Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/SFbY1Wd8Vh-UpHCODB-iVvunqeE.roa
File: SFbY1Wd8Vh-UpHCODB-iVvunqeE.roa (raw, json)
Hash identifier: Ud0psldLsEqgTB3zpV+kT8hLFW1k42QK8+61CSYR0FI=
Subject key identifier: 48:56:D8:D5:67:7C:56:1F:94:A4:70:8E:0C:1F:A2:56:FB:A7:A9:E1
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 01A05D3A4EC90DBA3DA3683E04166DBA6A2C
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/SFbY1Wd8Vh-UpHCODB-iVvunqeE.roa
Signing time: Tue 01 Sep 2026 13:48:17 +0000
ROA not before: Tue 01 Sep 2026 13:48:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218802
IP address blocks: 87.76.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 13:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5d:3a:4e:c9:0d:ba:3d:a3:68:3e:04:16:6d:ba:6a:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Sep 1 13:48:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4856d8d5677c561f94a4708e0c1fa256fba7a9e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a5:0d:58:31:e5:2a:49:06:6d:b8:75:03:db:
b3:ba:b7:2e:d3:f8:d2:5a:3c:ef:18:7d:35:d8:d9:
37:38:5d:61:ec:fd:a0:bf:08:55:f5:5c:3f:9d:75:
92:50:ba:79:9b:cb:42:e0:80:38:ba:ce:16:78:de:
7b:b5:50:ae:6e:93:af:c4:9e:cd:77:55:38:7e:f3:
f7:7a:f8:54:b9:b5:57:18:71:f8:48:c6:a3:e8:b8:
b6:bb:b8:40:6d:65:18:f7:ff:6c:a5:9d:d9:38:c0:
73:24:59:06:9f:3a:85:64:a9:3a:f7:af:ab:da:46:
49:60:fc:0e:0e:6d:76:1f:67:fd:a6:4e:e3:95:7a:
85:ca:dc:61:16:4a:61:12:fb:b3:88:0e:d3:9a:05:
4a:b2:02:64:50:09:fb:26:88:a8:7b:58:c6:59:be:
f0:55:60:9e:b0:fb:5d:2e:66:d2:b7:8e:2c:d4:28:
a8:f1:1a:60:28:17:4b:3a:e2:2e:12:b8:90:5b:83:
39:8b:3c:14:e4:80:dc:e1:e1:1b:94:46:68:03:fc:
c0:b5:c2:f3:e4:b3:2a:d5:f8:64:b9:70:f7:99:f0:
22:15:3c:5d:b5:21:a7:f4:f3:9a:d7:62:0a:33:24:
64:d2:57:a4:b3:76:ef:b2:d4:4e:9d:61:e3:0c:88:
c6:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:56:D8:D5:67:7C:56:1F:94:A4:70:8E:0C:1F:A2:56:FB:A7:A9:E1
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/SFbY1Wd8Vh-UpHCODB-iVvunqeE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.155.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:8f:c9:49:0e:d3:48:af:06:22:6e:66:67:ed:2a:e1:31:eb:
30:fe:4c:2e:81:43:07:88:3a:5d:99:c0:96:3f:91:a8:88:65:
3e:c1:eb:0b:84:d2:c3:36:ed:a1:19:7c:20:59:2e:f7:80:c4:
74:bd:a4:52:5e:a6:59:cb:0f:6c:5f:b9:62:27:38:42:d9:26:
83:2c:ff:38:e1:ff:4a:7f:83:c0:b6:f7:ba:5c:6c:b7:5c:7e:
cf:ba:87:e8:e5:fb:02:66:ae:c2:5e:cd:5f:d5:cd:04:41:2e:
ca:01:5b:b2:25:86:ff:f6:48:73:54:2f:26:37:da:0a:b2:d5:
e7:97:7b:d2:96:89:83:96:6b:63:b0:7a:2f:60:dc:64:4e:ad:
8f:b6:42:c0:2b:f8:3b:96:f7:7b:84:59:ed:cd:9e:e8:1a:11:
e0:31:11:b6:b9:ee:7c:14:56:59:b4:e6:a2:a1:8b:35:45:7d:
05:41:b4:b3:1d:46:be:32:76:8e:da:6a:ac:ef:8f:8d:bb:3d:
bd:5a:03:71:6a:4f:e0:9e:34:2f:bd:b8:1c:32:95:ca:fb:6d:
81:02:5c:a1:39:f8:e6:b2:a9:66:80:bb:5a:61:88:11:00:5c:
bb:aa:1e:4d:ec:09:0c:40:0e:15:fa:7d:60:6d:13:b0:5b:14:
d0:04:7f:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:52:44 2026 by rpki-client