Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/rlkiNcbrT48q6srxDjTjiYkXcLw.roa
File: rlkiNcbrT48q6srxDjTjiYkXcLw.roa (raw, json)
Hash identifier: Sm9fHLsP70NKzS4IqRV8Q+71jTBUCb+NU6HwCuakjlc=
Subject key identifier: AE:59:22:35:C6:EB:4F:8F:2A:EA:CA:F1:0E:34:E3:89:89:17:70:BC
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 019FDC128EE7270C5596DB03712279222C4B
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/rlkiNcbrT48q6srxDjTjiYkXcLw.roa
Signing time: Fri 07 Aug 2026 11:53:51 +0000
ROA not before: Fri 07 Aug 2026 11:53:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219076
IP address blocks: 87.76.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 16:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:dc:12:8e:e7:27:0c:55:96:db:03:71:22:79:22:2c:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Aug 7 11:53:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ae592235c6eb4f8f2aeacaf10e34e389891770bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:5a:e7:c3:81:7b:c8:a0:fa:44:b9:82:4f:fe:
18:22:eb:e1:70:84:3d:f2:07:61:53:85:29:7c:e9:
32:eb:80:f4:15:f6:aa:1d:8d:3d:43:e4:a9:5a:21:
0c:d2:04:e0:9d:82:5d:98:96:8b:87:b3:a3:25:12:
f5:57:6e:aa:88:bc:6b:71:c7:2f:6c:75:79:fc:e9:
6a:1e:a7:75:9f:a6:c8:7c:2d:72:5a:44:57:de:cb:
b1:38:6e:75:75:75:e4:6f:d6:5a:e6:e9:9a:70:d1:
f3:05:94:9b:0e:60:f7:e9:ec:52:9f:43:67:4b:8f:
4f:2c:80:83:50:d2:1e:97:77:c6:ef:47:79:90:31:
98:01:44:a1:07:78:4d:5b:4c:a8:87:7e:31:13:9b:
d3:dc:c6:e0:11:f2:fc:f7:19:ce:c1:60:ff:a3:a4:
b4:4d:76:91:14:fa:90:c0:0f:7c:8c:c9:ff:4e:99:
6a:7e:60:3d:74:18:84:0c:0d:fc:9b:8a:b9:47:11:
66:fb:24:2d:87:d1:9e:0b:55:26:6c:4e:5a:37:f4:
a6:3c:7f:f8:59:47:89:fe:7d:0f:b8:83:0d:1c:90:
8b:5a:35:15:4a:c4:02:82:34:ca:ea:b3:3a:2f:3c:
b0:cb:d8:4b:e1:59:61:b1:67:7b:ba:b0:13:bc:b4:
fc:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:59:22:35:C6:EB:4F:8F:2A:EA:CA:F1:0E:34:E3:89:89:17:70:BC
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/rlkiNcbrT48q6srxDjTjiYkXcLw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.185.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:7f:27:b6:4f:fa:37:fd:43:41:ab:85:36:9a:92:68:91:d3:
19:a0:bf:2d:8d:f8:cc:72:da:ff:08:5c:31:2f:c3:15:56:0e:
24:92:66:75:1f:48:f9:6d:93:6f:ce:34:d5:17:f6:23:2b:a7:
28:70:a5:90:bb:1c:97:d1:57:56:95:8c:f1:ae:bc:13:1f:0c:
01:63:36:5c:c3:94:e0:48:3c:cd:79:9f:31:1a:b6:a9:2a:fb:
5d:f9:9a:2a:2d:70:81:e7:de:50:cd:19:fb:8f:db:e6:94:94:
d0:36:f3:83:ea:74:34:45:65:54:83:63:11:4d:93:73:e1:76:
7d:b8:1b:0c:3a:62:75:13:d5:5a:32:bb:73:de:d4:b7:34:e0:
39:d2:c2:84:29:bb:da:b2:40:7b:47:ff:c8:8f:eb:a6:59:b1:
68:b6:c1:18:52:34:ad:cc:33:8e:9a:ec:37:8c:7d:29:b5:4b:
af:a7:91:d5:3d:ca:6f:08:0e:16:e8:60:74:35:2b:f4:00:fc:
56:03:a9:1e:00:c5:78:18:c6:26:93:c9:2d:15:f1:b2:f7:ec:
f8:07:4a:f3:cb:90:f7:af:d6:59:a6:42:2e:b5:a7:56:d8:97:
08:46:59:68:8d:44:bd:f6:76:d3:43:c0:2e:ab:a2:8a:f5:2c:
68:0a:30:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 21:25:51 2026 by rpki-client