Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/tmK8DHrmcBnINMMyD2QW0IgULBE.roa
File: tmK8DHrmcBnINMMyD2QW0IgULBE.roa (raw, json)
Hash identifier: r85TfRa3AIHgPQ/FHH1jZhpg0dqRTysxXHtYOx/eV7Q=
Subject key identifier: B6:62:BC:0C:7A:E6:70:19:C8:34:C3:32:0F:64:16:D0:88:14:2C:11
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 019D4F60EEE2D2AE8788050350221CCF6DA0
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/tmK8DHrmcBnINMMyD2QW0IgULBE.roa
Signing time: Thu 02 Apr 2026 18:07:25 +0000
ROA not before: Thu 02 Apr 2026 18:07:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402187
IP address blocks: 87.76.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:4f:60:ee:e2:d2:ae:87:88:05:03:50:22:1c:cf:6d:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Apr 2 18:07:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b662bc0c7ae67019c834c3320f6416d088142c11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c7:ca:92:04:5b:ea:b9:d2:aa:dd:37:87:82:
14:5d:e2:85:7e:4a:2d:e8:ef:9f:37:3b:26:29:d1:
f9:5e:ef:81:0d:87:5d:cc:59:6f:bb:11:38:3d:c8:
38:97:4f:5e:40:13:68:97:e2:77:96:36:f4:69:c4:
10:d7:4c:e9:e6:1d:f2:9c:8b:a7:3a:aa:97:fd:2c:
ae:b7:4e:9e:43:17:d1:b8:24:96:d0:aa:1f:f3:08:
78:6a:80:88:db:5a:71:e4:19:1f:40:57:79:09:32:
ac:e4:4b:d7:fc:a4:9a:79:94:5b:d2:c4:05:61:c9:
de:ce:78:94:90:df:f8:61:38:7e:08:2d:07:02:a6:
da:56:2e:f9:ec:23:4a:08:8a:c5:c6:09:ba:31:10:
f2:99:36:44:77:7f:48:91:dc:89:6c:05:56:19:ec:
dd:b0:83:42:cc:bc:fa:0e:64:9e:c3:74:27:39:5e:
ff:07:91:72:9c:5e:48:1c:86:7c:0f:7d:8e:d7:3d:
ea:d3:a4:73:b0:9e:e1:3f:37:e4:24:6d:17:62:b9:
e8:eb:62:c3:b9:65:03:ba:c3:a6:5a:13:1c:79:02:
aa:04:8e:00:96:8f:34:b8:cd:f1:71:08:73:14:29:
2c:58:dd:b4:11:18:00:40:1b:56:d2:67:b2:6b:96:
90:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:62:BC:0C:7A:E6:70:19:C8:34:C3:32:0F:64:16:D0:88:14:2C:11
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/tmK8DHrmcBnINMMyD2QW0IgULBE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.177.0/24
Signature Algorithm: sha256WithRSAEncryption
43:17:5e:2e:b4:30:b2:cc:99:b6:21:2f:3f:91:d5:82:3a:09:
6d:0d:50:de:95:80:a2:a1:af:c3:3b:96:e6:d4:29:1c:67:6b:
99:7a:9c:48:9b:48:26:e1:8c:1c:d1:6c:d5:fd:d6:02:f6:3b:
fb:6d:20:40:4c:b7:99:63:f5:b6:66:fa:ed:c6:1e:30:48:23:
e9:a2:91:42:d6:4e:b9:64:21:7a:49:2c:09:19:2e:a6:00:25:
cc:c1:ea:bf:0a:18:aa:ae:96:ab:73:5d:a7:1c:db:0f:7e:94:
00:b2:b9:5f:c7:db:dc:2f:81:74:82:d1:10:96:f3:15:a7:e1:
22:a9:95:76:2d:be:94:f8:47:c0:d8:1a:9b:b9:d7:70:cd:69:
8c:c1:3c:6f:e5:f6:d3:e1:68:e4:e2:8b:cc:32:5b:29:da:1a:
f0:65:e4:f8:17:19:f1:0a:20:a1:eb:0f:eb:31:e4:91:bf:60:
54:53:17:19:e6:6f:3a:88:97:a8:06:17:ed:28:e4:87:9d:c0:
d5:b1:ba:95:0d:36:ee:ec:5a:17:45:42:e9:e5:3e:f3:00:48:
67:b6:19:0d:f5:93:f5:01:68:9d:ba:b4:b6:5e:23:b3:aa:cc:
d4:ea:aa:77:ab:1e:ad:2b:dc:ee:05:37:cf:d1:62:1f:33:ef:
ef:9f:d1:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:52:55 2026 by rpki-client