Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/4lgSN_YqIb5pMy--9jThsa16oqs.roa
File: 4lgSN_YqIb5pMy--9jThsa16oqs.roa (raw, json)
Hash identifier: JgKAkUk9LFrJ7kHPWJowPxdomgoAMZ2YC5glbhhPyEQ=
Subject key identifier: E2:58:12:37:F6:2A:21:BE:69:33:2F:BE:F6:34:E1:B1:AD:7A:A2:AB
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 01A02E4CEBA6E905ABBB73CB2BAFA8A47D1A
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/4lgSN_YqIb5pMy--9jThsa16oqs.roa
Signing time: Sun 23 Aug 2026 11:06:28 +0000
ROA not before: Sun 23 Aug 2026 11:06:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207805
IP address blocks: 87.76.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 13:35:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:2e:4c:eb:a6:e9:05:ab:bb:73:cb:2b:af:a8:a4:7d:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Aug 23 11:06:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e2581237f62a21be69332fbef634e1b1ad7aa2ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7e:d3:3a:dc:48:be:59:ae:cf:6d:40:44:98:
77:a3:60:34:a1:89:97:22:e9:2f:0c:7f:c9:bd:0b:
5c:27:79:a2:fa:a5:2e:8b:2e:21:fc:bf:6d:e2:9a:
85:f0:62:7b:39:01:92:50:c0:95:30:6c:34:7c:0c:
fb:61:66:4e:ff:f5:79:9c:7d:6c:d0:3e:58:cb:9f:
73:3c:ec:54:fe:b1:92:cb:48:45:74:ee:0b:cb:67:
07:62:4e:bd:1f:7e:6e:89:a8:d9:c4:a6:ea:ec:c7:
f3:8c:9e:ac:ed:f1:20:fb:e8:d3:1c:14:70:5f:91:
31:73:73:8e:13:71:1e:9b:30:e0:6a:1a:79:98:63:
a7:f3:82:f4:8d:75:5f:04:19:d6:19:f9:ec:6d:24:
e4:7d:35:eb:dd:8e:4a:0c:8d:89:c9:01:2b:11:09:
e7:4f:a0:93:e1:49:25:af:68:01:58:53:6a:3e:e8:
e9:04:8e:9b:1f:c2:ef:9f:a0:de:37:12:bd:39:2b:
dd:24:3b:a0:37:67:57:36:73:c8:8e:d9:cb:e7:56:
3b:bd:f9:14:aa:07:4f:87:71:a3:69:5f:38:11:b0:
38:d3:0c:c7:00:92:a0:62:15:d2:e9:5d:3a:de:a8:
9d:61:31:ca:81:64:ef:08:5b:59:ff:e1:68:c2:8e:
43:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:58:12:37:F6:2A:21:BE:69:33:2F:BE:F6:34:E1:B1:AD:7A:A2:AB
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/4lgSN_YqIb5pMy--9jThsa16oqs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.131.0/24
Signature Algorithm: sha256WithRSAEncryption
01:02:8d:b8:69:25:d5:bb:98:02:b7:46:6b:be:bb:63:f6:fa:
ec:0f:8a:b7:75:50:30:2c:cd:22:30:24:84:41:4b:75:87:10:
0f:66:a8:8d:04:4d:c6:c0:d0:07:f2:8f:26:6c:2d:c4:bd:1a:
06:95:f3:94:54:62:b0:60:3c:c3:fc:5c:67:2e:1e:ec:3b:b8:
61:82:2d:45:ea:26:be:74:dc:e0:d0:66:dd:af:61:d7:a3:f6:
e3:4c:2d:14:fe:00:57:28:64:36:1e:f3:3c:9b:f4:cd:a5:f3:
82:a8:5f:31:9a:45:4b:3b:6b:b9:64:99:a2:49:3d:f9:6a:b2:
eb:3b:45:2e:d6:7d:e5:8b:0f:91:d8:cb:7e:94:a4:1c:8c:e7:
44:cf:e6:15:ff:8f:b4:c1:75:b6:f3:f8:ff:4e:d0:e9:30:e4:
9f:9c:4c:86:54:c1:37:07:7b:73:98:cd:cc:d8:77:b9:d8:6c:
9a:25:0d:69:cb:90:22:52:be:e8:0c:b0:1e:6e:eb:20:7e:7b:
a4:07:be:38:fb:be:3c:4c:29:38:e9:e6:e7:3a:d0:1f:a0:a8:
32:f8:48:c5:33:13:25:f9:f0:5e:8f:5e:d7:25:d9:93:f0:c6:
6f:e0:b7:44:cf:52:7f:91:3d:51:79:b3:75:4e:00:8e:b1:f0:
9d:36:87:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 20:31:54 2026 by rpki-client