Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/wsRFfRwJL_gFuw0trQCld9dEB5s.roa
File: wsRFfRwJL_gFuw0trQCld9dEB5s.roa (raw, json)
Hash identifier: 7MV+YgFQ1kg8V8qiUxpkgP8jqqliZU58TPn6qnsQgvQ=
Subject key identifier: C2:C4:45:7D:1C:09:2F:F8:05:BB:0D:2D:AD:00:A5:77:D7:44:07:9B
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 019F606A40B9A32DB4A7CBBE7286B6D33170
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/wsRFfRwJL_gFuw0trQCld9dEB5s.roa
Signing time: Tue 14 Jul 2026 11:36:43 +0000
ROA not before: Tue 14 Jul 2026 11:36:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207449
IP address blocks: 87.76.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:60:6a:40:b9:a3:2d:b4:a7:cb:be:72:86:b6:d3:31:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Jul 14 11:36:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c2c4457d1c092ff805bb0d2dad00a577d744079b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:de:36:e7:10:7b:55:3b:94:34:1f:a9:aa:87:
05:ae:5e:db:19:bd:67:ec:ad:dd:87:aa:8f:6f:2b:
f2:6d:0e:b0:9e:c3:ee:a5:e9:76:36:23:f1:15:a3:
35:51:47:5f:83:ce:b8:b9:9a:c8:47:ae:8f:f5:3a:
05:1a:7f:c4:f0:77:9b:41:63:4a:d8:6d:28:9a:f7:
89:60:04:5d:2f:02:fd:a0:3c:6e:9d:15:06:9f:2c:
70:d4:83:42:3d:dd:38:46:6e:1b:a7:6e:99:14:25:
67:ec:e0:d1:6e:be:68:e2:fc:88:b1:6c:ef:4a:f3:
85:4c:5e:a1:f4:13:71:c1:e0:0d:ad:9e:f8:11:ef:
66:1b:f5:48:a8:c8:66:ec:f2:d8:d3:d2:c1:4d:c3:
1c:f0:79:af:1f:8e:0f:5b:99:9e:64:98:60:58:c3:
2e:d6:93:53:79:07:dc:51:f0:74:32:93:e4:24:18:
69:70:ea:13:d8:ac:c8:76:a8:d3:a7:23:a4:33:47:
02:bf:73:76:02:4c:28:81:50:d0:28:14:93:db:97:
5c:08:bb:37:3f:45:07:88:3b:4c:5b:2b:96:7c:7f:
be:2a:98:97:e5:d4:95:65:b2:b3:b4:d0:20:66:fb:
aa:7a:f8:bf:47:f8:fe:6b:71:91:63:32:b8:74:67:
df:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:C4:45:7D:1C:09:2F:F8:05:BB:0D:2D:AD:00:A5:77:D7:44:07:9B
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/wsRFfRwJL_gFuw0trQCld9dEB5s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.155.0/24
Signature Algorithm: sha256WithRSAEncryption
74:16:ab:60:f9:b7:86:a7:05:03:7a:5c:05:a3:55:73:6d:12:
1d:5e:72:66:18:a0:67:19:6d:b1:fa:eb:39:9d:58:dc:2d:b3:
09:c6:6c:08:08:39:8e:97:bf:54:89:31:79:01:f4:34:34:42:
2c:c0:6f:10:70:67:02:41:0b:ed:e7:de:c1:24:b4:02:7c:20:
60:51:56:0a:ef:f0:cc:a0:63:bc:02:6a:41:93:7d:dd:44:f8:
87:5d:9e:2d:93:5c:15:3c:f8:ed:b6:9c:59:df:e5:1e:e3:c8:
ef:e6:20:bc:97:56:d4:c8:b2:f8:a1:ec:16:92:ec:85:50:40:
bc:51:ac:17:4e:8f:1d:00:ba:d2:c1:31:a7:bd:aa:25:d5:84:
75:ab:8c:fc:2f:33:ba:ed:f8:73:71:47:14:d5:96:37:96:d7:
97:83:61:e5:af:61:17:67:18:0b:34:cd:46:f1:f7:68:58:ea:
f3:92:5f:9a:09:58:df:aa:b8:d9:16:7b:35:63:3b:c6:3e:06:
f8:ba:29:a6:d6:63:dd:11:5e:f2:ca:14:23:c5:ee:e6:c8:7e:
1f:c3:bc:ae:d3:c6:4b:f1:88:24:50:07:ee:d3:34:87:4b:84:
57:60:a8:1b:b4:76:b6:62:eb:79:57:48:01:69:96:bd:5c:c0:
02:09:a4:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:13:27 2026 by rpki-client