Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/wKpmqUk1ugz1JbE-k-ANebOvnGo.roa
File: wKpmqUk1ugz1JbE-k-ANebOvnGo.roa (raw, json)
Hash identifier: xX1vFsgd15IwDITLgQVyky0IZNAUIhubTfL9MNPVX6k=
Subject key identifier: C0:AA:66:A9:49:35:BA:0C:F5:25:B1:3E:93:E0:0D:79:B3:AF:9C:6A
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 019FC661085F82A183FC2577B973C2F79809
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/wKpmqUk1ugz1JbE-k-ANebOvnGo.roa
Signing time: Mon 03 Aug 2026 06:47:55 +0000
ROA not before: Mon 03 Aug 2026 06:47:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215238
IP address blocks: 87.76.130.0/24 maxlen: 24
87.76.152.0/24 maxlen: 24
87.76.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 16:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c6:61:08:5f:82:a1:83:fc:25:77:b9:73:c2:f7:98:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Aug 3 06:47:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c0aa66a94935ba0cf525b13e93e00d79b3af9c6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c4:d1:0a:f6:92:46:11:2d:0f:5b:e3:0b:37:
7b:30:31:45:c7:36:9b:e2:e2:1b:d5:61:6b:90:c4:
eb:92:e0:9b:f4:3c:b8:db:26:23:68:05:42:03:19:
d4:3e:00:cd:b3:aa:c5:d5:6c:38:1c:0c:1b:df:0c:
b1:36:18:0b:a2:dc:4f:43:c8:a6:06:fd:68:e1:db:
53:a3:30:19:c6:9e:2d:eb:10:f4:f7:cc:35:cc:f4:
eb:66:f0:b6:cb:a0:de:d5:97:00:ca:39:82:23:0b:
4a:ed:82:a2:b4:d3:d6:d4:c8:cc:30:8b:68:90:fb:
8a:5f:33:dc:91:68:b2:a0:06:38:b8:41:22:45:0a:
20:55:f3:6c:c8:21:c6:f5:db:b1:7c:42:53:46:82:
5c:7a:4f:30:7c:5e:01:a4:99:00:6f:e5:f0:c1:37:
75:68:05:67:29:5d:75:53:d3:c2:fc:63:ba:97:7f:
de:50:3c:90:4a:95:6c:46:62:15:49:3a:2e:b2:6c:
59:cc:3a:a5:f2:27:2f:e5:32:fd:7b:e1:a3:7f:e1:
77:59:1e:f6:3c:1b:cf:f4:1b:69:2d:02:69:39:91:
bb:94:95:1a:13:5f:9d:2f:f4:34:cf:b0:12:4a:85:
4d:ab:57:1e:a1:49:b6:d1:32:4c:6b:90:69:0c:4f:
a3:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:AA:66:A9:49:35:BA:0C:F5:25:B1:3E:93:E0:0D:79:B3:AF:9C:6A
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/wKpmqUk1ugz1JbE-k-ANebOvnGo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.130.0/24
87.76.152.0/24
87.76.161.0/24
Signature Algorithm: sha256WithRSAEncryption
44:9b:84:ee:ac:22:84:ed:5b:ff:be:6e:fe:e3:c9:48:b3:ba:
d5:0a:b5:a2:e1:a6:28:d4:3a:42:a4:11:e2:40:3b:54:a6:f0:
b8:be:56:8d:02:62:16:da:77:a4:10:77:a4:5e:5f:b1:99:25:
35:6a:dc:53:8f:ff:7d:c2:9e:91:2e:d2:6d:6d:40:d4:7d:d1:
6d:4c:0b:2f:f2:7c:ca:2d:c5:d3:d4:42:16:7e:c6:95:0c:a9:
96:73:18:04:9a:eb:2b:61:ae:71:40:b0:3c:cb:50:df:2a:af:
79:f4:05:56:7e:68:68:6e:64:ef:a1:6f:b9:83:42:2a:b1:f3:
d8:54:14:0d:33:44:d1:87:aa:c6:99:6f:99:c7:07:f9:94:de:
1d:52:32:b5:fa:50:f6:c3:cc:dd:92:05:12:21:3f:d2:8b:10:
a6:76:f8:f5:12:94:54:04:e1:f8:21:9f:7a:ae:bf:f5:f6:d9:
e0:3f:e0:ec:0a:57:08:aa:9d:eb:48:9a:b2:08:77:cb:be:9b:
b3:e5:11:93:87:e4:dc:df:4d:69:8e:b0:3f:48:2a:50:ae:9a:
a1:10:4d:f6:96:e1:50:e7:19:8a:f1:fd:48:2b:81:07:ba:64:
1d:2b:00:fa:dc:d3:e0:18:b1:85:93:a6:be:59:52:41:f1:b4:
87:ef:fa:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 21:26:03 2026 by rpki-client