Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/1-MQeAKKIj082xoIh3j3s2shICuA.roa
File: 1-MQeAKKIj082xoIh3j3s2shICuA.roa (raw, json)
Hash identifier: y1mBWUOyQJxC+KUkF1kIx8iKh1rKmBIumYtAJPK6uBY=
Subject key identifier: F8:C4:1E:00:A2:88:8F:4F:36:C6:82:21:DE:3D:EC:DA:C8:48:0A:E0
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 019F174941F1D7B9C501A908A0CA2130B45C
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/1-MQeAKKIj082xoIh3j3s2shICuA.roa
Signing time: Tue 30 Jun 2026 06:48:24 +0000
ROA not before: Tue 30 Jun 2026 06:48:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219443
IP address blocks: 87.76.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:49:41:f1:d7:b9:c5:01:a9:08:a0:ca:21:30:b4:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Jun 30 06:48:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f8c41e00a2888f4f36c68221de3decdac8480ae0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:de:a4:e7:dc:26:bd:42:20:52:eb:eb:06:5f:
e2:f5:e7:8b:2e:66:fd:4c:ab:e4:67:c4:e8:3b:8c:
03:dd:be:ce:91:8a:c2:3f:0f:dc:d7:52:be:5b:a5:
b3:2a:91:37:c7:99:1e:40:d8:50:bb:17:cd:46:3a:
57:9c:a9:f6:7b:bf:a7:5d:c8:8b:ad:f6:2e:23:9c:
2e:69:bb:de:57:b8:89:e4:06:c5:aa:50:2d:42:d7:
38:3c:e3:e0:cd:51:eb:6f:7f:cc:47:d9:3e:04:e6:
c9:5a:ce:95:cd:ee:eb:8f:e8:91:4a:25:2c:a3:46:
88:5a:c5:ad:1a:25:e9:41:0c:f0:69:4b:33:49:71:
6e:ec:1e:8d:91:f6:03:b9:a5:e7:ee:a7:3f:6e:0e:
35:82:46:49:7c:1e:5f:6d:02:1c:62:0c:ca:a2:b0:
aa:3b:72:23:a8:d6:ec:83:f4:3e:13:ca:ea:94:0e:
aa:e9:e0:99:19:34:3a:42:0b:ba:ed:a3:e7:88:27:
2f:a0:c3:e4:68:5d:c3:91:13:e1:51:5f:ac:6d:a5:
93:97:ee:be:e2:76:d4:c0:cd:5a:4b:01:24:c6:14:
df:e5:fc:ab:bf:e4:9d:60:55:c9:d3:40:98:b5:16:
ff:0f:c6:f6:80:65:91:40:7e:e3:99:50:27:15:d8:
05:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:C4:1E:00:A2:88:8F:4F:36:C6:82:21:DE:3D:EC:DA:C8:48:0A:E0
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/1-MQeAKKIj082xoIh3j3s2shICuA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.141.0/24
Signature Algorithm: sha256WithRSAEncryption
86:7f:30:3d:ff:2e:83:de:94:84:fb:4d:18:d7:d8:d4:69:1f:
3c:8e:41:80:82:f8:b5:c2:a6:3a:1c:27:39:e7:8d:8c:e3:b8:
bc:34:fd:23:55:dd:0d:08:45:82:3c:b3:b9:a4:99:ef:ad:f1:
02:38:62:d3:16:35:ae:dd:87:30:c5:34:5a:f5:d0:4d:c8:cf:
a3:33:05:c3:4c:be:04:6a:8b:b6:5c:a3:d2:08:3c:59:0b:28:
30:79:40:34:9c:e5:dd:96:79:8e:cf:18:d3:7b:9c:6f:f0:82:
74:1f:e7:17:30:6a:54:d2:e4:5b:85:82:87:db:8f:5f:06:10:
ad:b0:ec:d7:13:b2:74:5d:eb:af:da:d2:d7:df:18:d3:46:a7:
a3:91:4e:4e:35:b2:41:ef:a2:f7:8e:01:92:d3:66:12:8f:4f:
86:94:de:3b:84:d4:6a:a7:5f:d6:0e:74:a6:0c:94:9e:37:b1:
e2:93:e1:75:8b:7f:e8:0a:34:32:06:d4:0d:fe:9f:6e:90:32:
75:50:64:29:5f:a1:5c:5e:55:13:c5:10:1a:f1:3f:88:d3:a4:
77:81:39:51:4c:23:4a:f6:26:b0:49:d5:2a:27:73:21:f6:b4:
42:a4:5a:1c:3d:ef:b4:9e:58:89:c9:41:81:ea:41:f7:dc:8a:
2d:49:19:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:28:50 2026 by rpki-client