Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/KFmUB6Tw_x0yWev1XZ62qEIoRp4.roa
File: KFmUB6Tw_x0yWev1XZ62qEIoRp4.roa (raw, json)
Hash identifier: 8FmLwGBctg3+9MbE/ldUPlUngSfogZCO4Qdmby6DikM=
Subject key identifier: 28:59:94:07:A4:F0:FF:1D:32:59:EB:F5:5D:9E:B6:A8:42:28:46:9E
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 01A0AF8732186372BE012C043E5A2AE6480E
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/KFmUB6Tw_x0yWev1XZ62qEIoRp4.roa
Signing time: Thu 17 Sep 2026 13:21:07 +0000
ROA not before: Thu 17 Sep 2026 13:21:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 87.76.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 13:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:af:87:32:18:63:72:be:01:2c:04:3e:5a:2a:e6:48:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Sep 17 13:21:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=28599407a4f0ff1d3259ebf55d9eb6a84228469e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:61:39:de:d3:5e:b2:68:b1:d8:95:a4:0d:04:
54:ce:c1:db:24:7e:26:b0:c1:66:60:f8:6b:dc:42:
2d:74:7e:89:ba:7c:71:1a:69:f5:54:3c:c6:31:df:
e3:01:85:9b:f8:ce:cc:4d:74:82:c8:3e:3b:4c:3d:
86:4e:67:bd:5d:98:7a:69:48:5a:27:e6:0c:fb:53:
30:b5:3b:d9:d3:1a:fa:c4:9c:d9:cb:eb:3f:f7:82:
28:e6:e0:8c:bb:0b:83:b5:fc:8c:60:6b:f6:80:07:
61:cb:4d:ff:e0:b0:57:b0:69:06:f7:73:d1:8c:85:
07:d3:3b:8a:f7:88:0e:e9:31:14:67:e3:c1:67:51:
11:e1:1b:96:46:21:89:86:47:57:9d:d9:17:c4:35:
61:71:98:96:5a:ab:be:e4:d3:1b:13:a3:bb:52:87:
ac:e5:d7:1f:48:bc:f8:aa:b2:c8:2b:82:f0:13:87:
14:0d:a7:27:f9:17:86:55:e4:d5:a6:7d:98:ad:18:
e0:16:14:bb:7f:82:95:e6:bd:4e:ed:b0:6b:9a:9c:
ed:5d:7c:72:e5:af:f1:c0:63:1e:ea:46:01:ba:71:
27:fe:3d:b4:74:a2:ab:ae:0c:74:4b:15:f0:05:34:
a8:b3:67:a3:41:d9:f7:5b:11:b0:74:18:aa:9f:e6:
29:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:59:94:07:A4:F0:FF:1D:32:59:EB:F5:5D:9E:B6:A8:42:28:46:9E
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/KFmUB6Tw_x0yWev1XZ62qEIoRp4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.170.0/24
Signature Algorithm: sha256WithRSAEncryption
16:ad:98:e2:71:b1:75:d7:8c:46:58:b9:44:cb:01:cd:73:76:
45:3e:e9:79:4c:35:1c:01:0c:c7:0e:b2:3a:d7:0c:c5:bf:11:
10:36:b1:9d:35:61:86:2c:af:72:f1:17:05:d7:50:b4:fa:63:
52:b0:0c:43:42:0f:c8:4f:17:c5:f9:04:85:83:a6:7a:6a:d5:
31:66:c5:05:00:be:ee:e5:ea:19:98:03:1a:aa:c4:4e:74:8b:
c7:65:20:c7:79:20:e8:89:65:12:33:1a:d9:66:da:be:8f:66:
81:55:4e:ba:e0:bd:05:08:35:77:5d:35:28:90:f6:28:ce:d9:
60:89:9c:86:77:87:21:79:13:ad:5e:e9:25:ad:0e:95:57:97:
e2:ec:5a:8e:30:3f:e0:aa:f7:a6:78:8d:e5:3f:1a:b0:36:de:
82:69:b3:49:ca:6f:dc:c5:ee:55:8d:27:6c:58:f0:7b:b3:3d:
ce:18:09:05:5c:f2:4c:1e:dd:64:6b:aa:29:6f:08:74:36:85:
1c:e8:19:51:37:b9:b3:0f:2b:ed:38:b3:a2:ed:93:2f:bf:d0:
79:32:50:b5:c1:77:fe:8b:97:56:e0:7e:72:e4:a7:f4:07:63:
33:d9:56:e2:eb:4a:2e:c0:3a:56:54:39:19:1c:eb:c6:77:1c:
26:47:38:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 18:37:24 2026 by rpki-client