Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/1YoH1hihLJ5ne-oFq37uDOSR7fs.roa
File: 1YoH1hihLJ5ne-oFq37uDOSR7fs.roa (raw, json)
Hash identifier: UH71MD0cbf3rt6tygesg7R3VVAOuZYKAlP4emEvuE7g=
Subject key identifier: D5:8A:07:D6:18:A1:2C:9E:67:7B:EA:05:AB:7E:EE:0C:E4:91:ED:FB
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 019FA7EADE30AF75D17B2D28A1204A60437A
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/1YoH1hihLJ5ne-oFq37uDOSR7fs.roa
Signing time: Tue 28 Jul 2026 08:50:15 +0000
ROA not before: Tue 28 Jul 2026 08:50:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402215
IP address blocks: 87.76.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:ea:de:30:af:75:d1:7b:2d:28:a1:20:4a:60:43:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Jul 28 08:50:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d58a07d618a12c9e677bea05ab7eee0ce491edfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c8:df:3d:4c:41:32:57:4d:a9:cb:90:9b:58:
44:4c:ed:16:03:f2:03:29:12:ff:70:e1:40:f8:db:
a6:f3:12:6b:38:e3:50:90:b8:16:eb:23:bb:0b:f5:
8f:d5:f9:9d:5f:9c:8c:6f:81:e7:f5:78:58:5f:49:
70:a7:b2:c0:69:b2:51:0f:72:b2:57:2c:9e:bf:b7:
f3:1d:45:08:cf:5a:ba:9f:a9:ac:b1:c7:72:07:b6:
4e:7c:79:64:a3:4e:26:b3:32:59:bf:aa:1e:14:b1:
8a:4b:6c:9e:89:4b:81:76:21:ba:ec:89:53:37:b0:
d9:6c:8c:62:b4:17:6a:2c:e0:fe:7c:b1:38:0c:fd:
fc:66:16:81:50:e7:3d:78:3e:00:44:15:04:69:de:
88:ff:ad:9c:a6:e7:6f:93:81:73:4e:40:70:ac:f3:
0f:a5:32:aa:bf:f5:ad:25:75:da:6e:48:a2:35:ca:
bd:fc:a7:93:d4:e2:3b:60:5d:f3:b8:65:27:c6:16:
14:f7:e6:6a:ac:82:04:56:9d:7a:77:6a:d8:46:7c:
f5:80:d1:8e:1d:fe:e2:eb:60:55:fc:66:e0:eb:43:
bb:a1:6d:73:4b:58:a6:4c:92:8a:b6:c3:6a:44:1f:
2d:61:49:3b:ab:75:da:de:83:6c:c6:f1:5a:a9:f0:
ee:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:8A:07:D6:18:A1:2C:9E:67:7B:EA:05:AB:7E:EE:0C:E4:91:ED:FB
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/1YoH1hihLJ5ne-oFq37uDOSR7fs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.189.0/24
Signature Algorithm: sha256WithRSAEncryption
03:2a:c3:3a:61:de:33:99:77:47:dd:1b:f0:80:b8:bd:37:c4:
1e:ba:07:6d:7e:28:e9:51:40:e3:80:8a:ba:54:2e:15:3b:2f:
44:f2:f3:d8:fb:aa:f2:e5:bb:82:bb:18:8f:99:3e:4c:0c:e9:
55:73:35:ff:a3:0b:b2:fd:16:22:75:31:fd:a5:5d:5b:79:d2:
a9:aa:f4:54:72:b0:c2:10:69:b1:f6:87:42:63:34:8b:44:c1:
99:97:01:8f:d8:9f:02:26:00:e9:64:b9:ea:a4:3e:51:92:04:
76:70:d2:c4:69:c4:25:71:45:6c:fd:3a:0b:89:80:4d:e5:c4:
d9:a4:30:72:ce:0b:69:9d:dd:a2:ef:a0:e1:6f:57:0d:8a:08:
18:ac:42:7f:04:0d:5b:93:cf:49:d5:d4:26:a6:f6:d0:66:14:
20:a7:5c:fa:54:1b:52:16:08:79:46:b2:4c:e2:27:d3:91:b1:
a0:ca:c6:3d:e1:15:e7:e4:97:0e:a1:8e:d5:4a:00:c9:ea:df:
0a:4f:2a:19:f7:34:7b:4a:b7:68:d3:df:79:73:f0:64:32:38:
7b:2b:39:6b:14:9c:81:69:2c:b3:1a:54:92:fb:2e:26:e2:63:
3f:57:25:71:43:1a:63:f4:83:2a:24:e9:90:18:9d:e3:01:91:
7a:bc:b2:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:06:24 2026 by rpki-client