Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/1-754yn0cXUen0mB13RhFBCCHbog.roa
File: 1-754yn0cXUen0mB13RhFBCCHbog.roa (raw, json)
Hash identifier: 78zYqr5yGxGhh0YQuAoIg3iqxnVUJ3rYVBvGE6aSJfQ=
Subject key identifier: FB:BE:78:CA:7D:1C:5D:47:A7:D2:60:75:DD:18:45:04:20:87:6E:88
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 019D73A0A13AA03F3EABC264CA9B05907728
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/1-754yn0cXUen0mB13RhFBCCHbog.roa
Signing time: Thu 09 Apr 2026 19:03:20 +0000
ROA not before: Thu 09 Apr 2026 19:03:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2856
IP address blocks: 87.76.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:73:a0:a1:3a:a0:3f:3e:ab:c2:64:ca:9b:05:90:77:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Apr 9 19:03:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fbbe78ca7d1c5d47a7d26075dd18450420876e88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f9:16:52:ba:30:5f:22:fa:29:5f:56:32:2b:
41:34:76:63:e8:ab:f4:2e:42:eb:7a:34:b4:b8:aa:
62:d6:76:3c:93:6b:a8:d3:4a:ef:b3:f7:0e:0f:63:
ed:17:64:68:af:6d:b4:39:50:5b:be:33:37:d5:28:
9a:63:42:35:44:78:1e:ba:59:e6:93:c0:ce:9c:17:
8d:38:0e:cb:45:a3:e3:ac:50:12:8f:79:36:7e:f1:
4f:8a:8d:6e:31:4a:36:99:87:a1:4f:4e:f4:a7:b8:
da:1f:ef:1a:39:1c:93:f2:4c:4a:81:45:02:79:00:
cc:80:f7:a0:6e:2b:f7:95:bd:2f:dd:e5:09:c6:85:
95:5c:7d:bd:50:31:27:df:ed:2d:b3:c5:d3:91:d5:
c1:8e:d5:60:fc:24:c3:02:28:68:d2:8f:ae:44:a4:
bc:d5:11:da:cf:ee:19:6a:ff:e4:e7:a1:46:64:57:
9e:f7:f1:22:b9:f4:29:ac:86:fc:60:90:d2:38:ae:
de:63:b6:79:36:0f:f7:75:10:02:16:c5:52:9c:1d:
20:aa:d0:ff:b7:00:3f:a7:08:e7:cc:04:56:60:d1:
58:57:aa:1f:c6:88:bf:fe:c4:cb:24:cd:99:69:9b:
b1:57:bf:2a:06:eb:9d:5c:ab:ba:3b:fc:e5:51:bb:
ac:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:BE:78:CA:7D:1C:5D:47:A7:D2:60:75:DD:18:45:04:20:87:6E:88
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/1-754yn0cXUen0mB13RhFBCCHbog.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.183.0/24
Signature Algorithm: sha256WithRSAEncryption
24:1f:be:19:56:0c:75:f2:8c:fb:57:cc:9c:6b:51:07:3b:b1:
3e:63:42:2f:f2:c2:ba:bc:17:47:35:29:c0:9b:f7:13:fb:ab:
61:5e:88:b8:fe:42:11:f5:8e:39:f2:9f:de:f6:14:4f:dc:86:
7a:b2:54:a1:78:54:ac:78:96:dd:44:08:6a:8d:f4:8b:ee:b7:
ae:20:65:8d:52:d0:09:96:f8:ff:16:41:7f:08:f4:15:8e:6b:
2d:ee:62:eb:95:82:59:fe:09:9e:8b:96:66:50:8c:7b:ed:61:
6e:78:5d:8d:20:a9:4f:8b:a1:f0:8e:f5:82:4f:19:7b:0c:c5:
ad:8b:d0:e8:36:38:3e:45:a3:fa:e3:a8:02:cf:27:e5:f4:7c:
aa:2b:0e:8a:68:9e:15:cf:8f:01:05:b3:7f:b6:0a:b8:a4:c6:
f7:fc:4b:1c:f8:b0:b4:9c:84:16:3f:5c:78:fc:70:3c:45:98:
33:07:32:ef:05:51:7d:62:9c:7d:fd:68:51:69:e7:09:20:03:
05:c5:78:16:dd:b3:c9:b7:ea:53:a9:95:d8:bf:52:c7:fe:06:
3f:ef:f3:74:39:6a:6d:e7:f0:b8:f2:6e:a7:b0:36:9a:de:b0:
54:ef:70:a7:71:28:7b:2f:91:cd:eb:26:e6:38:f2:53:4d:14:
62:cc:4a:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:31:59 2026 by rpki-client