Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/1-pCosEhvFdZHyLRTyI94BK1MtXQ.roa
File: 1-pCosEhvFdZHyLRTyI94BK1MtXQ.roa (raw, json)
Hash identifier: 0ZNSqjiezR2/3sbQt6E7Zf3+Y/dku08HC4a56bhLRjc=
Subject key identifier: FA:90:A8:B0:48:6F:15:D6:47:C8:B4:53:C8:8F:78:04:AD:4C:B5:74
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 019F4220A73A2F2B9C0AA0485FCFDC84072E
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/1-pCosEhvFdZHyLRTyI94BK1MtXQ.roa
Signing time: Wed 08 Jul 2026 14:27:43 +0000
ROA not before: Wed 08 Jul 2026 14:27:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211851
IP address blocks: 87.76.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:42:20:a7:3a:2f:2b:9c:0a:a0:48:5f:cf:dc:84:07:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Jul 8 14:27:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fa90a8b0486f15d647c8b453c88f7804ad4cb574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:69:54:89:4a:76:77:43:31:99:fc:9c:3b:a8:
a8:88:05:16:ca:b4:35:64:eb:1e:41:73:98:9c:fd:
fc:76:31:15:10:20:df:0b:e7:e2:6e:45:6d:e2:4f:
87:7c:2c:35:9b:7a:29:32:f9:ea:94:f9:58:56:36:
8d:a0:a0:49:ae:3a:4a:25:04:5e:b4:6d:94:d5:8f:
cf:4b:ba:3d:5d:9b:68:6f:2f:e7:5f:86:9a:17:ab:
af:7d:1e:20:c5:ec:ef:08:68:19:0c:25:ae:a5:44:
61:b9:9b:da:e8:be:f4:ea:2d:0c:95:57:fc:a4:98:
f0:b6:b5:bc:f2:43:09:ef:04:bc:fe:ee:04:37:53:
5e:3d:f2:f5:c1:8c:45:8b:4a:76:54:18:1b:2e:29:
bc:9f:af:82:95:ae:ab:5a:c4:b0:0e:78:75:d5:44:
21:d3:b4:4d:bc:76:14:b5:ab:aa:f4:62:df:e3:79:
bc:93:86:c5:43:44:e4:0d:e2:6f:91:e0:43:bf:af:
c4:e7:94:42:ec:bd:20:ac:94:87:38:dc:85:a4:b7:
f1:af:04:a7:7d:9c:96:ce:58:6a:49:d8:c2:03:cc:
31:9f:fa:9b:a1:c4:f9:1a:82:bc:fa:6b:43:52:ea:
37:a4:b8:2c:8d:48:74:bc:f4:d6:c4:13:1d:8a:9a:
a2:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:90:A8:B0:48:6F:15:D6:47:C8:B4:53:C8:8F:78:04:AD:4C:B5:74
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/1-pCosEhvFdZHyLRTyI94BK1MtXQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.159.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:4e:01:52:63:c4:39:4e:fe:91:77:c5:1c:67:79:a1:6b:0a:
94:f1:8e:73:88:c6:5d:95:17:30:98:85:71:cd:e0:4d:6a:d9:
a9:39:c6:db:7b:9c:87:43:eb:bd:02:fb:18:1d:96:39:fd:2c:
a4:44:5a:cf:4e:1f:27:db:3a:c0:37:c4:2a:59:3f:3c:08:7c:
40:b5:c2:3b:c2:98:91:3f:17:4d:72:a4:5d:0f:8c:5d:83:50:
01:77:62:84:f2:20:58:18:6e:14:1a:95:b8:82:40:e4:ed:07:
78:10:cf:fb:a5:4b:a8:54:f2:3d:4a:76:a4:fa:df:53:20:51:
58:39:9d:d3:2e:27:53:14:dc:27:df:b8:b1:36:40:55:d7:26:
a3:03:8a:39:5f:a1:d7:51:a5:65:8f:f4:93:66:98:ba:b3:bd:
57:1b:05:99:cb:e8:13:5b:49:aa:dc:3c:48:5b:d2:35:db:cc:
df:c3:38:fc:03:f3:5f:6b:a3:4d:12:e2:96:3f:ca:40:3c:92:
b8:39:e3:a7:20:85:6c:02:aa:fc:f8:08:20:3a:0b:70:1f:b9:
e4:00:17:9d:45:70:6c:53:fe:ee:23:1a:ab:52:26:3d:f9:09:
7e:0f:70:14:08:7a:1c:bb:5c:1a:db:17:69:aa:66:92:ff:6e:
eb:08:a1:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:46:06 2026 by rpki-client