Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/u2kZPAwbFGFuK9S01G3k7OOWp5Y.roa
File: u2kZPAwbFGFuK9S01G3k7OOWp5Y.roa (raw, json)
Hash identifier: AaucUhARuFPV1VJLDiJlVoVbhctVySAvhryXTDFZU0Y=
Subject key identifier: BB:69:19:3C:0C:1B:14:61:6E:2B:D4:B4:D4:6D:E4:EC:E3:96:A7:96
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 019E9EA84C941062B28FC548306F82D60F7E
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/u2kZPAwbFGFuK9S01G3k7OOWp5Y.roa
Signing time: Sat 06 Jun 2026 20:38:10 +0000
ROA not before: Sat 06 Jun 2026 20:38:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 87.76.137.0/24 maxlen: 24
87.76.170.0/24 maxlen: 24
87.76.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 00:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9e:a8:4c:94:10:62:b2:8f:c5:48:30:6f:82:d6:0f:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Jun 6 20:38:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bb69193c0c1b14616e2bd4b4d46de4ece396a796
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:be:9d:51:2c:6e:b5:00:ca:71:05:42:0a:4f:
5e:53:2a:f6:96:06:52:a6:30:d3:ed:d2:f2:b5:b6:
4e:a4:8a:8d:e2:33:9c:df:c3:2d:12:9d:15:3a:5b:
3f:bc:d1:75:52:7f:e0:3d:75:5c:41:aa:57:cf:ef:
62:b0:23:ca:cd:84:50:0e:6f:68:a1:dd:e0:f1:97:
20:ee:5e:85:b9:4b:e6:42:e8:d5:c8:49:ab:e1:b5:
eb:b2:a1:93:9d:3e:dd:5f:71:66:a3:81:35:ff:e3:
37:45:bd:ad:2c:ca:fb:60:de:42:f9:fa:2f:fa:13:
af:99:32:7e:e0:bb:ab:ff:f2:48:6a:4a:42:e3:84:
9a:ce:8f:ad:50:56:f6:d9:4e:33:8c:c8:8d:b8:58:
48:fb:5e:50:8a:fe:81:a1:92:33:47:e2:df:7d:1c:
fe:a7:a6:3c:1c:5b:42:e2:bb:0f:81:37:dc:15:9c:
27:fb:6a:73:99:cd:1f:93:79:3b:88:bd:f9:fa:11:
2e:a4:74:16:dc:d0:41:d5:33:98:36:6a:a0:d2:98:
b3:3f:25:0c:84:b9:61:12:2c:be:93:2d:94:1d:93:
c7:d0:5c:bc:7b:18:3b:96:90:bf:87:16:da:f2:b6:
ae:1a:f4:39:81:b9:2c:60:c8:0b:60:6c:8f:10:6f:
15:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:69:19:3C:0C:1B:14:61:6E:2B:D4:B4:D4:6D:E4:EC:E3:96:A7:96
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/u2kZPAwbFGFuK9S01G3k7OOWp5Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.137.0/24
87.76.170.0/24
87.76.206.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:20:99:30:b0:92:42:70:95:dd:78:d6:96:e5:02:d7:98:ed:
4e:84:9a:5c:a8:ae:b7:75:ee:22:d1:85:71:88:1e:10:6d:29:
95:e6:93:2e:a1:91:2a:af:5d:af:e8:48:c7:46:0f:a0:56:1d:
a0:23:75:60:ae:36:94:bd:6e:66:51:06:19:3c:23:d7:48:e6:
3d:18:43:12:b3:f4:cc:59:1e:07:1c:a8:00:56:21:3e:41:61:
62:03:7e:82:37:fb:68:e4:a4:73:ae:cc:77:49:65:a4:0b:c0:
0d:0f:d5:30:fc:19:a9:bc:b7:31:a8:9d:57:f6:4e:61:dd:c5:
3b:2d:bc:3a:38:4f:ae:a7:95:71:65:d0:b0:01:dc:03:5b:08:
f0:c9:76:52:20:81:bf:a4:fc:ee:a2:a4:c2:c2:c7:1c:92:81:
0b:70:98:00:52:b2:57:03:6c:53:12:7c:1a:37:c1:79:c1:ae:
14:0c:83:30:e6:e7:ec:25:ae:b5:51:21:10:20:3a:42:0c:fc:
97:9e:53:b6:fe:4a:a3:8d:17:f3:f3:4f:8f:a6:f6:ec:8f:7b:
77:35:8b:f4:10:58:2f:c7:30:db:cd:bd:a9:23:bd:36:0e:76:
1b:6a:e9:ae:6d:2f:2a:9b:b6:9e:dc:a9:aa:9b:e3:68:4b:86:
b4:86:4c:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:08:11 2026 by rpki-client