Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/KEwMOg477d0TuAAuzafv2xC48WE.roa
File: KEwMOg477d0TuAAuzafv2xC48WE.roa (raw, json)
Hash identifier: gZZka9jYfkn/GRU54LSu2E+1TyMxTo1VmgrswCNMwbM=
Subject key identifier: 28:4C:0C:3A:0E:3B:ED:DD:13:B8:00:2E:CD:A7:EF:DB:10:B8:F1:61
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 01A0A936AEEA1FD939437140CBCF710CE2BB
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/KEwMOg477d0TuAAuzafv2xC48WE.roa
Signing time: Wed 16 Sep 2026 07:55:28 +0000
ROA not before: Wed 16 Sep 2026 07:55:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401362
IP address blocks: 87.76.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 13:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a9:36:ae:ea:1f:d9:39:43:71:40:cb:cf:71:0c:e2:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Sep 16 07:55:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=284c0c3a0e3beddd13b8002ecda7efdb10b8f161
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f9:31:68:91:2c:5d:f6:f5:69:f0:bc:26:a9:
86:eb:ca:ac:1f:98:0d:30:1e:55:8f:b7:d6:d4:31:
c9:f0:b2:65:c4:da:f7:9c:f5:00:a1:a8:f9:28:cb:
fd:81:a0:2d:2a:0d:05:e1:28:fd:a1:0c:16:71:ad:
c9:ae:ef:a3:92:81:20:42:86:f6:07:a1:35:ef:17:
f4:e6:10:39:d3:0e:88:81:39:39:f0:3e:c2:44:5a:
6a:d9:bb:12:58:62:e1:b3:a4:8e:08:e2:d7:44:16:
ce:fb:3e:f6:c1:cf:37:76:9d:07:db:fc:90:c3:ca:
ef:c3:15:2e:10:2c:e7:fd:da:ef:9b:35:90:10:f0:
1f:53:2b:38:c5:7c:db:c5:a6:d4:90:c3:9b:5a:f3:
2c:df:22:8e:34:66:59:10:5b:e5:4f:0c:3c:bd:ee:
56:81:0f:20:53:dc:49:07:20:64:a3:b3:41:ab:dd:
41:f9:2f:62:c2:cc:01:0c:18:c8:7e:12:59:b7:77:
0d:00:1d:31:4a:a9:05:a8:83:79:de:0e:09:5e:38:
cf:03:37:98:95:d9:a0:1d:8d:57:33:7d:4b:d4:8c:
91:6d:ad:78:3e:01:ab:f4:2d:6f:bd:a0:c5:eb:8b:
6c:e6:ea:26:0f:ad:c9:6f:d3:71:e0:03:d5:91:c4:
7e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:4C:0C:3A:0E:3B:ED:DD:13:B8:00:2E:CD:A7:EF:DB:10:B8:F1:61
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/KEwMOg477d0TuAAuzafv2xC48WE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.205.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:d3:16:ac:ed:63:02:ea:0d:05:14:b1:3d:bc:bd:be:49:d8:
48:1d:aa:d3:46:cc:f8:31:70:b3:19:66:87:c4:2c:df:a7:b2:
88:ed:20:72:35:b4:d5:82:e0:a3:90:5e:78:91:19:94:da:67:
31:84:a3:28:58:db:23:5f:74:79:bb:20:e5:66:8f:34:9f:e8:
06:30:24:fa:c2:e6:b9:89:0a:e6:b9:72:7e:59:9c:8c:30:63:
47:51:64:f2:06:76:a9:13:07:bc:df:11:77:3f:42:00:1c:8a:
b8:52:ef:6a:ae:2d:56:9a:57:74:37:eb:63:11:b3:d7:d2:52:
b6:4b:57:36:33:8f:ea:87:5c:8a:fd:41:25:1c:73:35:44:74:
59:3c:e6:76:cf:40:78:d5:75:09:0c:2a:c6:7c:6e:0c:98:0c:
46:16:cf:f9:56:ef:f8:00:76:ff:94:43:88:1a:bb:35:7f:46:
95:e0:15:87:67:c0:08:90:a7:c6:fd:58:e4:b4:bc:45:07:f0:
74:7f:c2:e2:5d:84:da:b8:cd:16:87:26:d6:5e:28:67:eb:49:
59:56:2e:e2:8b:42:0e:42:08:05:2b:fa:5b:f5:27:f6:6b:72:
84:0b:e3:d1:b2:3a:7b:ca:9e:02:b6:51:ff:4d:9a:16:ca:5e:
af:19:ef:29
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaCpNq7qH9k5Q3FAy89xDOK7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyMWYwY2JhMTBkYWEzMDJlM2IxNjdjZWU1Mzk1Zjc0MmY1
MzBiMDkwHhcNMjYwOTE2MDc1NTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyODRjMGMzYTBlM2JlZGRkMTNiODAwMmVjZGE3ZWZkYjEwYjhmMTYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfkxaJEsXfb1afC8JqmG68qsH5gN
MB5Vj7fW1DHJ8LJlxNr3nPUAoaj5KMv9gaAtKg0F4Sj9oQwWca3Jru+jkoEgQob2
B6E17xf05hA50w6IgTk58D7CRFpq2bsSWGLhs6SOCOLXRBbO+z72wc83dp0H2/yQ
w8rvwxUuECzn/drvmzWQEPAfUys4xXzbxabUkMObWvMs3yKONGZZEFvlTww8ve5W
gQ8gU9xJByBko7NBq91B+S9iwswBDBjIfhJZt3cNAB0xSqkFqIN53g4JXjjPAzeY
ldmgHY1XM31L1IyRba14PgGr9C1vvaDF64ts5uomD63Jb9Nx4APVkcR+SwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFChMDDoOO+3dE7gALs2n79sQuPFhMB8GA1UdIwQY
MBaAFFIfDLoQ2qMC47FnzuU5X3QvUwsJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWg4TXVoRGFvd0xqc1dmTzVUbGZkQzlUQ3drLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82OGNlMzYtNzRlNC00NDNiLWFlZjEt
M2JiOGIwNzVkNjlmLzEvS0V3TU9nNDc3ZDBUdUFBdXphZnYyeEM0OFdFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82OGNlMzYtNzRlNC00NDNiLWFlZjEtM2JiOGIwNzVkNjlm
LzEvVWg4TXVoRGFvd0xqc1dmTzVUbGZkQzlUQ3drLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV0zNMA0G
CSqGSIb3DQEBCwUAA4IBAQAf0xas7WMC6g0FFLE9vL2+SdhIHarTRsz4MXCzGWaH
xCzfp7KI7SByNbTVguCjkF54kRmU2mcxhKMoWNsjX3R5uyDlZo80n+gGMCT6wua5
iQrmuXJ+WZyMMGNHUWTyBnapEwe83xF3P0IAHIq4Uu9qri1Wmld0N+tjEbPX0lK2
S1c2M4/qh1yK/UElHHM1RHRZPOZ2z0B41XUJDCrGfG4MmAxGFs/5Vu/4AHb/lEOI
Grs1f0aV4BWHZ8AIkKfG/VjktLxFB/B0f8LiXYTauM0WhybWXihn60lZVi7ii0IO
QggFK/pb9Sf2a3KEC+PRsjp7yp4CtlH/TZoWyl6vGe8p
-----END CERTIFICATE-----
Generated at Sun Sep 20 21:53:35 2026 by rpki-client