Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/3hZzySDSTp6aXfZ32hl4wBSrBmU.roa
File: 3hZzySDSTp6aXfZ32hl4wBSrBmU.roa (raw, json)
Hash identifier: +XLIJK2WKTyqOyWbL6HNjZgm7wSNXmqAl1i3aHBAfao=
Subject key identifier: DE:16:73:C9:20:D2:4E:9E:9A:5D:F6:77:DA:19:78:C0:14:AB:06:65
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 019E3EB51AF50C49E405FC52983DAFB155E8
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/3hZzySDSTp6aXfZ32hl4wBSrBmU.roa
Signing time: Tue 19 May 2026 05:28:36 +0000
ROA not before: Tue 19 May 2026 05:28:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199531
IP address blocks: 87.76.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 00:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:3e:b5:1a:f5:0c:49:e4:05:fc:52:98:3d:af:b1:55:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: May 19 05:28:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=de1673c920d24e9e9a5df677da1978c014ab0665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b1:52:38:23:82:ff:30:0b:58:a1:1f:49:2c:
51:11:6f:77:56:0c:b7:c8:88:26:e6:b2:a1:cc:9a:
ce:15:eb:98:55:0b:95:62:cb:fc:a6:b9:54:8f:c4:
13:45:ef:93:69:8f:4b:91:27:a7:0f:7b:7e:58:c3:
5f:4c:82:9a:3e:e8:98:aa:2c:ca:a8:9c:97:8a:01:
10:e4:42:f6:7c:7f:8a:96:32:d5:27:70:79:fb:74:
e2:8d:b5:ba:b0:64:f1:cb:22:77:a9:7b:13:41:f4:
fb:20:53:4c:2c:fa:46:68:c3:4f:90:6c:f2:07:f7:
91:72:52:39:a0:08:71:80:e1:bf:93:21:0e:79:ff:
1b:dd:45:72:32:08:62:a7:d1:91:53:01:32:e0:ec:
fd:4d:dc:d3:b7:81:f4:28:97:6d:a8:0f:ea:7b:19:
23:0c:3e:72:68:8d:f7:63:7b:bc:d9:c5:ee:cc:bf:
4f:25:45:00:77:95:34:09:f7:66:e8:d9:15:94:ab:
a6:07:20:93:3f:d0:31:a5:f7:2a:ce:ef:9e:d8:0c:
c3:48:59:bd:8d:30:c8:0e:24:d8:8b:b5:5b:e0:f5:
43:e5:b5:59:b0:05:e9:e0:14:0f:5f:4a:f8:e4:07:
24:ce:93:9e:18:a2:90:f2:28:25:07:b5:ae:1e:b5:
17:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:16:73:C9:20:D2:4E:9E:9A:5D:F6:77:DA:19:78:C0:14:AB:06:65
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/3hZzySDSTp6aXfZ32hl4wBSrBmU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.128.0/24
Signature Algorithm: sha256WithRSAEncryption
72:f2:a5:fe:71:fb:8a:3b:6b:f9:45:09:47:2a:0d:38:86:e8:
9b:dc:21:97:8c:0c:fc:41:8d:a9:66:09:06:73:a1:3c:29:32:
77:e4:73:35:15:9b:bb:3a:02:4c:c0:32:73:5c:fd:9b:f3:ac:
74:34:4d:20:5d:8d:97:52:d6:39:de:12:4a:98:21:26:80:05:
99:58:e8:4b:5a:6d:29:02:f8:45:60:56:ee:c4:7c:36:0e:56:
f5:39:b3:b1:db:b9:04:0c:1b:e8:4c:7c:c3:fe:5e:d6:95:18:
ef:f1:1c:d1:3f:5d:ca:42:5d:87:07:92:22:79:8b:99:59:da:
45:12:2c:6c:c3:7b:bb:c0:93:6d:d0:30:cb:32:86:af:4b:7f:
7c:c1:8e:27:aa:7b:0f:51:d4:4c:eb:d9:8d:a4:d7:a3:0d:fa:
3d:79:d9:07:46:c7:b9:7d:3f:2f:3d:45:33:ab:30:29:7a:a2:
bc:ac:82:83:a9:4f:09:48:f0:9d:22:a5:2d:de:df:0c:8c:bb:
0f:36:c5:7f:39:8e:fe:ef:4a:1c:ca:97:e4:6e:75:1c:d5:12:
fb:d1:8f:17:b2:ac:c7:65:c7:70:90:cd:bc:ff:c8:6f:7a:d0:
35:e8:f2:30:a8:78:7c:ec:7b:9c:3a:14:35:d5:33:15:ae:27:
38:3a:bd:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:37:53 2026 by rpki-client