Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/CQqqEPp3kwJyav6yYRsxU2OZymM.roa
File: CQqqEPp3kwJyav6yYRsxU2OZymM.roa (raw, json)
Hash identifier: ZdvJMf4xujUS6wbstDWMuqY7zfJRmQLCcnsCPk8/5jo=
Subject key identifier: 09:0A:AA:10:FA:77:93:02:72:6A:FE:B2:61:1B:31:53:63:99:CA:63
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 01A07FE3F3E3656EB878563E5E24DC0FF8B4
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/CQqqEPp3kwJyav6yYRsxU2OZymM.roa
Signing time: Tue 08 Sep 2026 07:20:40 +0000
ROA not before: Tue 08 Sep 2026 07:20:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 87.76.185.0/24 maxlen: 24
87.76.210.0/24 maxlen: 24
87.76.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 04:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7f:e3:f3:e3:65:6e:b8:78:56:3e:5e:24:dc:0f:f8:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Sep 8 07:20:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=090aaa10fa779302726afeb2611b31536399ca63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f1:de:98:ef:b4:13:55:71:2d:40:67:92:2a:
17:f1:7b:32:40:bf:b9:38:a9:10:ae:2b:fd:45:3f:
01:96:07:1c:46:cb:f1:d7:c7:98:37:a8:85:26:b9:
09:aa:6a:47:ea:ee:c8:84:35:40:5f:1f:4a:90:f3:
3b:be:72:0e:5d:a6:b9:7b:4d:b1:f5:b6:a0:3c:20:
03:4b:7c:17:54:e8:0d:ed:70:2a:31:a6:be:90:94:
5d:d2:3d:5b:22:6a:f6:25:d7:80:5c:28:d0:e3:f2:
72:60:79:14:b3:a9:ef:5e:75:c4:5f:1b:dc:f3:0c:
07:d3:d0:61:14:37:d2:26:7d:67:50:a7:53:6f:92:
57:c5:fd:6b:55:64:6d:a4:02:ad:3e:50:d4:d9:5b:
64:e6:80:02:93:ff:d5:f4:0c:3f:51:5b:af:f7:59:
4c:2b:84:2e:80:78:b0:6b:76:db:b2:f5:74:98:51:
7a:f6:8d:8b:80:dd:95:e1:a4:bb:72:37:64:0b:77:
ce:7e:b2:a5:f0:c2:3c:f2:82:84:98:ab:9b:ca:18:
a2:b8:37:07:69:5c:38:a0:cf:84:f3:6c:0a:39:f4:
5d:29:49:9d:93:0b:bd:1e:c7:86:39:c0:33:cc:f6:
2b:29:fc:58:34:4d:7c:66:16:43:62:d4:b5:98:a0:
a1:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:0A:AA:10:FA:77:93:02:72:6A:FE:B2:61:1B:31:53:63:99:CA:63
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/CQqqEPp3kwJyav6yYRsxU2OZymM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.185.0/24
87.76.210.0/24
87.76.223.0/24
Signature Algorithm: sha256WithRSAEncryption
89:0a:b8:07:ad:01:a5:30:27:7b:3d:42:0d:62:da:00:d7:99:
25:fb:88:4a:38:15:ad:c5:9a:55:e5:a7:8a:36:3a:5e:ab:bf:
34:52:80:95:d9:b8:9a:2b:c4:4b:1d:9b:ec:28:23:75:f9:cf:
e0:10:6d:99:e3:79:73:a5:f4:c4:dd:16:ee:7b:d1:f9:af:4a:
70:b4:21:e2:7d:2c:c6:ad:fd:b8:af:2e:50:a4:23:b4:3a:7f:
3b:bb:ed:b4:20:98:06:9a:82:48:69:d9:b5:39:f2:01:4a:25:
16:df:d5:2d:e6:ec:f1:80:6e:fd:a7:34:72:e7:12:e3:27:86:
10:06:8b:d3:6b:d5:3c:ca:0e:8a:21:4c:e5:d1:b7:5f:6e:2c:
00:09:71:c1:ac:dd:6c:93:9c:2d:33:4c:46:50:43:2e:44:c2:
84:76:64:bb:a7:7d:e9:41:e1:2f:43:19:7c:f6:ae:91:8f:90:
de:73:93:46:e8:1b:b7:d0:06:0a:f8:63:85:76:9c:53:b4:44:
dc:89:d5:07:2e:b8:2d:2a:f4:32:99:43:a5:56:34:96:78:36:
b3:44:56:fc:9b:98:1a:d8:0f:65:fd:e5:7a:90:b5:6f:59:e9:
6e:a4:73:e0:49:37:ad:ba:b5:50:3d:00:4c:cc:7f:4c:84:e6:
81:81:bd:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:32:42 2026 by rpki-client