Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/rRI3FWZCT4GIFKLnVL6KcW_ec4Y.roa
File: rRI3FWZCT4GIFKLnVL6KcW_ec4Y.roa (raw, json)
Hash identifier: 9ZEDbPB0twY1Ia8mQRzk6EBJ/S5fUHaXQ7nOSQBtTf8=
Subject key identifier: AD:12:37:15:66:42:4F:81:88:14:A2:E7:54:BE:8A:71:6F:DE:73:86
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 01A029F1CE4972E23C97980288AEA43EB7F1
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/rRI3FWZCT4GIFKLnVL6KcW_ec4Y.roa
Signing time: Sat 22 Aug 2026 14:48:27 +0000
ROA not before: Sat 22 Aug 2026 14:48:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204603
IP address blocks: 87.76.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:29:f1:ce:49:72:e2:3c:97:98:02:88:ae:a4:3e:b7:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Aug 22 14:48:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ad12371566424f818814a2e754be8a716fde7386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:f4:b0:4e:56:2a:dc:dc:60:91:90:4b:01:d3:
63:e0:bb:6a:f8:2f:96:26:28:e0:53:8c:8f:84:8f:
bc:e4:86:a5:21:83:00:a6:b3:07:00:7b:71:d4:12:
2a:71:bc:88:a6:b4:22:f4:5a:77:2f:ab:2f:b8:40:
14:19:a1:1e:49:8f:8a:18:3a:41:96:24:2b:bf:cb:
6e:fe:50:34:52:98:cd:65:fe:d6:18:cf:72:a3:79:
ac:6a:6d:fe:db:be:3d:61:44:60:34:9a:28:36:4a:
73:c4:94:8f:8c:43:13:fb:e7:46:77:31:bc:97:6b:
5c:46:33:08:c1:48:48:16:69:31:62:2c:55:8c:8d:
0d:92:46:31:c7:a4:62:0a:54:24:ce:53:04:b3:c8:
54:1b:10:0f:b0:f2:9d:ce:31:79:55:08:b2:b3:47:
26:9a:84:40:ca:5f:e8:52:3c:03:3c:91:b8:40:9f:
6d:b1:27:b4:6f:c7:d1:56:21:ef:8f:2c:47:05:14:
bd:ac:6e:e2:ef:32:5b:f6:62:ff:19:cc:da:26:2c:
30:9d:d0:8b:9e:96:bc:1f:f2:d4:8f:a3:8b:bd:45:
09:05:5e:46:4f:8c:da:b5:57:9a:1f:0c:17:21:ed:
da:34:83:e9:33:1c:2f:b6:31:86:74:fe:76:2b:b4:
ba:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:12:37:15:66:42:4F:81:88:14:A2:E7:54:BE:8A:71:6F:DE:73:86
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/rRI3FWZCT4GIFKLnVL6KcW_ec4Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.164.0/24
Signature Algorithm: sha256WithRSAEncryption
68:be:86:24:ce:ac:09:c8:d6:71:e0:18:fc:a6:bd:05:26:69:
ad:40:b0:a9:75:53:10:eb:ea:be:3e:8c:9a:5e:3e:3f:47:7f:
a4:a2:8c:3b:29:39:9d:5d:72:aa:9b:bb:aa:8d:1b:a5:cc:02:
c9:a9:82:4d:39:22:4e:16:9a:da:1d:df:61:dd:77:02:08:8a:
53:1c:b4:b8:24:68:8d:7a:28:1f:3c:99:9b:b4:8a:21:69:e6:
87:58:39:08:d3:bf:15:87:36:40:e2:1e:05:e9:0d:9a:80:04:
5c:3d:66:23:99:34:4b:43:11:ee:96:d8:08:96:f2:45:70:dc:
7a:97:95:d5:37:ef:72:dd:74:65:01:4b:f1:72:06:ae:15:b9:
7e:c0:46:8c:44:c5:2b:ae:c9:68:92:a7:7e:5d:2e:7f:63:6e:
6b:2c:e6:4e:0d:69:0e:28:ff:df:cc:eb:ce:97:ef:f2:98:0d:
cb:4b:a9:ca:26:6c:ad:76:06:24:d0:49:22:30:59:fb:69:91:
ea:01:11:ed:26:05:cb:61:ad:79:5a:13:da:67:35:fc:9e:5d:
0d:be:10:bf:fa:ef:c1:17:22:91:b0:4b:e2:8f:ad:d4:a1:77:
cd:03:db:00:64:be:3a:d7:39:0c:71:33:05:33:b6:3a:35:26:
33:3a:a8:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:23:35 2026 by rpki-client