Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/680MltLdbdt_YOD4IZGZMkuO5T8.roa
File: 680MltLdbdt_YOD4IZGZMkuO5T8.roa (raw, json)
Hash identifier: ZZ/qokAFMlmlp8F+Ue3L4d505PRQH1X3ufhbE9fDMfU=
Subject key identifier: EB:CD:0C:96:D2:DD:6D:DB:7F:60:E0:F8:21:91:99:32:4B:8E:E5:3F
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 01A0CF3E0628D992F8E9B081C1E7DCCC9BB7
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/680MltLdbdt_YOD4IZGZMkuO5T8.roa
Signing time: Wed 23 Sep 2026 17:09:03 +0000
ROA not before: Wed 23 Sep 2026 17:09:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206766
IP address blocks: 87.76.168.0/24 maxlen: 24
87.76.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:3e:06:28:d9:92:f8:e9:b0:81:c1:e7:dc:cc:9b:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Sep 23 17:09:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ebcd0c96d2dd6ddb7f60e0f8219199324b8ee53f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8d:1c:59:27:d6:e2:a4:80:d6:d7:cb:50:60:
14:54:b5:9a:9c:9c:a5:28:64:52:8f:c1:cc:47:ed:
52:6a:fe:2f:45:fb:64:ee:c2:65:07:33:da:46:58:
35:a8:5b:01:c6:bb:24:51:95:ee:5e:d5:4d:d2:2d:
49:06:5c:8a:15:57:b7:e5:25:50:3c:ce:3e:dd:45:
c1:af:42:a8:7f:ff:37:e9:c4:ad:2e:d5:7a:49:8a:
c6:d2:89:a9:eb:f6:c3:ee:2f:b8:68:af:2b:91:3d:
15:b6:70:23:0b:8d:9c:b6:72:89:99:b8:ac:13:ae:
31:33:2f:ce:b5:d2:8d:fc:4c:ea:0c:7c:f7:6d:25:
57:d9:ec:a2:9e:b5:27:47:03:24:2c:ca:bd:72:4d:
8f:b8:e3:8b:a0:9b:ce:08:7b:4f:09:a2:8a:07:70:
79:c0:92:40:0a:66:ea:f1:27:1e:a6:7f:1b:93:34:
c8:59:69:ba:b7:6a:ae:46:f2:5e:f1:ae:66:d7:be:
86:d7:55:93:2f:2e:30:bf:50:8b:11:26:39:3e:49:
99:99:70:31:bb:04:39:c1:08:fa:c8:57:5b:d4:95:
04:d7:83:75:6d:fa:60:3c:2c:ba:48:d8:4a:49:22:
31:fa:01:e0:68:d4:ff:a7:c8:04:71:5b:7b:a1:94:
b2:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:CD:0C:96:D2:DD:6D:DB:7F:60:E0:F8:21:91:99:32:4B:8E:E5:3F
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/680MltLdbdt_YOD4IZGZMkuO5T8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.168.0/24
87.76.201.0/24
Signature Algorithm: sha256WithRSAEncryption
90:55:34:9b:ba:be:e9:05:a2:b7:d2:49:89:4d:0d:20:35:28:
e8:de:d6:3e:c0:01:96:d1:cf:b6:77:0e:89:5b:07:4c:ed:65:
30:2f:f9:03:3b:50:39:a1:96:d2:af:50:81:03:5b:d8:f8:b4:
27:c7:03:5a:2a:e0:b2:a5:cf:b0:f9:ec:c0:a4:56:83:be:8f:
b2:73:8b:91:36:db:49:60:5f:42:2b:b6:32:3d:c1:96:1e:27:
ab:f2:f0:5a:2e:34:7f:33:d4:b8:ac:f6:ff:dc:8b:4a:16:ac:
1c:70:cd:76:5f:e8:3c:87:9b:bc:f9:2b:f0:d6:98:90:00:43:
f8:de:37:c0:75:51:01:68:e2:a8:89:17:b0:8f:11:70:e0:32:
b7:ea:f4:67:3f:05:2f:c8:27:3c:c1:be:15:a6:95:da:17:76:
2b:6b:db:f4:40:d8:6f:c2:ea:a5:d2:e8:54:b0:72:17:78:13:
52:5f:4a:4b:95:66:b0:ce:00:a8:e9:cd:e5:46:43:e9:9f:72:
d4:20:36:be:c3:05:19:3e:c5:9b:03:be:51:fb:c9:cb:b7:c9:
b9:ce:ae:71:0f:a0:a7:db:9d:13:97:65:bc:57:9a:f2:61:f3:
af:12:0b:b0:ce:f4:db:6d:54:a8:7e:ba:e7:43:fe:c3:48:19:
71:c4:e8:23
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaDPPgYo2ZL46bCBwefczJu3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyMWYwY2JhMTBkYWEzMDJlM2IxNjdjZWU1Mzk1Zjc0MmY1
MzBiMDkwHhcNMjYwOTIzMTcwOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYmNkMGM5NmQyZGQ2ZGRiN2Y2MGUwZjgyMTkxOTkzMjRiOGVlNTNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsY0cWSfW4qSA1tfLUGAUVLWanJyl
KGRSj8HMR+1Sav4vRftk7sJlBzPaRlg1qFsBxrskUZXuXtVN0i1JBlyKFVe35SVQ
PM4+3UXBr0Kof/836cStLtV6SYrG0omp6/bD7i+4aK8rkT0VtnAjC42ctnKJmbis
E64xMy/OtdKN/EzqDHz3bSVX2eyinrUnRwMkLMq9ck2PuOOLoJvOCHtPCaKKB3B5
wJJACmbq8Scepn8bkzTIWWm6t2quRvJe8a5m176G11WTLy4wv1CLESY5PkmZmXAx
uwQ5wQj6yFdb1JUE14N1bfpgPCy6SNhKSSIx+gHgaNT/p8gEcVt7oZSyHQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFOvNDJbS3W3bf2Dg+CGRmTJLjuU/MB8GA1UdIwQY
MBaAFFIfDLoQ2qMC47FnzuU5X3QvUwsJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWg4TXVoRGFvd0xqc1dmTzVUbGZkQzlUQ3drLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82OGNlMzYtNzRlNC00NDNiLWFlZjEt
M2JiOGIwNzVkNjlmLzEvNjgwTWx0TGRiZHRfWU9ENElaR1pNa3VPNVQ4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82OGNlMzYtNzRlNC00NDNiLWFlZjEtM2JiOGIwNzVkNjlm
LzEvVWg4TXVoRGFvd0xqc1dmTzVUbGZkQzlUQ3drLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAV0yoAwQA
V0zJMA0GCSqGSIb3DQEBCwUAA4IBAQCQVTSbur7pBaK30kmJTQ0gNSjo3tY+wAGW
0c+2dw6JWwdM7WUwL/kDO1A5oZbSr1CBA1vY+LQnxwNaKuCypc+w+ezApFaDvo+y
c4uRNttJYF9CK7YyPcGWHier8vBaLjR/M9S4rPb/3ItKFqwccM12X+g8h5u8+Svw
1piQAEP43jfAdVEBaOKoiRewjxFw4DK36vRnPwUvyCc8wb4VppXaF3Yra9v0QNhv
wuql0uhUsHIXeBNSX0pLlWawzgCo6c3lRkPpn3LUIDa+wwUZPsWbA75R+8nLt8m5
zq5xD6Cn250Tl2W8V5ryYfOvEguwzvTbbVSofrrnQ/7DSBlxxOgj
-----END CERTIFICATE-----
Generated at Thu Sep 24 00:45:03 2026 by rpki-client