Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/RMeG5YSwqs2391LUpVx8SGE9RlQ.roa
File: RMeG5YSwqs2391LUpVx8SGE9RlQ.roa (raw, json)
Hash identifier: +10tk3ewGyEimvJOXxbFCpVQfDEge10WNgIHqCQw+GM=
Subject key identifier: 44:C7:86:E5:84:B0:AA:CD:B7:F7:52:D4:A5:5C:7C:48:61:3D:46:54
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 019E9D6A3925FA3D8DC0428DF342B4094F04
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/RMeG5YSwqs2391LUpVx8SGE9RlQ.roa
Signing time: Sat 06 Jun 2026 14:50:44 +0000
ROA not before: Sat 06 Jun 2026 14:50:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197537
IP address blocks: 87.76.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 00:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9d:6a:39:25:fa:3d:8d:c0:42:8d:f3:42:b4:09:4f:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Jun 6 14:50:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=44c786e584b0aacdb7f752d4a55c7c48613d4654
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6e:d2:22:c6:33:f3:4d:ab:80:9b:10:ee:55:
d3:63:9c:c7:bc:cc:26:a3:b7:9f:5c:f8:3a:df:18:
64:62:44:da:21:98:e5:d7:9a:e2:ec:4a:0b:0c:3f:
1d:b3:6d:c9:48:29:24:b4:e8:a1:83:1c:35:4a:0e:
81:25:84:ee:4a:a6:73:90:e3:4e:6e:5d:74:48:b4:
51:01:90:be:fa:37:aa:47:ef:12:34:56:9d:b8:3b:
e2:d4:dd:83:3a:98:9d:f6:a7:ee:60:04:99:7d:ee:
c8:71:46:64:74:38:fd:e5:f5:b7:6f:e5:6c:b3:9d:
7b:03:b0:0d:55:97:76:72:ee:13:7e:2a:8a:36:2b:
85:e8:43:30:d0:58:27:00:4a:9b:e4:76:9b:ea:54:
27:4a:32:dd:de:f9:02:ba:a3:52:b6:07:95:85:00:
88:7d:d9:70:64:38:88:6a:e4:1a:fc:01:d7:fb:78:
8e:82:d9:87:5d:91:5e:7c:9c:f8:1f:ba:89:84:9b:
cb:60:10:0d:96:a2:48:1d:5f:20:97:b7:7f:45:66:
a9:82:6b:b8:df:f1:d6:47:6c:97:ef:08:00:53:61:
bb:1b:75:92:74:20:ba:ad:f7:22:36:dc:06:23:ce:
69:e7:c8:7d:b8:b0:18:e4:86:78:02:8a:18:bf:19:
9e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:C7:86:E5:84:B0:AA:CD:B7:F7:52:D4:A5:5C:7C:48:61:3D:46:54
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/RMeG5YSwqs2391LUpVx8SGE9RlQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.223.0/24
Signature Algorithm: sha256WithRSAEncryption
83:2a:31:dc:98:39:42:f4:29:c9:16:48:af:ce:9e:95:5a:da:
06:5f:43:f9:53:a7:8a:a8:b6:e7:5a:da:8d:f4:ce:8e:82:78:
f1:e4:c8:c6:05:f9:f1:29:1e:44:b9:66:1c:c4:52:8e:3a:cc:
ef:d6:7a:a5:9a:14:40:dc:20:ca:23:a2:15:8e:72:f7:5c:7f:
6d:e6:26:f4:d0:15:1d:84:af:8f:71:ce:6f:41:d2:4f:0a:9a:
4e:f3:9c:de:67:96:3b:a1:34:d2:f4:dd:a3:02:e0:ee:84:ec:
91:38:7e:49:e0:8c:88:b4:94:7b:d5:82:b3:a9:c4:ed:58:39:
07:b9:45:23:1a:2a:75:f0:06:c1:55:36:bf:85:65:35:0b:29:
c0:15:e9:f8:d5:c8:a9:9f:36:43:45:71:8b:a2:b8:9e:13:f2:
ff:98:e8:f3:64:97:a8:99:18:b7:c8:ed:11:e7:fe:51:30:71:
d9:f9:5d:74:33:62:db:b2:6a:4b:f0:1c:90:be:75:ed:08:d8:
4f:d1:57:35:5a:2b:21:47:8e:c3:98:37:65:e3:5f:b4:67:76:
e8:f8:d5:9b:48:03:dc:cf:cb:87:c2:16:b1:e9:2c:30:d6:69:
2e:83:26:94:c8:2a:d1:39:05:43:a8:f8:62:f1:7b:d9:f9:3c:
39:f3:af:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:08:40 2026 by rpki-client