Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/j46xYfYC5Z3VArtp10ztp0mM3IA.roa
File: j46xYfYC5Z3VArtp10ztp0mM3IA.roa (raw, json)
Hash identifier: KMnlKuCX4Sf1wcsca1GP5j8/ZnDxp/OmQEmFSMjzV8E=
Subject key identifier: 8F:8E:B1:61:F6:02:E5:9D:D5:02:BB:69:D7:4C:ED:A7:49:8C:DC:80
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 01A0381B4B43377D449BFC556E65A4E3F573
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/j46xYfYC5Z3VArtp10ztp0mM3IA.roa
Signing time: Tue 25 Aug 2026 08:48:27 +0000
ROA not before: Tue 25 Aug 2026 08:48:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207530
IP address blocks: 87.76.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 09:33:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:38:1b:4b:43:37:7d:44:9b:fc:55:6e:65:a4:e3:f5:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Aug 25 08:48:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8f8eb161f602e59dd502bb69d74ceda7498cdc80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:09:5d:32:d8:12:5e:7e:0a:6f:3f:e5:ba:b1:
4c:1e:ee:6d:fe:0d:56:95:3d:47:2e:2d:ea:35:fc:
2f:1f:70:84:c8:56:b8:13:ca:07:a9:88:3f:aa:06:
ec:5e:a6:1b:0c:66:7e:a9:2a:ae:50:cb:c2:bf:0b:
e6:18:a1:8c:20:3f:96:7a:c7:b2:f6:cd:be:2d:dc:
95:fe:ab:59:88:36:57:0f:61:17:3b:3d:34:a6:44:
50:2d:a0:6f:6e:03:fe:a8:e4:82:48:f4:b1:c8:19:
96:a4:bf:20:9e:cc:33:fb:2b:fe:b2:80:a5:64:58:
b6:10:ab:09:86:98:f8:9f:c8:64:d3:76:9b:04:5d:
87:b6:4b:65:82:76:5e:b2:09:1f:fe:96:bf:99:a5:
ab:e9:1f:be:fe:5d:8c:0f:40:e7:6b:23:cf:ff:d1:
45:48:67:a8:c9:9c:a4:73:47:c6:28:64:0d:dc:ef:
b4:db:f9:6e:fe:bd:6b:77:aa:20:dd:7d:61:73:e0:
a9:95:a5:78:8f:6f:b4:86:9f:dd:f8:56:5c:0a:1c:
20:e8:35:2f:51:85:0a:dd:cd:dd:7a:92:ce:7e:a5:
a6:1c:7a:1d:e2:ae:5f:95:48:41:b0:78:eb:0e:29:
8d:e1:f9:5f:79:1b:cb:99:86:50:00:b4:fb:18:26:
39:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:8E:B1:61:F6:02:E5:9D:D5:02:BB:69:D7:4C:ED:A7:49:8C:DC:80
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/j46xYfYC5Z3VArtp10ztp0mM3IA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.167.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:d5:fa:78:3a:9c:98:3a:16:10:8e:13:8f:73:a1:c4:f7:38:
f3:83:b4:67:cc:b3:f7:79:ae:be:f2:96:59:1b:69:19:c2:31:
eb:19:4c:89:29:e8:a1:5d:86:33:dd:96:d5:3d:89:d7:40:f2:
49:dd:17:83:5b:30:a1:18:b4:34:c9:4b:6f:77:e0:48:c4:4e:
e4:92:ec:75:67:e9:3b:3c:6f:79:92:b7:89:3a:13:55:79:43:
1e:3d:9f:7e:2f:55:b9:e4:e5:e4:87:67:41:fc:07:15:ab:03:
47:e4:2a:ba:10:78:f9:14:f7:dc:a6:5c:a6:71:05:49:38:80:
e4:03:a3:aa:5a:f1:c0:19:16:cc:89:48:dd:56:25:ef:0b:4e:
c0:1f:a4:99:18:76:0a:ea:36:69:bb:f4:32:8b:f1:36:7f:b3:
84:1c:df:19:20:d2:37:98:92:35:3a:e7:b3:5f:e9:b0:96:59:
d2:f5:2a:c5:e4:3f:d4:75:f9:10:86:1d:b0:38:cb:69:01:e2:
2f:a6:8f:77:82:8d:be:19:de:2f:73:e1:2e:59:94:2e:a8:89:
50:7e:6a:fb:4c:03:a4:4c:f2:44:a9:c8:32:0e:f5:af:e7:7f:
2b:48:0b:19:4d:17:98:c4:39:09:d2:62:bf:41:d3:2f:4e:4b:
d0:ad:5d:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:09:58 2026 by rpki-client