Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/5uKJZHdfDX6TXX-SRwiwxZGZ2Ac.roa
File: 5uKJZHdfDX6TXX-SRwiwxZGZ2Ac.roa (raw, json)
Hash identifier: dNb/ayekSV3gRwWnyBUmQiJqyh3+db3pUkOxjC/qYak=
Subject key identifier: E6:E2:89:64:77:5F:0D:7E:93:5D:7F:92:47:08:B0:C5:91:99:D8:07
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 019D739ECA1B66D5695DFCDCA7E2D2D67015
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/5uKJZHdfDX6TXX-SRwiwxZGZ2Ac.roa
Signing time: Thu 09 Apr 2026 19:01:19 +0000
ROA not before: Thu 09 Apr 2026 19:01:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 87.76.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:73:9e:ca:1b:66:d5:69:5d:fc:dc:a7:e2:d2:d6:70:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Apr 9 19:01:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e6e28964775f0d7e935d7f924708b0c59199d807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:11:26:3a:86:aa:fa:84:3f:21:50:8c:8d:16:
d1:d8:6b:d9:5a:1f:74:60:ea:15:0d:a2:f3:b0:fe:
59:c4:71:90:0b:66:33:11:e9:bd:d1:f2:b4:6d:f9:
c3:3d:8e:b5:bf:7d:75:92:60:04:df:3f:c6:79:89:
b1:12:01:b8:05:3f:23:8b:5b:d0:6f:71:fe:22:46:
09:f3:e4:64:82:9b:22:69:54:e2:b4:67:7b:c0:50:
28:0d:73:85:fc:bd:a9:c6:2f:80:f2:e6:28:db:79:
fc:f6:d4:22:f4:ef:48:3b:64:ca:dd:6a:32:13:8b:
96:57:d5:c7:48:4d:64:1d:64:9c:e7:78:b2:cf:cc:
5d:ca:b1:f2:be:35:4f:9a:64:36:58:e3:cf:8f:c1:
02:16:f5:45:61:60:66:55:8b:08:84:26:fc:29:b1:
cf:67:78:bb:b7:ac:a3:d3:54:bc:62:47:aa:9e:14:
4e:ec:25:f7:5f:46:3f:a9:f3:5a:eb:2e:a3:15:66:
db:29:13:f2:9e:58:b7:3e:33:9d:1f:51:2b:f6:19:
d8:c4:81:50:61:b3:6e:25:ab:03:03:80:01:43:d0:
6c:64:f7:8a:fa:f2:d0:03:9b:e9:70:74:8e:41:43:
d3:48:5b:21:68:59:a8:1b:1c:45:8d:a8:67:f3:e6:
3b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:E2:89:64:77:5F:0D:7E:93:5D:7F:92:47:08:B0:C5:91:99:D8:07
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/5uKJZHdfDX6TXX-SRwiwxZGZ2Ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.182.0/24
Signature Algorithm: sha256WithRSAEncryption
95:44:dd:ef:f2:b3:e1:30:94:d3:fb:4f:8f:23:2e:6d:cb:b0:
b6:91:ea:85:2c:f0:3c:f1:86:e9:2a:3b:a3:f8:91:43:fe:36:
a9:80:0b:df:d0:57:2f:af:e6:7f:01:ae:39:21:28:c3:76:6e:
66:e1:d1:aa:44:ca:22:10:6d:c5:74:8b:68:36:68:69:38:80:
1e:eb:72:69:cd:39:00:b0:26:37:41:e6:e2:2b:0a:1c:7f:43:
38:c7:67:33:7d:67:61:03:b7:ce:33:84:e7:8c:e7:7e:b4:99:
db:ab:55:10:a8:11:af:97:8d:f1:bc:9c:93:2b:27:ac:22:06:
c5:33:fa:07:2a:b6:6f:f4:40:6a:22:6b:52:98:95:0f:1c:6a:
fe:d1:de:ff:68:4c:36:bf:26:e4:f9:52:50:85:d3:4b:5c:76:
b6:3e:71:a4:ac:e5:56:b4:e5:2e:8f:64:22:0a:db:57:79:05:
c5:cb:3a:31:cf:d0:ac:e7:ec:71:5b:71:e6:45:3f:bb:de:9b:
51:4c:68:13:dc:a3:08:2d:b4:e1:77:84:65:7b:b0:f1:53:90:
e1:0c:35:f6:2f:fa:88:6e:08:4f:1d:c1:71:20:ed:2d:e1:e2:
32:da:ce:45:c6:27:5b:3b:17:90:15:9c:6d:cc:18:88:82:ee:
5b:d3:93:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:06:00 2026 by rpki-client