Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/4JUJMuH8gFs9DE68zxS3NF-MVyI.roa
File: 4JUJMuH8gFs9DE68zxS3NF-MVyI.roa (raw, json)
Hash identifier: 10WPHR143Cr97gFTdRxouN6VSfBxJID1X9gNYQGB03s=
Subject key identifier: E0:95:09:32:E1:FC:80:5B:3D:0C:4E:BC:CF:14:B7:34:5F:8C:57:22
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 019D9506BDDF170EB4125713BDAD235E2D00
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/4JUJMuH8gFs9DE68zxS3NF-MVyI.roa
Signing time: Thu 16 Apr 2026 06:42:20 +0000
ROA not before: Thu 16 Apr 2026 06:42:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 147293
IP address blocks: 87.76.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 00:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:95:06:bd:df:17:0e:b4:12:57:13:bd:ad:23:5e:2d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Apr 16 06:42:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e0950932e1fc805b3d0c4ebccf14b7345f8c5722
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b2:34:9a:35:80:ff:b8:78:a8:85:a4:b9:3f:
3b:96:59:a2:cb:df:ef:3f:4c:3b:04:c2:10:5f:e1:
d9:74:b9:58:1c:1a:d0:b8:20:bf:9d:e8:d3:64:85:
52:e8:f1:19:3e:1c:fc:8c:04:a6:28:6d:3f:05:f3:
77:04:6f:96:e5:7e:e7:fa:36:3c:4e:7f:f1:dd:6e:
3f:df:ae:88:b0:c0:2b:eb:cc:5a:25:e1:0f:78:f6:
87:4d:96:70:53:17:65:9d:a5:47:c0:18:fe:84:5a:
42:99:e1:34:28:08:c1:88:45:07:08:b7:4a:66:28:
df:c8:44:d7:a5:37:20:2c:bc:26:bf:6e:e8:47:e4:
71:f0:e4:bc:e6:d2:ff:0c:88:fd:92:fa:9b:57:be:
e8:f0:16:9f:34:ff:60:41:2d:ca:cb:13:29:dc:0c:
b9:7e:2b:31:79:16:c3:dd:d0:27:09:22:4b:40:41:
2c:8c:15:70:23:e4:0b:7e:59:d0:7f:93:56:26:de:
b9:b8:12:45:6d:c3:1a:1d:68:39:6c:43:70:c3:38:
f0:41:2a:72:eb:ad:5f:0c:28:a9:74:4d:94:01:30:
cf:fc:b5:f9:5c:e3:77:86:52:93:68:f7:98:fa:b6:
2e:42:e2:7d:dc:ef:dd:69:a0:7b:fd:55:82:21:1e:
87:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:95:09:32:E1:FC:80:5B:3D:0C:4E:BC:CF:14:B7:34:5F:8C:57:22
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/4JUJMuH8gFs9DE68zxS3NF-MVyI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.202.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:14:0a:34:cb:9d:b1:c1:a7:3f:53:c0:b3:a0:e0:81:d7:0b:
7d:7e:25:64:58:f3:19:0a:f3:f2:6f:02:f6:f7:ad:17:71:6a:
20:9f:05:ac:2c:c4:03:28:87:58:9e:6c:80:75:40:5a:bd:b8:
32:0d:34:2d:28:9f:9c:96:d2:0a:b4:73:21:0a:ef:2b:85:eb:
d8:a3:8e:8a:ae:09:54:9e:6d:e6:e6:70:7c:f7:29:2a:be:ea:
74:17:c1:2b:71:e1:46:74:0a:3a:e7:79:af:0e:a8:63:fa:96:
d9:38:0f:8c:e9:82:47:ad:9a:f2:54:aa:b8:e9:89:f1:ce:0a:
3e:bd:89:78:f5:56:fe:b7:b8:8f:26:54:ab:fd:f6:d3:2a:3d:
99:2e:15:fd:44:b8:f2:cb:68:e4:23:1d:13:e0:3a:a4:6d:42:
59:2c:64:71:67:08:f4:5e:d8:9d:00:d5:e4:07:43:a7:28:ff:
51:e4:e2:5a:35:6f:cc:be:0b:48:6e:5e:99:23:b1:c5:93:74:
c1:2f:ac:5b:62:3d:b3:24:a2:60:aa:97:f7:66:39:07:5b:46:
0e:32:43:0b:1d:c8:ba:51:d1:9a:e5:df:e8:b8:6b:38:f4:4c:
b4:a6:a3:79:30:f0:bf:8f:35:8e:25:49:58:01:b4:0f:a2:fa:
53:55:3e:b8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ2VBr3fFw60ElcTva0jXi0AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyMWYwY2JhMTBkYWEzMDJlM2IxNjdjZWU1Mzk1Zjc0MmY1
MzBiMDkwHhcNMjYwNDE2MDY0MjIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMDk1MDkzMmUxZmM4MDViM2QwYzRlYmNjZjE0YjczNDVmOGM1NzIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA37I0mjWA/7h4qIWkuT87llmiy9/v
P0w7BMIQX+HZdLlYHBrQuCC/nejTZIVS6PEZPhz8jASmKG0/BfN3BG+W5X7n+jY8
Tn/x3W4/366IsMAr68xaJeEPePaHTZZwUxdlnaVHwBj+hFpCmeE0KAjBiEUHCLdK
ZijfyETXpTcgLLwmv27oR+Rx8OS85tL/DIj9kvqbV77o8BafNP9gQS3KyxMp3Ay5
fisxeRbD3dAnCSJLQEEsjBVwI+QLflnQf5NWJt65uBJFbcMaHWg5bENwwzjwQSpy
661fDCipdE2UATDP/LX5XON3hlKTaPeY+rYuQuJ93O/daaB7/VWCIR6HaQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOCVCTLh/IBbPQxOvM8UtzRfjFciMB8GA1UdIwQY
MBaAFFIfDLoQ2qMC47FnzuU5X3QvUwsJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWg4TXVoRGFvd0xqc1dmTzVUbGZkQzlUQ3drLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82OGNlMzYtNzRlNC00NDNiLWFlZjEt
M2JiOGIwNzVkNjlmLzEvNEpVSk11SDhnRnM5REU2OHp4UzNORi1NVnlJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82OGNlMzYtNzRlNC00NDNiLWFlZjEtM2JiOGIwNzVkNjlm
LzEvVWg4TXVoRGFvd0xqc1dmTzVUbGZkQzlUQ3drLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV0zKMA0G
CSqGSIb3DQEBCwUAA4IBAQCOFAo0y52xwac/U8CzoOCB1wt9fiVkWPMZCvPybwL2
960XcWognwWsLMQDKIdYnmyAdUBavbgyDTQtKJ+cltIKtHMhCu8rhevYo46KrglU
nm3m5nB89ykqvup0F8ErceFGdAo653mvDqhj+pbZOA+M6YJHrZryVKq46Ynxzgo+
vYl49Vb+t7iPJlSr/fbTKj2ZLhX9RLjyy2jkIx0T4DqkbUJZLGRxZwj0XtidANXk
B0OnKP9R5OJaNW/MvgtIbl6ZI7HFk3TBL6xbYj2zJKJgqpf3ZjkHW0YOMkMLHci6
UdGa5d/ouGs49Ey0pqN5MPC/jzWOJUlYAbQPovpTVT64
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:17:13 2026 by rpki-client