Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/KJo3GAdKNFd3THsemF08pnREwy0.roa
File: KJo3GAdKNFd3THsemF08pnREwy0.roa (raw, json)
Hash identifier: g8QkMjKCZnbmt7stE9ZOU/G22JCGHvHzbPa2y8dl68o=
Subject key identifier: 28:9A:37:18:07:4A:34:57:77:4C:7B:1E:98:5D:3C:A6:74:44:C3:2D
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 019D2FB64AA21054780D241FB3727A813079
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/KJo3GAdKNFd3THsemF08pnREwy0.roa
Signing time: Fri 27 Mar 2026 14:32:48 +0000
ROA not before: Fri 27 Mar 2026 14:32:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63199
IP address blocks: 87.76.185.0/24 maxlen: 24
87.76.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2f:b6:4a:a2:10:54:78:0d:24:1f:b3:72:7a:81:30:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Mar 27 14:32:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=289a3718074a3457774c7b1e985d3ca67444c32d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:7d:c3:c6:95:5e:bd:f2:e3:11:ce:54:0f:66:
ad:cf:bb:5e:d0:39:c0:fe:34:84:ff:7e:6c:36:8f:
76:b4:c1:63:d1:21:a3:d2:a2:8f:e8:22:84:53:fb:
fa:38:75:67:a5:b2:9c:00:89:c1:0f:16:39:c0:07:
67:9b:ce:f0:c7:3a:9e:4f:a0:16:82:32:ad:a5:cb:
76:c6:b2:f4:a2:24:73:7a:5e:08:ff:ca:2f:0c:46:
e2:a4:3a:21:2a:59:25:fd:ee:1b:ef:e0:17:da:60:
b2:5c:76:fa:0c:b5:b6:db:6b:14:8d:3a:ed:d3:72:
ec:fe:d9:ec:09:d6:37:26:12:2d:ed:e7:ce:f8:cb:
36:10:92:77:9e:36:41:42:68:da:53:61:b8:b2:8c:
4a:63:d7:53:37:ef:ed:6a:f7:3c:bf:fc:80:8d:b0:
5d:a0:d0:a3:16:3c:59:ef:46:a8:f6:6e:af:d2:63:
0a:9f:dd:34:9f:7b:6b:10:1c:65:a0:5b:ee:58:52:
28:95:87:bf:3b:57:81:5f:b1:c1:3d:f5:9d:da:b3:
9c:5d:70:da:1e:65:64:c5:86:29:b3:72:2d:3b:a5:
06:f2:bb:30:51:fd:00:8f:92:43:8a:73:5e:7d:e3:
45:e6:05:09:55:c7:20:86:2f:2b:5b:04:12:95:7f:
2b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:9A:37:18:07:4A:34:57:77:4C:7B:1E:98:5D:3C:A6:74:44:C3:2D
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/KJo3GAdKNFd3THsemF08pnREwy0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.185.0/24
87.76.220.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:a4:ba:04:36:0c:86:37:cf:8b:6c:9c:59:2d:fb:8c:ef:34:
55:5f:a5:90:3c:bd:46:5d:c2:79:98:06:bf:72:30:d2:ef:fb:
20:cd:d0:a8:12:eb:bf:03:8e:77:22:b3:fe:7f:2c:8b:ce:3d:
69:4b:3f:f7:dc:2a:ef:93:d1:12:21:e4:2a:a6:5d:d4:43:d1:
16:05:e6:34:94:f0:0d:e4:8a:3c:46:82:0e:94:63:f2:38:ee:
05:cd:28:55:39:ff:1f:df:6d:8d:e9:40:18:ee:e0:2d:c8:ef:
3b:dc:81:35:85:f0:32:8f:c5:d3:ff:93:aa:3f:1d:7f:d2:9e:
8a:08:10:61:0a:2a:69:91:95:15:4b:f2:a3:d6:8a:37:04:4c:
bf:4c:a0:78:3d:31:7b:0a:97:46:0e:5e:6f:68:7a:f6:5b:09:
01:fb:b1:cc:63:7b:8d:2e:b3:0d:0e:5b:9b:83:d4:10:b9:01:
28:f4:89:b1:da:d3:ee:f4:0e:a6:ae:16:92:c8:66:52:86:78:
38:3f:04:c2:2d:d6:0d:fa:b7:d5:0b:11:68:28:98:c3:6b:65:
13:0f:4d:f5:f3:39:07:7e:ea:85:1b:5b:fe:27:91:d2:c8:f8:
4d:57:a7:90:c0:ab:ba:78:da:49:f5:b0:2d:47:04:72:a7:be:
fb:bf:95:7a
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ0vtkqiEFR4DSQfs3J6gTB5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyMWYwY2JhMTBkYWEzMDJlM2IxNjdjZWU1Mzk1Zjc0MmY1
MzBiMDkwHhcNMjYwMzI3MTQzMjQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyODlhMzcxODA3NGEzNDU3Nzc0YzdiMWU5ODVkM2NhNjc0NDRjMzJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmX3DxpVevfLjEc5UD2atz7te0DnA
/jSE/35sNo92tMFj0SGj0qKP6CKEU/v6OHVnpbKcAInBDxY5wAdnm87wxzqeT6AW
gjKtpct2xrL0oiRzel4I/8ovDEbipDohKlkl/e4b7+AX2mCyXHb6DLW222sUjTrt
03Ls/tnsCdY3JhIt7efO+Ms2EJJ3njZBQmjaU2G4soxKY9dTN+/tavc8v/yAjbBd
oNCjFjxZ70ao9m6v0mMKn900n3trEBxloFvuWFIolYe/O1eBX7HBPfWd2rOcXXDa
HmVkxYYps3ItO6UG8rswUf0Aj5JDinNefeNF5gUJVccghi8rWwQSlX8rlwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFCiaNxgHSjRXd0x7HphdPKZ0RMMtMB8GA1UdIwQY
MBaAFFIfDLoQ2qMC47FnzuU5X3QvUwsJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWg4TXVoRGFvd0xqc1dmTzVUbGZkQzlUQ3drLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82OGNlMzYtNzRlNC00NDNiLWFlZjEt
M2JiOGIwNzVkNjlmLzEvS0pvM0dBZEtORmQzVEhzZW1GMDhwblJFd3kwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82OGNlMzYtNzRlNC00NDNiLWFlZjEtM2JiOGIwNzVkNjlm
LzEvVWg4TXVoRGFvd0xqc1dmTzVUbGZkQzlUQ3drLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAV0y5AwQA
V0zcMA0GCSqGSIb3DQEBCwUAA4IBAQAfpLoENgyGN8+LbJxZLfuM7zRVX6WQPL1G
XcJ5mAa/cjDS7/sgzdCoEuu/A453IrP+fyyLzj1pSz/33Crvk9ESIeQqpl3UQ9EW
BeY0lPAN5Io8RoIOlGPyOO4FzShVOf8f322N6UAY7uAtyO873IE1hfAyj8XT/5Oq
Px1/0p6KCBBhCippkZUVS/Kj1oo3BEy/TKB4PTF7CpdGDl5vaHr2WwkB+7HMY3uN
LrMNDlubg9QQuQEo9Imx2tPu9A6mrhaSyGZShng4PwTCLdYN+rfVCxFoKJjDa2UT
D0318zkHfuqFG1v+J5HSyPhNV6eQwKu6eNpJ9bAtRwRyp777v5V6
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:31:30 2026 by rpki-client