Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/56Z9gPOHxu8p_c3vgg_IyQ_0Axg.roa
File: 56Z9gPOHxu8p_c3vgg_IyQ_0Axg.roa (raw, json)
Hash identifier: rxsxPGvtWBWINcqfNKeNTxFW01ccY58wkIaQTus4X74=
Subject key identifier: E7:A6:7D:80:F3:87:C6:EF:29:FD:CD:EF:82:0F:C8:C9:0F:F4:03:18
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 01A07B7CF0568EC977A28334F51388DF3824
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/56Z9gPOHxu8p_c3vgg_IyQ_0Axg.roa
Signing time: Mon 07 Sep 2026 10:49:40 +0000
ROA not before: Mon 07 Sep 2026 10:49:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198015
IP address blocks: 87.76.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 13:10:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7b:7c:f0:56:8e:c9:77:a2:83:34:f5:13:88:df:38:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Sep 7 10:49:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e7a67d80f387c6ef29fdcdef820fc8c90ff40318
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:23:20:59:5f:3e:80:be:f4:fb:21:27:af:3e:
b1:7e:2a:18:ae:0f:56:ed:00:fb:be:7a:69:c1:e3:
b2:d6:c2:17:82:7f:d5:43:66:a0:23:6e:4b:73:70:
71:a1:09:88:ed:3e:40:f3:78:fb:9f:de:c8:30:46:
c5:8d:a0:2d:d5:aa:61:2a:ac:ad:65:dc:58:48:ef:
33:c2:26:a7:be:b1:d6:f5:80:67:ac:d5:d5:52:2a:
0a:33:3a:3b:ab:91:0b:cc:92:4b:a2:0c:a8:bf:bf:
55:13:c4:70:97:c2:24:a9:0f:aa:74:34:d7:10:17:
23:91:6c:f2:ff:6e:f6:28:93:bd:b1:28:cd:09:60:
d8:e6:8f:f6:d2:2f:a0:86:06:2e:e1:01:d7:d9:77:
d3:8f:c3:27:34:f0:81:15:cb:4f:1e:70:d9:d0:db:
4a:6c:b6:09:c3:20:bf:73:71:9c:dc:20:c9:1e:87:
a6:f6:46:dd:3c:9c:55:c0:01:6d:8d:a3:9e:07:9c:
86:17:2d:7c:0f:2d:b2:61:a1:c2:f4:9c:af:78:95:
10:5b:a4:a3:fe:57:f6:a6:e4:fb:0e:cf:4d:7c:21:
74:ce:a8:09:aa:ff:39:8a:05:fc:6c:93:33:6a:99:
f6:42:d5:d6:da:ce:51:ea:fd:a6:f7:05:6f:96:bc:
88:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:A6:7D:80:F3:87:C6:EF:29:FD:CD:EF:82:0F:C8:C9:0F:F4:03:18
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/56Z9gPOHxu8p_c3vgg_IyQ_0Axg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.195.0/24
Signature Algorithm: sha256WithRSAEncryption
90:fa:d2:0f:04:07:d2:e3:79:36:ce:09:0e:e6:4f:12:30:58:
3a:af:bb:6f:a3:6c:c2:3e:cf:47:5e:45:1f:e7:f7:31:28:29:
18:b7:09:18:f3:3c:71:05:50:ae:7e:c7:a6:c5:32:8b:7d:2c:
fc:ef:2f:7b:66:39:ad:f4:ef:40:8c:28:e5:c8:c7:24:ff:23:
e0:4e:4e:0b:b8:d4:5b:63:11:69:89:84:df:b2:46:1c:67:15:
2b:00:a0:56:35:e6:f0:dd:d8:da:d5:28:e9:6a:84:2b:10:66:
88:ce:1d:6d:89:5b:9f:c7:af:df:0a:31:1a:81:10:0b:dc:de:
23:35:c7:7d:f8:a6:6a:03:b8:73:89:12:2b:78:e4:e3:9a:be:
40:bb:32:eb:d6:7a:93:ea:e2:93:2a:1d:37:01:d2:83:68:dd:
97:71:53:e1:56:6a:55:32:16:72:74:32:3c:da:b6:0e:ef:70:
27:3e:63:da:43:ca:bb:da:0b:f7:52:f8:84:e8:ff:45:cc:02:
75:ad:cd:71:7a:10:5e:2d:b5:d3:91:f0:f5:a5:4d:e7:57:03:
7c:e9:81:81:ff:ff:62:2b:1e:22:6a:dc:94:67:36:8c:37:70:
57:76:7b:05:91:ec:c6:f0:01:dd:fe:55:7b:cd:9d:9b:3d:83:
fb:9b:c6:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:27:45 2026 by rpki-client