:41:47:49:E5:2C:80:06:8C:83:4B:E6:DD
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/q4iBT7ZJdNJBR0nlLIAGjINL5t0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.158.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:dc:52:74:f8:d0:8c:3d:f6:95:e9:41:32:bb:e7:9c:0e:bc:
9c:cc:47:13:b4:82:78:d4:6a:81:2f:88:bb:0f:76:20:13:e4:
9f:ae:83:fd:7a:d6:f4:2f:c5:21:cc:e3:b9:31:d4:20:32:d4:
6e:68:d6:1e:c5:5c:f7:50:22:42:5f:d1:1a:49:a3:0c:27:b4:
d4:8e:4f:86:da:e0:32:d0:05:2b:a8:c5:f7:c0:e2:ec:36:57:
cb:a4:3a:df:e8:24:ea:53:f7:42:c4:12:ae:9f:72:ed:22:07:
02:dc:c6:83:3f:e2:bc:00:79:ef:90:fc:e1:c2:39:96:fc:48:
b2:fb:d2:a2:ca:13:28:17:c7:27:d2:a5:02:82:08:f1:54:d5:
bf:96:7a:01:ba:3d:d9:34:3e:c0:90:80:da:86:b5:7d:01:94:
e0:92:6d:d8:2b:28:c9:1b:13:43:62:be:28:10:42:09:3b:42:
be:ff:0a:48:56:45:ac:fa:f8:2c:b6:fe:6a:35:6a:a8:ff:30:
d4:1c:e6:77:b6:45:6d:f3:f7:34:b2:27:e0:79:11:22:81:9e:
57:d1:f1:37:23:87:c0:10:84:71:43:d9:de:42:62:ac:7e:52:
7e:70:df:5e:10:6e:ed:34:d2:3d:55:ff:50:01:16:65:e8:6a:
32:f7:45:52
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ9F9+2bxGkLH8zztjkYj5ESMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyMWYwY2JhMTBkYWEzMDJlM2IxNjdjZWU1Mzk1Zjc0MmY1
MzBiMDkwHhcNMjYwNzA5MDgyMTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYjg4ODE0ZmI2NDk3NGQyNDE0NzQ5ZTUyYzgwMDY4YzgzNGJlNmRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXuEDWnxnIFhgnA6U+TEFvLVbHkH
Vg2jXothXVvf3lwsRV9yBEYJ2RaQkzzR5qr3asklPYOFvsszCNHiaQq87kUMAGzz
Ln0lce5IXeTtMf51ABgVtUd9XWxKO2Acoj/fYwdIytCHMX239RYVdXxecPIyafIL
kw12Skyj1WZXAS3W5LY9ahw+ZKdaJWs4nMjzLF0zoCLhJAKtXOr/jAjPPKPV2TlZ
OlYAdfAzS71BYfRkU8MDFEB1zD16MXMzzIbX5VNXfEFSHISYjkRt6VKlV+RxhfpE
yrYMm8a4DTDuwjCtBc+NU/JQUVrm0YnMBi/sBcr0rGzbcKVI9tyyIQEEqQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKuIgU+2SXTSQUdJ5SyABoyDS+bdMB8GA1UdIwQY
MBaAFFIfDLoQ2qMC47FnzuU5X3QvUwsJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWg4TXVoRGFvd0xqc1dmTzVUbGZkQzlUQ3drLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82OGNlMzYtNzRlNC00NDNiLWFlZjEt
M2JiOGIwNzVkNjlmLzEvcTRpQlQ3WkpkTkpCUjBubExJQUdqSU5MNXQwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82OGNlMzYtNzRlNC00NDNiLWFlZjEtM2JiOGIwNzVkNjlm
LzEvVWg4TXVoRGFvd0xqc1dmTzVUbGZkQzlUQ3drLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV0yeMA0G
CSqGSIb3DQEBCwUAA4IBAQCL3FJ0+NCMPfaV6UEyu+ecDryczEcTtIJ41GqBL4i7
D3YgE+SfroP9etb0L8UhzOO5MdQgMtRuaNYexVz3UCJCX9EaSaMMJ7TUjk+G2uAy
0AUrqMX3wOLsNlfLpDrf6CTqU/dCxBKun3LtIgcC3MaDP+K8AHnvkPzhwjmW/Eiy
+9KiyhMoF8cn0qUCggjxVNW/lnoBuj3ZND7AkIDahrV9AZTgkm3YKyjJGxNDYr4o
EEIJO0K+/wpIVkWs+vgstv5qNWqo/zDUHOZ3tkVt8/c0sifgeREigZ5X0fE3I4fA
EIRxQ9neQmKsflJ+cN9eEG7tNNI9Vf9QARZl6Goy90VS
-----END CERTIFICATE-----
Generated at Fri Jul 10 17:53:05 2026 by rpki-client