Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/LZnBl5obZiuc_sjmaGc21zlvHJc.roa
File: LZnBl5obZiuc_sjmaGc21zlvHJc.roa (raw, json)
Hash identifier: Ek9RSiD7GuHSkbJ8txHXvugbZPjQA8drmG2toaidHKA=
Subject key identifier: 2D:99:C1:97:9A:1B:66:2B:9C:FE:C8:E6:68:67:36:D7:39:6F:1C:97
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 01A0AF8819B388DBBACB68DB9452BD453661
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/LZnBl5obZiuc_sjmaGc21zlvHJc.roa
Signing time: Thu 17 Sep 2026 13:22:07 +0000
ROA not before: Thu 17 Sep 2026 13:22:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 87.76.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:af:88:19:b3:88:db:ba:cb:68:db:94:52:bd:45:36:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Sep 17 13:22:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2d99c1979a1b662b9cfec8e6686736d7396f1c97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:f5:fe:c0:c6:d7:c3:59:df:7e:a1:4d:44:a7:
f0:13:e7:a4:81:9c:43:b5:19:93:c6:4e:0f:16:8c:
e7:d8:fd:52:b8:7c:3e:c7:26:94:22:1e:62:9c:bd:
a7:0a:b8:1a:21:0a:b8:08:80:1d:9b:82:02:79:2b:
06:5e:4f:d2:22:61:47:57:23:a2:de:7c:d7:6c:0d:
e2:2c:bf:da:6c:e5:f1:f8:46:38:37:c4:61:60:52:
51:30:23:cf:94:db:5f:1c:34:56:df:a7:c8:e6:7d:
4f:0e:6e:ec:b6:15:65:9e:48:26:0d:65:04:00:96:
1f:87:8d:3b:88:8b:8d:ce:bd:97:67:b2:09:da:49:
78:3d:78:1e:ae:8d:a1:9d:1f:ea:76:64:f1:66:d9:
7a:c5:a3:20:67:4d:28:e6:75:cf:52:87:c0:2f:5c:
13:21:e4:de:ae:90:0c:e3:6b:24:14:b0:1b:c6:a6:
e0:c3:e8:70:ef:1a:d3:7f:e5:0d:bf:98:0f:b9:7f:
a1:4d:71:82:96:17:47:9d:08:03:ad:e9:81:11:36:
a1:24:37:80:de:51:68:c4:4d:2e:67:4f:26:5c:8c:
af:92:fb:7a:2a:ea:e6:2c:a5:d6:94:96:7a:3b:3e:
de:70:63:ee:3c:c6:c8:62:b5:15:86:75:ed:31:6d:
dc:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:99:C1:97:9A:1B:66:2B:9C:FE:C8:E6:68:67:36:D7:39:6F:1C:97
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/LZnBl5obZiuc_sjmaGc21zlvHJc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.170.0/24
Signature Algorithm: sha256WithRSAEncryption
83:26:11:31:df:5e:cb:d4:10:a2:8c:51:e8:5d:c4:73:93:de:
5b:6e:a1:9f:31:3d:35:f2:73:ac:ff:1b:dc:f2:1c:49:7b:2e:
a1:6a:e9:72:78:c0:7b:08:55:fe:a7:72:63:ab:6c:fa:45:f8:
04:ba:24:0a:24:75:c6:8a:29:f1:5b:75:bb:46:4e:4e:b8:2c:
a9:29:02:17:72:e4:a3:fd:85:de:86:22:d4:c0:0f:f8:f6:f4:
ea:d3:fe:93:bd:2a:f1:2f:c8:92:62:2e:7a:9e:9c:54:a9:f8:
2c:94:2b:71:1a:27:7d:b4:31:ae:14:59:df:57:c7:0a:e5:59:
07:15:70:45:bc:9a:b2:c3:4e:c7:19:04:24:d2:94:11:e1:94:
de:3e:30:f3:30:35:d3:fd:5d:8a:c0:e5:4a:9c:72:20:7d:e5:
a7:d0:4c:19:27:6a:b6:06:a6:70:7a:2e:47:63:b2:9d:60:ad:
d2:16:eb:1a:d5:ce:90:b3:72:63:c3:fb:8b:09:f1:7e:d5:16:
d3:81:03:d5:d8:16:36:50:47:33:f6:57:97:90:14:33:33:be:
76:d6:57:31:f1:de:5c:90:95:5e:5f:b9:ad:f8:45:3d:1d:9c:
1a:44:24:3f:ab:dc:da:d0:e1:6b:a1:0c:a2:eb:17:3f:6b:57:
d1:38:2d:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:53:15 2026 by rpki-client