Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/vio5KKAGdZpdQq53f87AexHi-Jw.roa
File: vio5KKAGdZpdQq53f87AexHi-Jw.roa (raw, json)
Hash identifier: junpE2G5kAzyUFDsRtxZnRMTdcfxQLD60F8v3PgzK2c=
Subject key identifier: BE:2A:39:28:A0:06:75:9A:5D:42:AE:77:7F:CE:C0:7B:11:E2:F8:9C
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 019F3BD46AE06F75A2A2AD5B01A3479E378E
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/vio5KKAGdZpdQq53f87AexHi-Jw.roa
Signing time: Tue 07 Jul 2026 09:06:44 +0000
ROA not before: Tue 07 Jul 2026 09:06:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2914
IP address blocks: 87.76.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 14:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3b:d4:6a:e0:6f:75:a2:a2:ad:5b:01:a3:47:9e:37:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Jul 7 09:06:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=be2a3928a006759a5d42ae777fcec07b11e2f89c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:51:c3:14:cb:92:f0:12:9b:80:da:dd:80:17:
c0:92:a6:85:25:6f:45:07:71:c7:5a:1b:70:0c:d7:
89:59:99:a2:ed:f6:e7:74:79:3e:f6:b4:88:22:fa:
76:2f:2c:12:fd:e8:e4:6d:a6:cc:59:5a:f1:11:8e:
e3:59:e9:e2:77:26:fe:34:9f:67:6c:d2:dd:61:d3:
85:30:26:18:00:4d:df:01:a1:5d:fc:16:93:ae:0f:
d2:d1:4e:1b:10:74:87:ae:38:8e:35:73:1d:c5:4e:
34:01:00:5b:98:9b:e3:e9:c1:7d:9a:53:70:2a:31:
93:e7:36:0b:f8:a2:16:66:59:37:9b:b2:a8:70:d0:
6e:1f:23:93:77:af:fc:a5:9f:71:d6:95:7c:00:b2:
ee:84:b0:fe:72:f8:93:69:2d:1d:e1:87:1d:98:73:
d6:b7:0f:84:07:51:83:72:e4:94:c3:32:1a:a3:8a:
40:06:29:ca:e9:f3:42:81:33:43:a1:67:1c:be:aa:
f3:1e:2d:a4:a3:96:0c:f4:03:27:d3:f4:d4:bb:20:
75:18:b9:c3:d2:90:94:2d:bc:e4:3f:c3:a5:c9:60:
7f:76:89:77:90:46:39:72:75:15:39:f3:6b:61:4b:
fb:5b:32:d7:f8:82:19:15:6f:37:a8:cd:bb:ea:84:
7a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:2A:39:28:A0:06:75:9A:5D:42:AE:77:7F:CE:C0:7B:11:E2:F8:9C
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/vio5KKAGdZpdQq53f87AexHi-Jw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.210.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:24:ba:a7:fb:16:28:8a:42:bc:d7:4c:4d:43:13:d4:ef:ba:
3e:21:86:b4:c6:45:bd:30:68:db:61:02:84:88:79:5e:26:ef:
17:d7:1b:20:7f:09:0f:8a:b3:22:e0:a7:2f:2d:5e:03:92:05:
68:95:ba:a1:ce:91:5d:cf:bb:30:df:10:5e:5a:45:dc:77:69:
ed:0d:b6:09:bb:70:ca:2f:49:cb:3f:3d:2f:90:d1:6c:19:bd:
c1:83:6b:5b:d8:18:53:fa:ac:b4:bf:89:81:bc:11:47:81:8d:
82:de:0c:da:95:3b:2f:83:37:85:3d:e5:b0:c2:b8:53:e6:1e:
54:dc:d8:2f:93:63:a3:bb:2b:b9:66:25:57:0e:78:87:05:51:
1b:f9:2a:4a:de:b7:de:4a:f6:13:d8:69:94:37:63:00:1b:4a:
4c:55:e1:37:25:c0:38:99:ec:5a:16:05:e2:2f:40:c8:ad:af:
01:6d:ca:f5:ce:76:85:91:80:90:48:03:ed:19:22:33:51:5d:
a4:db:1e:94:a6:dd:ed:56:9d:27:08:c9:9e:1b:55:92:d3:46:
a6:d0:00:bd:06:a0:fb:cb:54:a9:50:40:9c:82:52:bc:fc:43:
bc:5e:f1:cf:c9:ea:76:1c:0f:ed:81:98:8b:3c:7c:67:60:fd:
5f:a8:5a:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 22:10:43 2026 by rpki-client