Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/csjshz6n525yNzvcrvQxNwXNuWk.roa
File: csjshz6n525yNzvcrvQxNwXNuWk.roa (raw, json)
Hash identifier: fgCdDBjheYQFbLL46L49FGIRm27IryIGvRWDLbMIhsw=
Subject key identifier: 72:C8:EC:87:3E:A7:E7:6E:72:37:3B:DC:AE:F4:31:37:05:CD:B9:69
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 019EB69532FB06E71A616238C8A3C58536FA
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/csjshz6n525yNzvcrvQxNwXNuWk.roa
Signing time: Thu 11 Jun 2026 12:08:11 +0000
ROA not before: Thu 11 Jun 2026 12:08:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214762
IP address blocks: 87.76.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 00:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:95:32:fb:06:e7:1a:61:62:38:c8:a3:c5:85:36:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Jun 11 12:08:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=72c8ec873ea7e76e72373bdcaef4313705cdb969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b4:72:5d:5f:1e:d5:8c:fe:8b:62:2f:dd:5d:
11:53:e3:fa:75:6f:da:70:d2:26:3f:ba:83:85:43:
a4:63:a0:39:d2:4b:ea:49:cc:d2:91:68:82:ee:39:
08:dd:5d:34:57:7c:57:8c:3e:92:e8:d9:7e:b1:92:
c0:39:56:66:b0:92:4e:ff:0a:6a:63:c9:5f:bd:7c:
13:2a:57:44:2d:64:c4:a5:c1:82:40:09:bf:d5:51:
2d:83:55:1c:19:a8:e2:d3:8d:db:c1:0d:d9:fa:10:
a8:75:53:5f:39:d0:37:6f:30:a5:6e:b7:f3:45:a7:
d5:5d:e8:1b:54:74:55:67:d9:9d:e1:8c:98:52:ec:
ab:10:0d:3e:fe:60:f1:46:7b:f4:20:b5:11:d1:92:
78:2c:a9:fb:b9:78:1a:24:dd:55:db:ac:ed:84:36:
d1:03:28:d1:0a:8e:9d:8c:4b:70:ca:83:73:19:f1:
c4:a4:b3:e1:22:0d:3a:00:de:66:b4:a7:13:b5:6c:
cb:0b:e4:86:cd:40:39:c4:b8:11:8f:8a:c3:c5:14:
57:74:48:65:19:42:2c:5e:a2:71:08:48:cf:9f:49:
b4:ed:88:30:a4:42:93:15:eb:ca:12:0f:57:27:2e:
b9:81:d0:4e:a0:c0:b2:ca:81:51:2c:75:d0:98:e5:
e9:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:C8:EC:87:3E:A7:E7:6E:72:37:3B:DC:AE:F4:31:37:05:CD:B9:69
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/csjshz6n525yNzvcrvQxNwXNuWk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.134.0/24
Signature Algorithm: sha256WithRSAEncryption
81:1d:79:67:7a:cd:2f:c4:8c:f2:2f:af:6f:b8:6d:64:36:9a:
9d:f3:d8:0f:24:00:db:a2:cc:18:c7:20:e5:e7:6f:d0:4e:82:
da:0d:03:c7:9d:b6:be:53:64:5d:cb:34:29:7e:41:c7:39:d9:
1b:a5:65:55:86:c4:19:88:e6:94:dd:24:bb:f2:c8:b0:19:49:
cf:2b:a6:40:e3:84:40:89:a2:5b:0d:c5:bf:0d:fb:67:47:f8:
ec:87:f5:cc:05:5b:5a:e8:90:df:59:94:8e:e5:26:92:10:22:
f6:05:51:b0:76:69:a5:5e:43:fc:4d:05:ec:7d:64:58:25:f7:
cc:80:fe:fb:90:04:ad:a8:ad:4c:c3:be:c3:e8:c5:db:62:42:
6c:29:b9:85:89:0b:67:31:0c:91:c3:37:5b:ad:2e:0b:2b:9d:
13:67:ad:9b:85:29:c4:79:15:1a:ce:00:c8:d9:80:cf:a1:3a:
7d:b8:de:1a:ca:df:6f:1e:da:83:fa:d5:db:5e:2f:a2:e5:41:
58:84:1d:a1:b0:8a:95:18:52:72:6b:46:3b:fe:ab:0f:e2:cd:
74:a3:c8:84:98:14:77:7c:b8:5b:96:bc:88:c6:88:82:6e:88:
71:4d:9c:16:3f:6d:6e:8a:74:d1:f8:77:a3:61:7e:22:44:bd:
60:27:2a:8e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ62lTL7BucaYWI4yKPFhTb6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyMWYwY2JhMTBkYWEzMDJlM2IxNjdjZWU1Mzk1Zjc0MmY1
MzBiMDkwHhcNMjYwNjExMTIwODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MmM4ZWM4NzNlYTdlNzZlNzIzNzNiZGNhZWY0MzEzNzA1Y2RiOTY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbRyXV8e1Yz+i2Iv3V0RU+P6dW/a
cNImP7qDhUOkY6A50kvqSczSkWiC7jkI3V00V3xXjD6S6Nl+sZLAOVZmsJJO/wpq
Y8lfvXwTKldELWTEpcGCQAm/1VEtg1UcGaji043bwQ3Z+hCodVNfOdA3bzClbrfz
RafVXegbVHRVZ9md4YyYUuyrEA0+/mDxRnv0ILUR0ZJ4LKn7uXgaJN1V26zthDbR
AyjRCo6djEtwyoNzGfHEpLPhIg06AN5mtKcTtWzLC+SGzUA5xLgRj4rDxRRXdEhl
GUIsXqJxCEjPn0m07YgwpEKTFevKEg9XJy65gdBOoMCyyoFRLHXQmOXp/wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHLI7Ic+p+ducjc73K70MTcFzblpMB8GA1UdIwQY
MBaAFFIfDLoQ2qMC47FnzuU5X3QvUwsJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWg4TXVoRGFvd0xqc1dmTzVUbGZkQzlUQ3drLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82OGNlMzYtNzRlNC00NDNiLWFlZjEt
M2JiOGIwNzVkNjlmLzEvY3Nqc2h6Nm41MjV5Tnp2Y3J2UXhOd1hOdVdrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82OGNlMzYtNzRlNC00NDNiLWFlZjEtM2JiOGIwNzVkNjlm
LzEvVWg4TXVoRGFvd0xqc1dmTzVUbGZkQzlUQ3drLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV0yGMA0G
CSqGSIb3DQEBCwUAA4IBAQCBHXlnes0vxIzyL69vuG1kNpqd89gPJADboswYxyDl
52/QToLaDQPHnba+U2RdyzQpfkHHOdkbpWVVhsQZiOaU3SS78siwGUnPK6ZA44RA
iaJbDcW/DftnR/jsh/XMBVta6JDfWZSO5SaSECL2BVGwdmmlXkP8TQXsfWRYJffM
gP77kAStqK1Mw77D6MXbYkJsKbmFiQtnMQyRwzdbrS4LK50TZ62bhSnEeRUazgDI
2YDPoTp9uN4ayt9vHtqD+tXbXi+i5UFYhB2hsIqVGFJya0Y7/qsP4s10o8iEmBR3
fLhblryIxoiCbohxTZwWP21uinTR+HejYX4iRL1gJyqO
-----END CERTIFICATE-----
Generated at Sat Jun 13 06:40:58 2026 by rpki-client