Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/xNcFEUSM52rfEySYxPOxRG1uvuE.roa
File: xNcFEUSM52rfEySYxPOxRG1uvuE.roa (raw, json)
Hash identifier: iGHXnMoxQ3SurtzcZC6lV+jRVqhR6Ia5UKDLxl+e5Wk=
Subject key identifier: C4:D7:05:11:44:8C:E7:6A:DF:13:24:98:C4:F3:B1:44:6D:6E:BE:E1
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 019E92A335DE874A5996683D071418672800
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/xNcFEUSM52rfEySYxPOxRG1uvuE.roa
Signing time: Thu 04 Jun 2026 12:37:10 +0000
ROA not before: Thu 04 Jun 2026 12:37:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47172
IP address blocks: 87.76.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 12:08:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:92:a3:35:de:87:4a:59:96:68:3d:07:14:18:67:28:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Jun 4 12:37:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c4d70511448ce76adf132498c4f3b1446d6ebee1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:13:fb:cb:b2:30:71:6a:e3:80:93:c1:82:96:
20:a1:b5:05:0d:c8:06:10:19:fb:10:4b:82:a0:46:
44:44:47:cf:74:ef:88:1b:5f:80:cf:d3:39:9d:4f:
a1:56:65:7e:74:c4:28:85:c5:c6:fc:c6:cc:3f:07:
bf:6e:d3:d9:92:46:71:3b:bc:f9:5e:bb:d4:1b:88:
89:3e:00:cc:ca:49:b7:d6:80:62:51:7e:0c:ea:3b:
d6:b0:c6:33:9d:00:85:44:db:90:cc:50:80:d8:7e:
88:c2:fb:10:65:59:c0:cc:b0:a2:27:94:98:e9:db:
c1:f9:ab:a7:cf:b7:b3:ef:18:b1:3d:b2:d9:d0:61:
65:3e:5e:72:b9:0b:ae:fa:33:39:d9:51:c6:60:97:
43:6d:80:eb:e2:7b:c6:f6:e3:d4:81:e3:29:9d:d0:
71:1f:46:ea:74:6c:11:cf:ed:ef:c8:7a:90:7f:30:
50:72:9d:84:5b:a0:4e:c8:c5:71:78:6e:86:b1:b3:
26:eb:52:9e:0a:f6:d0:ce:64:c3:63:9a:dd:1a:2d:
93:69:7d:d5:28:1b:1c:50:53:bf:41:11:84:ef:19:
1e:7e:53:3f:4e:39:00:5e:51:85:85:c8:48:89:44:
5e:83:f0:88:22:17:53:8c:c7:d9:37:46:28:7c:ed:
b3:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:D7:05:11:44:8C:E7:6A:DF:13:24:98:C4:F3:B1:44:6D:6E:BE:E1
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/xNcFEUSM52rfEySYxPOxRG1uvuE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.150.0/24
Signature Algorithm: sha256WithRSAEncryption
61:46:b4:2a:46:ed:d7:1a:4b:bb:3a:a6:4e:6f:1c:22:eb:b8:
53:a9:15:1e:59:66:15:4e:51:a6:61:2f:2d:21:eb:4a:8a:c3:
5b:2e:da:71:bc:e1:4e:1b:b5:b4:77:55:b0:29:bc:3c:14:0e:
40:6a:87:b6:46:43:7b:56:48:83:80:f2:4f:a5:6c:98:ba:c9:
80:6a:d3:08:d6:c7:fc:ec:78:66:76:2b:ab:99:f1:43:61:8c:
1d:f1:18:26:26:1b:fe:67:6a:85:06:2a:4f:67:f1:52:2d:66:
0a:ad:f9:8c:f0:0b:37:4f:cc:ab:b7:6c:9e:50:34:01:32:d8:
f4:90:a3:35:f0:35:e3:52:54:e6:06:da:88:e8:d7:86:48:68:
ac:cf:4e:e6:60:68:b4:3a:33:40:21:1e:33:46:2c:66:78:7e:
75:17:28:14:f9:a7:ab:1d:f3:e9:b5:2e:dc:73:6f:91:38:8f:
1d:73:b5:cd:8e:75:e5:b8:cf:3a:6c:04:07:6c:3e:20:b6:13:
17:fd:de:b9:8e:cf:2e:7d:8f:30:b5:8f:57:3e:2e:fc:ac:32:
13:af:e0:69:07:37:7e:12:cc:06:96:65:5c:93:25:f6:bf:ae:
d4:f1:fe:af:08:1c:3b:56:14:1d:1e:2f:84:09:00:fc:5d:51:
b3:2f:d2:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:19:39 2026 by rpki-client