Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/UYTzP8fb-N3X3YX3diJl75lV5vU.roa
File: UYTzP8fb-N3X3YX3diJl75lV5vU.roa (raw, json)
Hash identifier: rbwNCp1FycsgkSEfPL+qLRQCpf/q3hkd8BjIk7z0cNQ=
Subject key identifier: 51:84:F3:3F:C7:DB:F8:DD:D7:DD:85:F7:76:22:65:EF:99:55:E6:F5
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 019E59CC3A1E9C6A3AB9241754499840D902
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/UYTzP8fb-N3X3YX3diJl75lV5vU.roa
Signing time: Sun 24 May 2026 11:43:36 +0000
ROA not before: Sun 24 May 2026 11:43:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209888
IP address blocks: 87.76.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 00:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:59:cc:3a:1e:9c:6a:3a:b9:24:17:54:49:98:40:d9:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: May 24 11:43:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5184f33fc7dbf8ddd7dd85f7762265ef9955e6f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:cb:54:20:62:f6:12:67:ca:6a:2e:ae:80:41:
bc:34:e5:7b:7e:59:ed:74:10:27:dc:a4:1b:b5:d6:
7d:94:f9:11:1c:63:66:6c:00:0c:54:9c:74:de:fa:
c7:b2:eb:03:e2:43:7b:19:8b:ab:48:17:94:50:a5:
0c:a5:ea:e9:ab:a2:0f:47:da:47:c9:d0:73:60:da:
de:86:37:81:c9:7d:f1:8c:0f:12:ab:1e:f2:56:d8:
ca:c7:96:a5:15:5c:83:4a:71:99:ef:77:04:89:75:
f9:5f:fe:d0:95:5a:bf:8b:5b:3d:28:d3:d4:f2:be:
65:fa:ff:a8:a4:ee:40:e2:d4:16:b9:37:57:a3:33:
09:1b:59:47:f0:1e:eb:cd:31:03:7a:da:74:38:70:
f4:dc:30:b6:a1:70:49:ed:d7:5e:72:7b:5e:39:00:
25:c8:8f:dd:86:df:06:78:75:8f:a2:96:c2:bc:8c:
ff:b6:59:53:18:de:43:40:36:6e:4f:85:0d:f6:5e:
ac:ea:f5:5e:2f:f4:c8:35:1a:54:59:52:95:2d:a9:
49:e2:9f:c2:27:fa:e5:15:aa:46:38:57:f0:b2:4c:
5e:94:02:2d:87:c4:2a:a4:b7:55:0d:13:c2:17:1d:
21:ad:82:de:8f:77:63:29:70:a6:79:25:56:ed:ed:
f9:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:84:F3:3F:C7:DB:F8:DD:D7:DD:85:F7:76:22:65:EF:99:55:E6:F5
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/UYTzP8fb-N3X3YX3diJl75lV5vU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.144.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:78:95:8e:6f:d1:6e:90:47:1e:5d:27:d8:d4:9f:b6:ba:58:
54:a3:0c:bc:ea:e9:d0:bf:23:a8:b1:5f:cd:5c:41:23:9a:de:
5c:72:df:17:60:0b:68:b8:8b:82:5c:1e:9d:8f:f5:8a:63:4c:
b1:74:c3:89:62:d2:33:7d:7e:23:c3:fc:2c:aa:d3:00:2e:bd:
26:c4:81:af:9f:cc:51:30:2a:55:a1:62:d8:12:41:04:4c:7f:
aa:13:c7:33:2f:bf:7e:5d:d2:04:e3:00:4c:e3:d3:c9:9a:e9:
43:91:47:f8:e7:e3:18:1d:90:3d:d5:a5:6f:19:27:ba:d2:07:
45:ce:fa:50:31:b2:f8:6f:0c:ea:e6:bd:21:9c:fd:8f:cd:c6:
13:13:1c:1e:93:bd:9d:0e:cf:02:eb:b3:14:69:79:af:3e:1b:
3c:5c:9b:a0:44:77:bd:f6:31:8a:21:2f:20:c4:2c:cd:ef:20:
c7:74:07:1c:0c:7e:d9:55:f0:f7:53:76:ce:e9:a7:3c:e0:09:
a0:0f:37:36:77:27:c4:5e:d0:3a:27:f3:bf:43:21:9c:61:05:
76:31:38:8a:e6:2b:4a:db:57:de:d0:a4:66:44:2d:a8:e1:38:
58:6a:0e:aa:a0:fd:e6:0f:a2:86:a0:7d:45:7e:39:1e:bd:d5:
65:3a:f3:d4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ5ZzDoenGo6uSQXVEmYQNkCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyMWYwY2JhMTBkYWEzMDJlM2IxNjdjZWU1Mzk1Zjc0MmY1
MzBiMDkwHhcNMjYwNTI0MTE0MzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MTg0ZjMzZmM3ZGJmOGRkZDdkZDg1Zjc3NjIyNjVlZjk5NTVlNmY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlctUIGL2EmfKai6ugEG8NOV7flnt
dBAn3KQbtdZ9lPkRHGNmbAAMVJx03vrHsusD4kN7GYurSBeUUKUMperpq6IPR9pH
ydBzYNrehjeByX3xjA8Sqx7yVtjKx5alFVyDSnGZ73cEiXX5X/7QlVq/i1s9KNPU
8r5l+v+opO5A4tQWuTdXozMJG1lH8B7rzTEDetp0OHD03DC2oXBJ7ddecnteOQAl
yI/dht8GeHWPopbCvIz/tllTGN5DQDZuT4UN9l6s6vVeL/TINRpUWVKVLalJ4p/C
J/rlFapGOFfwskxelAIth8QqpLdVDRPCFx0hrYLej3djKXCmeSVW7e35xQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFGE8z/H2/jd192F93YiZe+ZVeb1MB8GA1UdIwQY
MBaAFFIfDLoQ2qMC47FnzuU5X3QvUwsJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWg4TXVoRGFvd0xqc1dmTzVUbGZkQzlUQ3drLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82OGNlMzYtNzRlNC00NDNiLWFlZjEt
M2JiOGIwNzVkNjlmLzEvVVlUelA4ZmItTjNYM1lYM2RpSmw3NWxWNXZVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82OGNlMzYtNzRlNC00NDNiLWFlZjEtM2JiOGIwNzVkNjlm
LzEvVWg4TXVoRGFvd0xqc1dmTzVUbGZkQzlUQ3drLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV0yQMA0G
CSqGSIb3DQEBCwUAA4IBAQA+eJWOb9FukEceXSfY1J+2ulhUowy86unQvyOosV/N
XEEjmt5cct8XYAtouIuCXB6dj/WKY0yxdMOJYtIzfX4jw/wsqtMALr0mxIGvn8xR
MCpVoWLYEkEETH+qE8czL79+XdIE4wBM49PJmulDkUf45+MYHZA91aVvGSe60gdF
zvpQMbL4bwzq5r0hnP2PzcYTExwek72dDs8C67MUaXmvPhs8XJugRHe99jGKIS8g
xCzN7yDHdAccDH7ZVfD3U3bO6ac84AmgDzc2dyfEXtA6J/O/QyGcYQV2MTiK5itK
21fe0KRmRC2o4ThYag6qoP3mD6KGoH1FfjkevdVlOvPU
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:43:52 2026 by rpki-client