Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/fQMEic-P8JY9GwREbzMr7fzVBVs.roa
File: fQMEic-P8JY9GwREbzMr7fzVBVs.roa (raw, json)
Hash identifier: r2/6oKN2epmpJ7GiXoZWqdikBSguizM3+sTK/krsn+k=
Subject key identifier: 7D:03:04:89:CF:8F:F0:96:3D:1B:04:44:6F:33:2B:ED:FC:D5:05:5B
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 019ECFFB9C839FB61EEC9E2FF2A30A7F0E81
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/fQMEic-P8JY9GwREbzMr7fzVBVs.roa
Signing time: Tue 16 Jun 2026 10:30:33 +0000
ROA not before: Tue 16 Jun 2026 10:30:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 87.76.212.0/24 maxlen: 24
87.76.213.0/24 maxlen: 24
87.76.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Jun 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:cf:fb:9c:83:9f:b6:1e:ec:9e:2f:f2:a3:0a:7f:0e:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Jun 16 10:30:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7d030489cf8ff0963d1b04446f332bedfcd5055b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1c:55:0c:94:fb:48:99:b5:83:b7:cd:c1:19:
42:02:c9:e7:c6:96:91:ec:26:ca:56:0c:8d:1b:59:
52:3d:d3:8f:ed:60:f2:bc:59:c5:11:47:e6:8f:9a:
15:30:74:7e:f2:09:34:b6:4a:5b:a5:4d:ef:6b:18:
eb:42:43:0b:db:e4:6d:3b:d6:c7:60:b1:00:ec:28:
87:30:12:25:1f:a2:48:7c:7e:40:de:c0:f9:e6:86:
9d:38:99:f2:31:a2:2d:b3:99:89:47:0a:cc:99:15:
4d:a2:88:7e:14:0f:92:27:10:54:94:88:7b:9a:e3:
54:3b:99:a2:10:03:04:d7:12:ae:16:e1:af:d8:11:
d6:26:49:8f:94:29:47:08:93:42:e8:c3:3b:c3:b8:
c0:6b:3e:26:ae:c2:b5:35:37:da:a1:0e:29:36:39:
32:93:8e:da:97:a3:ff:0b:bb:54:58:ee:37:ee:0e:
3d:3d:35:b6:64:92:59:20:77:79:0a:54:cf:11:8e:
3e:fa:1c:ee:58:ab:7c:01:13:91:22:36:78:1e:b8:
1c:a6:25:23:08:6f:49:ee:7d:2a:14:00:a5:18:da:
b5:8d:a9:3a:ae:49:48:fe:b4:80:09:d8:9c:87:96:
2e:2b:6a:63:0b:17:8d:44:1a:14:fa:1d:03:96:57:
cd:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:03:04:89:CF:8F:F0:96:3D:1B:04:44:6F:33:2B:ED:FC:D5:05:5B
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/fQMEic-P8JY9GwREbzMr7fzVBVs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.212.0-87.76.214.255
Signature Algorithm: sha256WithRSAEncryption
16:f3:fb:36:a8:57:f0:51:06:dd:b7:75:27:c6:2c:51:e1:5a:
4a:ae:3d:af:09:b8:e9:ac:a2:5c:a5:f8:d0:34:df:94:c9:bd:
3b:1c:2c:4b:df:e3:8c:1a:04:06:38:65:ac:f0:59:c7:5c:f8:
63:f2:8d:77:6c:20:0b:33:1d:26:27:25:b3:c8:5f:4c:ae:89:
3a:b8:86:e2:1b:10:94:28:75:54:d8:af:6b:fc:45:ee:87:23:
28:12:59:fa:f1:31:2c:df:8c:28:17:1c:ad:2b:13:78:50:1f:
fa:e4:ec:96:89:60:ea:f7:af:ee:5b:01:cf:7d:72:17:4f:20:
be:03:66:27:63:38:42:96:df:46:ed:d4:ff:8d:59:7b:85:aa:
2c:3a:da:f2:b9:94:98:46:9a:84:2e:68:b5:e5:39:3b:29:f6:
cd:4a:a9:9c:4a:09:10:e3:45:98:cc:c3:30:f4:bf:0c:29:fd:
11:75:a6:98:c9:43:cb:35:31:b3:7b:20:6c:b8:31:d3:44:47:
28:f5:14:9b:e6:e0:46:f3:c9:03:ca:ef:53:0c:cb:e8:fa:af:
fd:86:8b:49:ab:77:9f:a4:e9:a6:37:af:b0:88:75:30:58:00:
e2:05:2a:54:31:8a:cb:92:33:de:cc:92:84:9f:1c:93:76:c3:
63:dc:68:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:14:11 2026 by rpki-client