Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/EhYw_SKUlmSSIuOzDfziMsWCh6w.roa
File: EhYw_SKUlmSSIuOzDfziMsWCh6w.roa (raw, json)
Hash identifier: A80xS7MZ5T9wO3skpjmqdFjQTf6vuqtyFnkgnFveesk=
Subject key identifier: 12:16:30:FD:22:94:96:64:92:22:E3:B3:0D:FC:E2:32:C5:82:87:AC
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 01A16A9E5E84CEB7C3986E1A29A89BF1E13D
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/EhYw_SKUlmSSIuOzDfziMsWCh6w.roa
Signing time: Fri 23 Oct 2026 21:15:26 +0000
ROA not before: Fri 23 Oct 2026 21:15:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2914
IP address blocks: 87.76.170.0/24 maxlen: 24
87.76.208.0/24 maxlen: 24
87.76.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 10:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6a:9e:5e:84:ce:b7:c3:98:6e:1a:29:a8:9b:f1:e1:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Oct 23 21:15:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=121630fd229496649222e3b30dfce232c58287ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:0f:ef:1c:81:c3:17:4c:a5:c9:89:ef:ae:73:
93:c1:9b:b3:97:d0:1a:67:23:c8:f5:46:8f:4e:59:
9b:5a:1c:f9:66:35:79:72:b6:5f:05:75:7d:65:19:
36:40:95:7c:f5:1d:c3:4b:04:93:a6:c2:e6:79:a1:
35:b4:56:17:e8:47:74:a7:31:3d:67:0e:22:45:b5:
fc:1d:ab:53:25:42:ca:6a:7a:19:f1:75:15:8a:33:
0f:74:fe:de:1c:7e:42:76:2a:91:57:fd:3f:c6:2a:
4d:8a:43:72:96:a9:c5:54:d5:cc:58:2d:82:76:6d:
47:3d:17:13:19:90:50:00:83:8e:df:61:5a:cf:f9:
95:3a:ab:94:80:5f:da:4e:b1:45:0a:dd:d1:11:24:
38:0a:84:e1:7d:08:5e:f3:ad:0b:24:a5:4a:7b:40:
64:ed:41:1c:3a:ca:e2:41:32:aa:6a:77:53:95:43:
40:51:0f:33:92:83:ae:b0:8f:13:74:39:8a:05:0d:
f6:7f:3f:89:5c:ce:8c:50:b7:1d:3e:12:d2:ba:2e:
52:bd:04:ac:2a:b8:a3:f5:70:8e:0e:c3:01:93:29:
85:23:ac:e9:e9:b3:a0:c9:a2:0a:f9:d1:1e:fe:f9:
f0:3f:3d:1a:cc:80:4c:2d:95:57:c0:30:ef:4b:30:
7f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:16:30:FD:22:94:96:64:92:22:E3:B3:0D:FC:E2:32:C5:82:87:AC
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/EhYw_SKUlmSSIuOzDfziMsWCh6w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.170.0/24
87.76.208.0/24
87.76.210.0/24
Signature Algorithm: sha256WithRSAEncryption
72:64:37:ac:96:58:b0:20:fe:41:cb:f3:56:a7:bd:35:88:2c:
02:06:03:f1:55:3b:18:a1:b2:1d:05:5a:be:bb:b0:8c:dd:a1:
d7:61:fb:13:77:ee:32:33:78:24:64:35:48:fa:e8:99:da:e4:
f8:0a:3c:dc:0c:ef:50:27:7b:2a:38:42:01:65:f3:0c:ba:24:
3f:5b:48:ce:52:10:0d:91:5c:b5:87:bc:dd:e8:10:41:4c:9e:
c6:a4:e4:24:8b:7f:f0:d2:ed:a5:7b:2a:cf:41:5e:c9:c4:2c:
5b:16:3b:c9:86:5f:bd:d9:71:28:9f:28:d8:94:0c:5f:f0:6b:
15:56:91:38:f5:9f:26:e5:ee:7e:d7:66:f4:06:eb:cc:ae:8b:
73:64:96:bb:ce:63:0d:c0:6c:41:f0:24:91:64:f4:5e:07:8b:
a1:cf:ee:80:2a:1d:d0:8a:12:9c:b1:68:4a:bf:3e:47:eb:db:
7d:4d:89:ec:a7:3c:a9:11:64:de:7c:9e:ae:e7:a1:f0:2f:69:
a3:04:f8:32:cc:3b:06:aa:5a:f5:d1:7a:08:23:86:7a:15:0e:
f3:48:08:80:ff:fc:8a:3e:7c:e2:b9:6b:85:45:9d:d3:2a:cb:
3b:32:81:7a:61:35:9a:97:3c:b3:1c:9b:6a:7d:c5:a0:c9:6a:
ed:e4:84:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:46:10 2026 by rpki-client