Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/gnlIYKjH5Gn-WFqXVmB2_ivLVzE.roa
File: gnlIYKjH5Gn-WFqXVmB2_ivLVzE.roa (raw, json)
Hash identifier: J1UJH7UkOhsHdNVt3fv0M/Uy85OTr7NDItc4ewu7/jQ=
Subject key identifier: 82:79:48:60:A8:C7:E4:69:FE:58:5A:97:56:60:76:FE:2B:CB:57:31
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 019ECFFAB2B7E21807061E3F12380B966F92
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/gnlIYKjH5Gn-WFqXVmB2_ivLVzE.roa
Signing time: Tue 16 Jun 2026 10:29:33 +0000
ROA not before: Tue 16 Jun 2026 10:29:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 87.76.159.0/24 maxlen: 24
87.76.178.0/24 maxlen: 24
87.76.189.0/24 maxlen: 24
87.76.210.0/24 maxlen: 24
87.76.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Jun 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:cf:fa:b2:b7:e2:18:07:06:1e:3f:12:38:0b:96:6f:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Jun 16 10:29:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=82794860a8c7e469fe585a97566076fe2bcb5731
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:16:b7:70:8f:8a:0f:61:01:78:c3:c5:10:43:
28:f0:72:31:d4:e4:dc:f0:d4:a9:44:b3:e2:1a:25:
32:32:bd:f5:94:02:bd:06:58:f9:97:39:2c:0e:66:
2d:bd:22:7d:98:de:96:84:68:7d:02:c8:4d:8c:30:
45:ce:72:66:31:0d:c3:5c:7a:e3:8e:42:11:b4:9f:
bd:c5:fc:d0:bb:0e:a5:72:b3:ac:47:15:9c:46:de:
2d:7a:da:e3:4a:aa:e5:40:88:fc:3e:2e:7a:0d:aa:
6f:3a:92:65:65:e0:fa:70:68:ed:5c:1c:3c:1c:b0:
2c:0a:77:77:67:88:35:97:18:ac:b1:8d:bd:f7:d0:
f5:82:ea:80:9b:92:48:aa:2f:8a:9d:f9:c7:48:43:
86:c8:cc:7e:5d:7b:3b:58:69:14:b7:fc:de:c0:76:
5c:86:ed:32:ff:88:1b:15:7d:c4:5e:c2:97:ed:f2:
e1:5b:7c:e6:dc:0a:27:ba:6a:23:3b:40:b4:c7:fd:
99:ca:14:3f:fc:7b:1e:c7:72:db:55:58:de:5f:e2:
35:2e:9b:33:41:be:69:19:35:14:27:93:27:da:3d:
7c:ae:b0:d8:db:37:74:07:8c:34:d9:89:af:bd:67:
a6:96:6d:a4:b3:97:c4:5f:e9:a2:86:9c:94:c1:9a:
10:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:79:48:60:A8:C7:E4:69:FE:58:5A:97:56:60:76:FE:2B:CB:57:31
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/gnlIYKjH5Gn-WFqXVmB2_ivLVzE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.159.0/24
87.76.178.0/24
87.76.189.0/24
87.76.210.0/24
87.76.223.0/24
Signature Algorithm: sha256WithRSAEncryption
37:90:64:83:c6:73:52:ac:92:72:2c:9a:8a:56:4e:8a:4f:ec:
9c:a2:cc:b2:a4:67:f4:bc:db:f7:a4:0a:7d:a5:7d:90:7d:d4:
8e:2d:ba:26:d7:fa:e8:e8:f9:30:c8:fa:71:eb:40:2e:8c:b3:
