Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/4yMe0KQWqHlqNRxGI-HI-YfNviU.roa
File: 4yMe0KQWqHlqNRxGI-HI-YfNviU.roa (raw, json)
Hash identifier: q9QEUOuJmvF783pEdtgSs/IHgLaoLscMYbL67CJd8ro=
Subject key identifier: E3:23:1E:D0:A4:16:A8:79:6A:35:1C:46:23:E1:C8:F9:87:CD:BE:25
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 019D6890E7EC890366698EDC77F7B0089652
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/4yMe0KQWqHlqNRxGI-HI-YfNviU.roa
Signing time: Tue 07 Apr 2026 15:30:20 +0000
ROA not before: Tue 07 Apr 2026 15:30:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60542
IP address blocks: 87.76.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:68:90:e7:ec:89:03:66:69:8e:dc:77:f7:b0:08:96:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Apr 7 15:30:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e3231ed0a416a8796a351c4623e1c8f987cdbe25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:af:5a:37:8e:b9:3e:c3:c1:3d:81:a6:58:3e:
65:42:97:f0:78:8d:16:1c:76:5d:33:c5:b5:1e:53:
56:dc:27:6d:65:eb:4b:de:32:ea:4d:0d:01:e2:1c:
b6:37:42:f6:fe:49:8f:98:c4:46:cf:57:ad:7a:83:
f2:e8:d0:47:d9:a4:a3:23:ae:ba:40:23:cc:4d:66:
25:df:20:36:a8:b5:03:b9:cf:68:e5:1d:86:4b:f2:
7c:17:7a:08:83:e1:f0:9c:2f:e9:01:53:2c:13:52:
0f:fa:53:3b:e6:6d:69:3a:12:0a:37:e0:cd:80:4a:
79:b8:a2:a3:a3:36:1b:d6:29:5d:ec:6d:b0:c1:0d:
75:d5:0d:19:bb:7f:14:53:90:12:4b:70:c2:62:dd:
66:88:2a:f3:d4:a5:2d:96:41:d3:6a:5c:2c:28:ee:
bc:cf:fe:37:27:30:34:31:b4:a9:dd:ff:58:3e:62:
23:25:1c:b9:e6:cd:4c:13:17:b4:b9:c7:e4:33:08:
98:c7:01:8f:b3:be:91:22:c1:6f:f8:52:16:9d:ed:
52:78:c5:25:18:91:00:ea:25:22:14:95:9c:8b:ff:
88:5e:04:95:12:15:49:b7:97:6b:d1:2b:bf:fc:48:
d8:65:41:1e:07:8f:42:6d:c6:a5:e7:9b:38:8b:fc:
62:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:23:1E:D0:A4:16:A8:79:6A:35:1C:46:23:E1:C8:F9:87:CD:BE:25
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/4yMe0KQWqHlqNRxGI-HI-YfNviU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.180.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:a2:28:23:a0:2c:e5:5d:ea:c5:25:db:3a:7f:45:52:4d:12:
50:56:48:65:aa:86:00:58:70:02:5c:f4:94:e7:b9:f4:8b:eb:
d0:e3:ba:22:6f:55:97:0c:b2:4f:05:19:56:92:49:e4:22:40:
15:81:f2:d7:e8:c4:46:1d:f1:08:9b:73:f6:d3:92:3f:4c:22:
42:a7:f4:68:95:23:50:5d:4b:fe:76:15:8e:c5:9e:9c:ff:98:
19:df:9c:e2:13:d0:ae:de:48:5d:2d:a5:95:95:1d:56:5e:f4:
be:80:ad:2f:da:b5:dc:2c:43:d5:f3:02:66:74:b4:9d:ee:81:
61:e3:e4:54:59:a1:aa:10:3d:c8:3b:9c:2d:41:fe:94:2a:91:
63:28:ef:c2:c0:a9:46:cd:52:c8:97:76:e1:4b:a1:11:05:5f:
a0:70:db:5c:6d:35:4a:3e:ae:99:ec:bf:b7:2a:94:5c:97:af:
5e:6e:a5:6e:b1:9e:99:b3:6f:12:61:fc:12:02:fc:bf:27:a7:
4d:41:78:fb:f6:9c:9c:40:e2:d1:a7:c6:3e:bc:22:f0:04:c6:
88:ae:c7:8f:cc:43:10:a7:d3:87:75:97:26:e1:38:5d:bd:0a:
24:1b:c0:8f:ca:99:85:87:d0:72:03:a1:ea:7d:eb:ce:21:4e:
fb:22:45:05
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ1okOfsiQNmaY7cd/ewCJZSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyMWYwY2JhMTBkYWEzMDJlM2IxNjdjZWU1Mzk1Zjc0MmY1
MzBiMDkwHhcNMjYwNDA3MTUzMDIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMzIzMWVkMGE0MTZhODc5NmEzNTFjNDYyM2UxYzhmOTg3Y2RiZTI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlK9aN465PsPBPYGmWD5lQpfweI0W
HHZdM8W1HlNW3CdtZetL3jLqTQ0B4hy2N0L2/kmPmMRGz1eteoPy6NBH2aSjI666
QCPMTWYl3yA2qLUDuc9o5R2GS/J8F3oIg+HwnC/pAVMsE1IP+lM75m1pOhIKN+DN
gEp5uKKjozYb1ild7G2wwQ111Q0Zu38UU5ASS3DCYt1miCrz1KUtlkHTalwsKO68
z/43JzA0MbSp3f9YPmIjJRy55s1MExe0ucfkMwiYxwGPs76RIsFv+FIWne1SeMUl
GJEA6iUiFJWci/+IXgSVEhVJt5dr0Su//EjYZUEeB49Cbcal55s4i/xiJQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOMjHtCkFqh5ajUcRiPhyPmHzb4lMB8GA1UdIwQY
MBaAFFIfDLoQ2qMC47FnzuU5X3QvUwsJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWg4TXVoRGFvd0xqc1dmTzVUbGZkQzlUQ3drLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82OGNlMzYtNzRlNC00NDNiLWFlZjEt
M2JiOGIwNzVkNjlmLzEvNHlNZTBLUVdxSGxxTlJ4R0ktSEktWWZOdmlVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82OGNlMzYtNzRlNC00NDNiLWFlZjEtM2JiOGIwNzVkNjlm
LzEvVWg4TXVoRGFvd0xqc1dmTzVUbGZkQzlUQ3drLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV0y0MA0G
CSqGSIb3DQEBCwUAA4IBAQAqoigjoCzlXerFJds6f0VSTRJQVkhlqoYAWHACXPSU
57n0i+vQ47oib1WXDLJPBRlWkknkIkAVgfLX6MRGHfEIm3P205I/TCJCp/RolSNQ
XUv+dhWOxZ6c/5gZ35ziE9Cu3khdLaWVlR1WXvS+gK0v2rXcLEPV8wJmdLSd7oFh
4+RUWaGqED3IO5wtQf6UKpFjKO/CwKlGzVLIl3bhS6ERBV+gcNtcbTVKPq6Z7L+3
KpRcl69ebqVusZ6Zs28SYfwSAvy/J6dNQXj79pycQOLRp8Y+vCLwBMaIrsePzEMQ
p9OHdZcm4ThdvQokG8CPypmFh9ByA6HqfevOIU77IkUF
-----END CERTIFICATE-----
Generated at Fri Apr 17 21:20:55 2026 by rpki-client