Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/riqJsfOrf676PCUyvE1SqsoEoAE.roa
File: riqJsfOrf676PCUyvE1SqsoEoAE.roa (raw, json)
Hash identifier: JOAHIxiD29z3HsIxgv3E2OM9LiPkH7Z62zlKE1kaKvY=
Subject key identifier: AE:2A:89:B1:F3:AB:7F:AE:FA:3C:25:32:BC:4D:52:AA:CA:04:A0:01
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 019F13504926485C1736AD8E7E534FC0E5E5
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/riqJsfOrf676PCUyvE1SqsoEoAE.roa
Signing time: Mon 29 Jun 2026 12:17:36 +0000
ROA not before: Mon 29 Jun 2026 12:17:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215365
IP address blocks: 87.76.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 13:09:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:13:50:49:26:48:5c:17:36:ad:8e:7e:53:4f:c0:e5:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Jun 29 12:17:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ae2a89b1f3ab7faefa3c2532bc4d52aaca04a001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ec:80:8b:30:97:c2:14:05:1f:c4:d8:54:44:
d5:81:4c:36:bc:8c:2f:be:34:23:44:06:84:db:b4:
43:8d:d7:0c:33:45:09:17:5f:bb:a4:13:8e:a2:b2:
bd:3f:d2:74:7f:d5:90:a3:86:9e:c7:8c:02:fc:36:
93:ec:57:d5:c3:70:d2:7c:a4:84:b1:04:b1:eb:3d:
7c:ff:52:4b:14:9e:c4:da:81:7b:6f:fd:11:08:47:
ca:0b:10:98:dc:aa:40:3d:60:4c:0a:b6:5a:fa:32:
26:38:23:b0:65:63:df:a0:ed:72:dd:b4:3f:8e:8a:
f7:81:45:82:19:87:fa:10:4c:1d:0f:82:fb:a1:6d:
ba:e9:c7:a4:5e:74:71:95:b9:0b:07:ad:27:af:b1:
28:a7:d3:22:3f:d4:7f:9b:34:13:1b:a9:78:0d:92:
72:91:48:29:67:d6:8a:00:f4:3c:c8:6f:ed:4f:9f:
19:3e:21:4e:b5:e8:72:53:a9:34:d5:4e:35:16:01:
8f:cb:67:6c:57:66:ff:48:21:89:ee:96:d4:ba:ad:
6d:a7:9c:6e:4c:8a:52:66:68:d1:65:6f:48:3b:dd:
37:9a:c8:b8:0c:dd:33:6a:65:85:1b:85:6d:b7:78:
4f:34:b4:ae:de:85:01:f0:34:e4:63:7b:75:25:9c:
fd:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:2A:89:B1:F3:AB:7F:AE:FA:3C:25:32:BC:4D:52:AA:CA:04:A0:01
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/riqJsfOrf676PCUyvE1SqsoEoAE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.139.0/24
Signature Algorithm: sha256WithRSAEncryption
03:8a:ff:1f:98:bd:83:53:8e:6f:aa:94:df:fe:1a:83:8f:92:
2b:32:bc:21:49:8a:bb:36:a5:1e:b7:b3:84:c5:55:d4:90:77:
2a:cb:65:1a:56:3a:37:bd:a3:2a:95:48:2f:d8:0c:75:c4:9d:
ae:fb:26:49:19:b9:76:30:12:7a:3c:b7:26:1c:6f:f2:22:bb:
4f:9e:ab:dc:f5:83:b4:90:53:b0:c4:58:5e:79:c0:c5:b6:89:
a4:51:74:a8:98:0e:5a:5c:0a:9b:bb:dd:64:d6:04:bc:e7:94:
46:f1:d1:47:12:ad:d6:3b:5e:b7:d4:d8:4f:cf:77:82:8a:26:
6c:a2:e3:8e:f9:5a:68:69:4c:ba:9b:f5:6a:0e:bb:9b:4f:d6:
47:1a:36:1b:3f:40:53:0b:1d:17:1e:6f:e2:51:3f:6a:b7:7b:
d3:4a:c4:3f:bc:c3:39:73:a3:e8:3f:22:8f:66:d2:6a:2b:36:
8c:50:8b:f2:ec:48:fd:43:ae:3b:01:49:55:c9:7f:5f:76:58:
ca:cd:48:d4:e6:91:80:7f:51:13:ec:29:05:4a:cb:04:a5:14:
cf:83:c7:0c:30:17:72:43:1c:2e:41:d2:1c:1b:24:4b:0e:67:
d3:4e:1d:d4:85:14:03:73:d6:2a:4a:05:6a:8f:51:51:15:e4:
09:95:62:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 18:14:17 2026 by rpki-client