Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/xmHnE1X8TFu9tPwb7H0UNgi6r5g.roa
File: xmHnE1X8TFu9tPwb7H0UNgi6r5g.roa (raw, json)
Hash identifier: cEhOgPrEYMLAQO45ubspAhEDyeoTNIdJFgpIp0yck1E=
Subject key identifier: C6:61:E7:13:55:FC:4C:5B:BD:B4:FC:1B:EC:7D:14:36:08:BA:AF:98
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 019E54DF8B700B8B433F268E3F291389BBBD
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/xmHnE1X8TFu9tPwb7H0UNgi6r5g.roa
Signing time: Sat 23 May 2026 12:46:36 +0000
ROA not before: Sat 23 May 2026 12:46:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215120
IP address blocks: 87.76.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:54:df:8b:70:0b:8b:43:3f:26:8e:3f:29:13:89:bb:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: May 23 12:46:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c661e71355fc4c5bbdb4fc1bec7d143608baaf98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:20:de:b0:d4:b7:bb:01:df:02:d1:62:6d:71:
f7:99:6d:24:d7:77:c6:3e:ba:1d:52:c9:bb:7e:67:
fd:43:51:35:b0:18:82:aa:f7:b4:9b:1d:67:24:16:
55:b4:49:37:96:d4:8c:9b:c0:cd:f5:cc:91:68:de:
6c:69:ee:f7:c4:47:4d:3b:b1:bb:c8:cf:ed:0d:3c:
e2:35:96:20:57:07:48:1c:69:7d:3b:c4:92:41:9b:
4c:40:2e:2e:3b:97:46:e0:f9:cc:5d:1b:6e:b9:11:
64:99:3d:cc:3f:d7:09:4e:40:81:54:52:66:69:45:
7c:3e:f4:cf:9d:14:db:c6:67:3d:c5:78:dc:74:44:
e5:ba:4b:b3:97:82:85:be:21:58:99:a7:83:df:1f:
6a:67:8c:d8:12:07:70:12:3f:3e:1c:4f:dd:96:b2:
f7:bf:da:56:a1:0a:50:53:1b:44:9b:46:72:72:00:
8b:fb:a1:65:2e:76:bd:8b:e0:1e:8e:93:85:f7:be:
5b:ca:75:17:64:59:ae:39:bd:5e:56:3a:54:a2:fc:
65:27:09:a5:a7:50:2b:06:be:3f:a4:3a:13:4e:04:
b4:e0:00:1a:a9:9f:44:cb:fb:c5:33:f8:91:5b:cb:
17:49:a8:21:75:6c:5d:7e:71:8b:4c:db:9a:a0:0b:
8f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:61:E7:13:55:FC:4C:5B:BD:B4:FC:1B:EC:7D:14:36:08:BA:AF:98
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/xmHnE1X8TFu9tPwb7H0UNgi6r5g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.173.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:ad:0f:32:08:72:f5:84:09:07:74:8f:fd:6b:dd:44:f6:54:
fd:fd:b7:38:82:bc:12:23:f6:13:9c:ea:64:a2:5d:17:4f:cd:
85:11:cb:f9:50:19:f8:75:22:43:2c:ec:23:f5:e9:03:ab:9b:
d5:df:f6:3c:1c:0f:51:c7:a0:37:5f:86:c2:9a:b5:46:6f:dd:
a7:c5:56:8f:5a:cf:22:06:9f:f3:a9:9f:23:0c:0c:de:c8:3e:
4f:14:8a:3b:fc:29:49:48:e6:df:20:17:60:f1:1d:e5:de:55:
b1:01:64:71:dc:e0:01:d3:0b:23:96:ad:95:12:25:a4:29:61:
90:95:1e:a5:2d:76:36:e1:17:11:5f:3e:9a:eb:5b:3a:3d:8f:
69:df:ab:6e:93:d4:5e:4b:dd:14:8e:2a:90:9f:14:0a:a4:c7:
1f:7f:67:27:f5:bc:e0:56:37:34:7e:02:ed:66:51:5c:3f:2c:
7f:c8:fd:26:0e:12:60:fd:8e:b8:3f:cb:64:22:a2:04:c2:52:
9c:a6:79:bf:e2:90:4e:71:96:dd:09:0b:06:a7:ae:9c:38:63:
1f:c1:b5:41:d8:8f:24:86:96:e3:f2:58:c5:97:6e:2e:58:de:
77:a1:eb:42:27:04:1b:d7:d9:aa:ae:1d:15:fc:5d:80:50:d3:
59:e3:1a:1f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ5U34twC4tDPyaOPykTibu9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyMWYwY2JhMTBkYWEzMDJlM2IxNjdjZWU1Mzk1Zjc0MmY1
MzBiMDkwHhcNMjYwNTIzMTI0NjM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNjYxZTcxMzU1ZmM0YzViYmRiNGZjMWJlYzdkMTQzNjA4YmFhZjk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoiDesNS3uwHfAtFibXH3mW0k13fG
ProdUsm7fmf9Q1E1sBiCqve0mx1nJBZVtEk3ltSMm8DN9cyRaN5sae73xEdNO7G7
yM/tDTziNZYgVwdIHGl9O8SSQZtMQC4uO5dG4PnMXRtuuRFkmT3MP9cJTkCBVFJm
aUV8PvTPnRTbxmc9xXjcdETlukuzl4KFviFYmaeD3x9qZ4zYEgdwEj8+HE/dlrL3
v9pWoQpQUxtEm0ZycgCL+6FlLna9i+AejpOF975bynUXZFmuOb1eVjpUovxlJwml
p1ArBr4/pDoTTgS04AAaqZ9Ey/vFM/iRW8sXSaghdWxdfnGLTNuaoAuPDQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMZh5xNV/ExbvbT8G+x9FDYIuq+YMB8GA1UdIwQY
MBaAFFIfDLoQ2qMC47FnzuU5X3QvUwsJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWg4TXVoRGFvd0xqc1dmTzVUbGZkQzlUQ3drLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82OGNlMzYtNzRlNC00NDNiLWFlZjEt
M2JiOGIwNzVkNjlmLzEveG1IbkUxWDhURnU5dFB3YjdIMFVOZ2k2cjVnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82OGNlMzYtNzRlNC00NDNiLWFlZjEtM2JiOGIwNzVkNjlm
LzEvVWg4TXVoRGFvd0xqc1dmTzVUbGZkQzlUQ3drLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV0ytMA0G
CSqGSIb3DQEBCwUAA4IBAQBurQ8yCHL1hAkHdI/9a91E9lT9/bc4grwSI/YTnOpk
ol0XT82FEcv5UBn4dSJDLOwj9ekDq5vV3/Y8HA9Rx6A3X4bCmrVGb92nxVaPWs8i
Bp/zqZ8jDAzeyD5PFIo7/ClJSObfIBdg8R3l3lWxAWRx3OAB0wsjlq2VEiWkKWGQ
lR6lLXY24RcRXz6a61s6PY9p36tuk9ReS90UjiqQnxQKpMcff2cn9bzgVjc0fgLt
ZlFcPyx/yP0mDhJg/Y64P8tkIqIEwlKcpnm/4pBOcZbdCQsGp66cOGMfwbVB2I8k
hpbj8ljFl24uWN53oetCJwQb19mqrh0V/F2AUNNZ4xof
-----END CERTIFICATE-----
Generated at Sat Jun 13 23:55:26 2026 by rpki-client