Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/EXduuCh3cUww-DnN3dSNpKgpgpA.roa
File: EXduuCh3cUww-DnN3dSNpKgpgpA.roa (raw, json)
Hash identifier: mObso7IptJZXu0eFNAq3gr67Dm3Af2ja0JSosbc9Ii8=
Subject key identifier: 11:77:6E:B8:28:77:71:4C:30:F8:39:CD:DD:D4:8D:A4:A8:29:82:90
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 019EBB4E9CBFB81FCB739B7DF90A51CEF8EE
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/EXduuCh3cUww-DnN3dSNpKgpgpA.roa
Signing time: Fri 12 Jun 2026 10:09:11 +0000
ROA not before: Fri 12 Jun 2026 10:09:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206668
IP address blocks: 87.76.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bb:4e:9c:bf:b8:1f:cb:73:9b:7d:f9:0a:51:ce:f8:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Jun 12 10:09:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=11776eb82877714c30f839cdddd48da4a8298290
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:49:02:01:af:87:75:5b:81:79:43:79:48:6d:
13:05:44:a2:d5:b2:48:95:99:d2:91:a1:4d:ce:3d:
04:1b:73:28:67:dc:51:62:e7:3f:a7:8d:6c:29:63:
9b:4f:58:a4:05:10:be:d0:8a:7b:3a:50:ac:e7:dd:
d3:97:98:18:58:86:f2:be:25:fc:ee:6a:08:a2:8e:
ad:ac:35:f1:8a:31:8e:38:b2:b3:92:29:c3:58:fd:
3b:f2:82:b2:35:5c:a1:38:23:46:a8:03:5b:ea:3d:
6e:ea:f4:9d:3e:63:8a:93:62:19:f5:3b:8f:aa:9e:
87:9d:84:7f:e6:4f:23:82:3f:33:2e:75:b2:bd:aa:
92:c6:33:c9:d9:1b:c5:77:e4:50:89:c3:dc:1c:17:
aa:52:1f:bf:67:8b:60:9f:35:77:fd:2a:c0:52:00:
b6:d2:35:6a:c4:96:70:88:c7:19:14:82:40:4c:cf:
9c:6d:69:99:ef:47:6e:a7:69:2b:14:1e:66:ba:f6:
0e:46:4b:07:f4:b7:0d:80:32:b3:69:49:3c:cf:3c:
1b:85:d7:bc:6e:90:9b:35:9d:ad:ed:b0:0d:df:b2:
88:ca:76:e4:1c:ab:20:e6:ac:0a:a3:47:e0:01:18:
01:e3:df:c4:f8:a2:7b:93:69:66:54:a1:f8:ba:8f:
51:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:77:6E:B8:28:77:71:4C:30:F8:39:CD:DD:D4:8D:A4:A8:29:82:90
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/EXduuCh3cUww-DnN3dSNpKgpgpA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.135.0/24
Signature Algorithm: sha256WithRSAEncryption
82:79:a8:ea:e9:60:b9:2c:3c:b0:94:3e:a8:47:2e:68:d1:40:
ec:f8:49:da:17:b6:ab:4b:71:89:17:14:48:4a:8b:56:7c:5d:
fe:ce:f6:79:9e:53:90:da:9d:12:50:fe:b7:78:97:3c:63:a6:
bd:46:bc:aa:15:4b:8e:a3:0a:a0:71:21:9e:e2:80:48:53:90:
64:67:5d:6e:8b:4b:64:eb:b2:8c:13:a0:62:5f:33:7a:73:b7:
5a:31:38:6a:a2:95:73:5a:94:b7:d3:89:30:eb:05:2f:d5:d9:
75:64:ea:12:61:83:eb:09:71:d0:b3:c7:38:b2:6a:80:5b:eb:
6b:6d:ff:26:82:08:f4:ce:4b:7e:f0:41:6d:e3:ce:3f:91:a3:
6b:98:85:23:bd:8c:f9:b5:cb:76:1e:31:1d:76:71:bc:b3:da:
36:3b:3a:54:d6:40:84:79:ae:60:c5:b1:de:c4:12:a2:4f:3a:
72:f1:4a:e1:63:74:9e:c2:7c:6d:1b:03:10:45:db:7c:c4:38:
0a:25:0f:01:53:01:7c:5e:dd:fd:b9:13:30:00:be:b0:9d:c2:
70:91:ad:89:82:06:e4:92:fa:f7:b5:d6:11:16:e7:dd:d5:20:
ff:53:6b:5d:d7:e8:52:95:8d:ec:45:c8:6d:13:78:f3:a0:d2:
40:18:74:e5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ67Tpy/uB/Lc5t9+QpRzvjuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyMWYwY2JhMTBkYWEzMDJlM2IxNjdjZWU1Mzk1Zjc0MmY1
MzBiMDkwHhcNMjYwNjEyMTAwOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMTc3NmViODI4Nzc3MTRjMzBmODM5Y2RkZGQ0OGRhNGE4Mjk4MjkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0kCAa+HdVuBeUN5SG0TBUSi1bJI
lZnSkaFNzj0EG3MoZ9xRYuc/p41sKWObT1ikBRC+0Ip7OlCs593Tl5gYWIbyviX8
7moIoo6trDXxijGOOLKzkinDWP078oKyNVyhOCNGqANb6j1u6vSdPmOKk2IZ9TuP
qp6HnYR/5k8jgj8zLnWyvaqSxjPJ2RvFd+RQicPcHBeqUh+/Z4tgnzV3/SrAUgC2
0jVqxJZwiMcZFIJATM+cbWmZ70dup2krFB5muvYORksH9LcNgDKzaUk8zzwbhde8
bpCbNZ2t7bAN37KIynbkHKsg5qwKo0fgARgB49/E+KJ7k2lmVKH4uo9RAwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBF3brgod3FMMPg5zd3UjaSoKYKQMB8GA1UdIwQY
MBaAFFIfDLoQ2qMC47FnzuU5X3QvUwsJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWg4TXVoRGFvd0xqc1dmTzVUbGZkQzlUQ3drLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82OGNlMzYtNzRlNC00NDNiLWFlZjEt
M2JiOGIwNzVkNjlmLzEvRVhkdXVDaDNjVXd3LURuTjNkU05wS2dwZ3BBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82OGNlMzYtNzRlNC00NDNiLWFlZjEtM2JiOGIwNzVkNjlm
LzEvVWg4TXVoRGFvd0xqc1dmTzVUbGZkQzlUQ3drLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV0yHMA0G
CSqGSIb3DQEBCwUAA4IBAQCCeajq6WC5LDywlD6oRy5o0UDs+EnaF7arS3GJFxRI
SotWfF3+zvZ5nlOQ2p0SUP63eJc8Y6a9RryqFUuOowqgcSGe4oBIU5BkZ11ui0tk
67KME6BiXzN6c7daMThqopVzWpS304kw6wUv1dl1ZOoSYYPrCXHQs8c4smqAW+tr
bf8mggj0zkt+8EFt484/kaNrmIUjvYz5tct2HjEddnG8s9o2OzpU1kCEea5gxbHe
xBKiTzpy8UrhY3SewnxtGwMQRdt8xDgKJQ8BUwF8Xt39uRMwAL6wncJwka2Jggbk
kvr3tdYRFufd1SD/U2td1+hSlY3sRchtE3jzoNJAGHTl
-----END CERTIFICATE-----
Generated at Sat Jun 13 12:54:54 2026 by rpki-client