98:68:fc:7f:29:31:84:85:ab:fc:e0:70:69:04:e6:93:3a:84:
42:5b:cf:da:c0:09:29:96:53:00:f6:57:83:4c:d8:e5:37:59:
89:20:be:17:b1:19:be:a4:aa:d6:86:03:f2:64:6b:00:0d:36:
b1:60:2d:7c:53:f6:29:e2:02:93:80:b7:78:ff:b9:6b:db:2b:
e2:2f:66:91:9f:cb:71:62:97:49:c9:5d:c3:f6:6a:f6:75:fd:
73:82:3e:27:f6:52:6d:bf:c8:ec:42:f6:8b:34:78:af:f1:c4:
ff:e6:3d:cb:af:aa:14:2b:be:24:06:99:a7:b2:8e:b4:3f:63:
bd:39:bc:fb:9f:5a:24:21:1d:93:c0:87:bd:0a:8d:39:50:2a:
1e:0b:a0:c6:ba:ef:81:59:17:75:a5:27:d0:d8:35:8c:a9:f4:
1e:59:48:d9:56:d8:cc:af:38:45:e7:23:89:21:8f:ff:57:d1:
7d:e6:e1:c7:77:06:9c:79:ef:88:61:aa:c1:47:18:db:0d:f7:
13:dc:81:c8
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZ7P+rK34hgHBh4/EjgLlm+SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyMWYwY2JhMTBkYWEzMDJlM2IxNjdjZWU1Mzk1Zjc0MmY1
MzBiMDkwHhcNMjYwNjE2MTAyOTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4Mjc5NDg2MGE4YzdlNDY5ZmU1ODVhOTc1NjYwNzZmZTJiY2I1NzMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRa3cI+KD2EBeMPFEEMo8HIx1OTc
8NSpRLPiGiUyMr31lAK9Blj5lzksDmYtvSJ9mN6WhGh9AshNjDBFznJmMQ3DXHrj
jkIRtJ+9xfzQuw6lcrOsRxWcRt4tetrjSqrlQIj8Pi56DapvOpJlZeD6cGjtXBw8
HLAsCnd3Z4g1lxissY2999D1guqAm5JIqi+KnfnHSEOGyMx+XXs7WGkUt/zewHZc
hu0y/4gbFX3EXsKX7fLhW3zm3AonumojO0C0x/2ZyhQ//Hsex3LbVVjeX+I1Lpsz
Qb5pGTUUJ5Mn2j18rrDY2zd0B4w02YmvvWemlm2ks5fEX+mihpyUwZoQUwIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFIJ5SGCox+Rp/lhal1Zgdv4ry1cxMB8GA1UdIwQY
MBaAFFIfDLoQ2qMC47FnzuU5X3QvUwsJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWg4TXVoRGFvd0xqc1dmTzVUbGZkQzlUQ3drLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82OGNlMzYtNzRlNC00NDNiLWFlZjEt
M2JiOGIwNzVkNjlmLzEvZ25sSVlLakg1R24tV0ZxWFZtQjJfaXZMVnpFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82OGNlMzYtNzRlNC00NDNiLWFlZjEtM2JiOGIwNzVkNjlm
LzEvVWg4TXVoRGFvd0xqc1dmTzVUbGZkQzlUQ3drLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAV0yfAwQA
V0yyAwQAV0y9AwQAV0zSAwQAV0zfMA0GCSqGSIb3DQEBCwUAA4IBAQA3kGSDxnNS
rJJyLJqKVk6KT+ycosyypGf0vNv3pAp9pX2QfdSOLbom1/ro6PkwyPpx60AujLOY
aPx/KTGEhav84HBpBOaTOoRCW8/awAkpllMA9leDTNjlN1mJIL4XsRm+pKrWhgPy
ZGsADTaxYC18U/Yp4gKTgLd4/7lr2yviL2aRn8txYpdJyV3D9mr2df1zgj4n9lJt
v8jsQvaLNHiv8cT/5j3Lr6oUK74kBpmnso60P2O9Obz7n1okIR2TwIe9Co05UCoe
C6DGuu+BWRd1pSfQ2DWMqfQeWUjZVtjMrzhF5yOJIY//V9F95uHHdwacee+IYarB
RxjbDfcT3IHI
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:15:34 2026 by rpki-client