Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/dPuk24URhPmvmhZ75VCmbWBMykc.roa
File: dPuk24URhPmvmhZ75VCmbWBMykc.roa (raw, json)
Hash identifier: 09LZkSEmcpEazyElRmW5jZtruVD4viDJYwRR4hv+l54=
Subject key identifier: 74:FB:A4:DB:85:11:84:F9:AF:9A:16:7B:E5:50:A6:6D:60:4C:CA:47
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 01A1A73C2205C362C473A6DCC09C2DF40B2F
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/dPuk24URhPmvmhZ75VCmbWBMykc.roa
Signing time: Wed 04 Nov 2026 15:44:58 +0000
ROA not before: Wed 04 Nov 2026 15:44:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9009
IP address blocks: 87.76.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a7:3c:22:05:c3:62:c4:73:a6:dc:c0:9c:2d:f4:0b:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Nov 4 15:44:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=74fba4db851184f9af9a167be550a66d604cca47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:99:36:8f:46:9f:20:09:e6:20:a0:88:5a:d1:
d9:10:6e:3a:23:80:96:49:79:e4:a0:6e:31:f2:f3:
c1:8b:7f:0e:0a:b5:f1:bb:60:80:c0:30:89:0b:14:
93:8b:64:f2:e1:5c:7e:76:51:78:88:13:02:f8:3f:
af:a5:65:3c:1a:fa:f9:a9:14:7f:44:89:dd:d8:70:
8a:77:9a:d9:b0:a9:33:f7:b5:19:ab:db:68:19:c3:
5d:ea:6d:c2:47:46:62:9b:40:22:1a:56:d3:fe:6c:
7b:aa:2d:37:82:d8:44:28:ce:02:01:46:18:3d:54:
0f:44:d9:a0:1a:28:23:da:14:1a:1a:89:bd:15:d6:
78:82:84:44:18:b6:6d:76:4e:2e:93:d3:2d:7a:72:
be:c1:e7:97:da:40:f9:65:6b:2d:fc:a2:67:8a:81:
7b:51:ed:44:17:41:cb:2f:36:5e:71:c0:ec:d8:a2:
ec:7d:c0:da:cf:c8:37:67:5c:26:83:10:76:28:89:
85:f2:d7:51:69:2b:67:ef:d2:30:bf:5b:6a:ce:10:
4a:ff:d5:43:b8:e3:79:84:89:67:74:b8:8d:5f:0e:
98:fd:e8:74:53:d7:9e:be:ad:bd:81:ba:e0:e6:76:
1a:d7:d2:03:39:69:28:77:db:e9:a6:5d:f0:13:3c:
6d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:FB:A4:DB:85:11:84:F9:AF:9A:16:7B:E5:50:A6:6D:60:4C:CA:47
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/dPuk24URhPmvmhZ75VCmbWBMykc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.152.0/24
Signature Algorithm: sha256WithRSAEncryption
25:d4:35:24:5a:a3:b9:58:9a:0f:bf:e9:53:12:89:c8:15:2d:
69:f1:ec:82:11:4c:a3:e6:d8:54:a2:59:b6:78:41:ac:d1:43:
7f:8f:0c:71:97:95:62:04:43:91:55:85:93:33:55:db:41:4c:
31:67:f8:a7:3a:72:d8:db:0d:87:e7:7e:0a:e8:c8:5b:aa:f0:
8f:05:ff:76:c8:75:23:fd:13:f6:95:63:b5:41:2a:70:5c:5d:
ac:37:8e:f6:56:36:b6:d1:6e:f2:90:0e:77:9b:65:9d:5e:f6:
e9:47:74:4b:2a:45:da:13:70:d1:38:b7:a9:8f:42:f1:1f:9b:
c2:37:a1:73:aa:a4:8b:6d:87:b9:65:5c:a1:d1:1c:bf:da:d5:
d4:d7:84:8e:81:ff:a4:ed:5c:5b:22:f4:75:f9:a2:96:e2:d0:
ad:12:bd:ac:7e:d1:c1:f6:24:15:42:d2:9c:4f:44:55:ad:62:
87:50:76:67:01:f8:d9:02:9f:ea:a4:68:5f:26:83:0e:f1:19:
2a:b9:10:7e:61:bc:ac:4c:b6:c2:7e:f4:1e:23:41:a6:94:dd:
9c:ac:f2:bf:43:42:5c:58:46:3b:a2:25:18:0a:f7:28:ef:76:
a9:6f:72:4d:37:42:37:94:70:e6:31:9d:f0:69:55:93:51:04:
03:ed:a5:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 19:51:35 2026 by rpki-client