Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/zCymSjJac6sttFfFOIe3LLlwjS8.roa
File: zCymSjJac6sttFfFOIe3LLlwjS8.roa (raw, json)
Hash identifier: KUNxMJ0E5EEOoARMRfsRaf58ACXPPNMnU7kw4K9SzRY=
Subject key identifier: CC:2C:A6:4A:32:5A:73:AB:2D:B4:57:C5:38:87:B7:2C:B9:70:8D:2F
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 019F9E79DDAB0903E981C9F6F3114C9D6729
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/zCymSjJac6sttFfFOIe3LLlwjS8.roa
Signing time: Sun 26 Jul 2026 12:50:14 +0000
ROA not before: Sun 26 Jul 2026 12:50:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 87.76.137.0/24 maxlen: 24
87.76.140.0/24 maxlen: 24
87.76.170.0/24 maxlen: 24
87.76.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9e:79:dd:ab:09:03:e9:81:c9:f6:f3:11:4c:9d:67:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Jul 26 12:50:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cc2ca64a325a73ab2db457c53887b72cb9708d2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:74:09:0c:00:1c:ae:1a:d2:c7:c4:6d:b5:ee:
3d:90:8c:67:77:2d:5b:dd:f9:42:05:4d:11:bb:ca:
ba:bd:2f:d2:1a:fb:cb:da:93:77:c6:2c:5c:b8:85:
13:57:3a:29:37:26:a8:73:b0:e5:37:e1:89:d9:db:
35:ac:44:76:3d:8c:4e:7e:6e:02:9b:d6:b6:3f:e2:
87:f7:7f:e4:4f:fc:8e:ab:e5:20:d0:5c:40:bf:d2:
fa:51:e7:d7:bd:89:e6:dd:e6:27:a7:87:64:e5:e3:
7a:f1:b5:39:ec:c8:ec:6a:68:85:1c:67:47:e9:dc:
de:2c:71:8d:33:d4:40:3c:24:a8:4e:03:f8:f5:98:
be:07:c5:f8:48:a3:79:b2:d0:1d:56:f0:9c:c0:fc:
ad:2e:11:0e:af:ab:eb:89:a7:d6:2f:2b:c2:fe:8e:
c7:c7:c3:55:b2:08:70:b1:0b:2a:e5:50:dd:f9:8f:
e2:65:fc:bb:c3:54:a0:b4:d3:a1:60:ce:63:47:2b:
ff:23:0f:64:32:77:06:61:39:19:5b:1b:1a:3f:32:
b4:88:ec:7e:0f:f5:01:20:fe:cb:45:ea:85:58:0c:
2f:c5:e8:3d:67:bd:5f:2d:16:da:41:9a:d6:2d:d2:
b5:71:b5:82:7f:a5:81:0e:bb:bc:10:80:46:e0:fa:
c5:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:2C:A6:4A:32:5A:73:AB:2D:B4:57:C5:38:87:B7:2C:B9:70:8D:2F
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/zCymSjJac6sttFfFOIe3LLlwjS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.137.0/24
87.76.140.0/24
87.76.170.0/24
87.76.206.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:d9:0a:3f:29:00:49:23:90:55:a7:c9:83:ef:2e:a0:de:a8:
a7:49:c2:5b:3a:98:7f:51:98:2c:9f:6d:37:83:9c:59:59:23:
b2:6d:63:b8:e2:bc:2c:89:21:70:50:0e:d1:2a:b1:fa:c6:1e:
39:58:8c:d0:9e:67:bf:23:f9:b1:92:11:68:2f:c8:28:c8:15:
04:42:ae:30:42:64:fa:76:72:f3:fa:76:bd:97:70:6b:a2:b4:
94:36:a6:13:74:48:c4:19:3b:ab:a8:fc:25:f8:f4:80:dc:88:
a7:46:6a:52:7b:a1:c0:9a:17:bf:11:cb:0e:c3:40:7c:c0:d3:
94:06:d6:a8:06:b4:a8:5a:c6:58:be:2a:22:20:6f:c8:b1:a5:
1b:0c:47:56:c8:c1:6c:2e:8a:a8:d7:6a:98:50:e7:cc:b2:76:
0b:f1:cf:14:b3:76:4b:d8:1b:24:96:28:fc:2b:d5:c5:5c:4a:
51:b8:c0:5c:c9:5b:96:88:a7:c3:fd:f8:6c:d9:bf:72:93:f2:
90:41:41:60:e4:63:06:ea:97:9c:b3:58:fe:78:46:85:47:01:
39:79:bc:10:82:84:1f:b2:a4:97:e7:db:1d:a6:0a:0c:e3:96:
a6:f1:da:c2:60:ae:d6:83:b4:00:10:d6:fa:d6:c3:5e:c8:0a:
24:91:10:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:03:50 2026 by rpki-client