Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/7K4ZlGsqZM7gm64DE8Nrq99XVKg.roa
File: 7K4ZlGsqZM7gm64DE8Nrq99XVKg.roa (raw, json)
Hash identifier: RxNRp74qvX+S3wTHybuccvzqIejpJY23j9doVarm8dc=
Subject key identifier: EC:AE:19:94:6B:2A:64:CE:E0:9B:AE:03:13:C3:6B:AB:DF:57:54:A8
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 01A0C93CE9BC8296CCB75D2BFCFD808E43EC
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/7K4ZlGsqZM7gm64DE8Nrq99XVKg.roa
Signing time: Tue 22 Sep 2026 13:10:07 +0000
ROA not before: Tue 22 Sep 2026 13:10:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47172
IP address blocks: 87.76.150.0/24 maxlen: 24
87.76.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 08:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:3c:e9:bc:82:96:cc:b7:5d:2b:fc:fd:80:8e:43:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Sep 22 13:10:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ecae19946b2a64cee09bae0313c36babdf5754a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:db:50:43:d5:ff:ec:55:a2:f6:93:08:b7:83:
a9:a4:73:76:a0:d1:8d:61:d3:d2:3a:17:61:bd:72:
45:4b:38:17:21:7a:aa:66:aa:17:62:03:06:ae:98:
8d:26:0d:0b:f8:e6:89:cd:be:0b:57:90:d1:3a:59:
08:98:83:58:7d:ff:84:e0:78:1f:b9:ef:9f:9d:a7:
fc:c7:23:bf:ad:22:d8:93:b3:9d:86:31:11:df:dc:
20:c8:e6:ae:6d:ff:ab:ee:b3:28:9b:f5:d0:89:bb:
ed:b3:b3:02:4b:07:e4:15:ad:3c:22:aa:49:f2:8c:
29:08:c3:28:d7:87:72:a4:df:07:15:d8:ef:3b:72:
6f:c5:14:98:fc:0a:e1:90:c6:6f:9d:a8:d4:ea:ba:
fc:e7:7c:cb:11:ed:c1:34:ce:76:9c:38:0f:8f:e6:
63:a8:04:44:3d:74:1f:5a:4e:c7:b1:3d:f5:1d:3c:
d8:00:48:0a:fe:b2:dd:47:6b:e3:b5:50:d0:75:de:
b7:ff:ff:2e:bd:1d:a5:60:ad:92:5f:53:06:cd:f3:
35:d3:c3:44:e3:f2:90:f6:d1:d6:2e:bc:78:a7:4f:
b8:15:4f:b3:6e:0d:15:1e:07:38:89:e7:ff:cb:47:
cd:2e:db:0a:3b:9c:f4:0f:22:40:c2:c6:d4:71:7b:
95:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:AE:19:94:6B:2A:64:CE:E0:9B:AE:03:13:C3:6B:AB:DF:57:54:A8
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/7K4ZlGsqZM7gm64DE8Nrq99XVKg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.150.0/24
87.76.212.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:10:e1:fc:03:19:f8:66:4d:30:d2:f3:a9:71:88:8c:1d:bf:
2a:fa:b3:97:b7:df:ea:aa:97:dd:2a:35:40:66:07:fd:16:82:
00:52:e7:62:63:9e:0f:6f:16:a3:08:ce:d6:6f:ea:7f:b1:a8:
24:d7:63:1e:d1:19:b3:55:cd:4f:19:56:09:92:01:8e:1b:a9:
15:0f:b0:ea:27:57:66:28:6e:fc:63:18:d9:7c:3b:ee:b1:33:
71:a8:5d:0d:dc:23:27:77:f5:8a:22:5e:c6:9f:1e:48:04:1f:
1f:be:8a:a3:4e:d7:27:95:f7:49:c0:50:38:85:c6:02:ba:b1:
66:62:71:56:b7:6f:6a:93:6f:e8:8a:34:7c:e2:af:17:a9:8d:
bd:f5:31:c3:af:48:cc:13:52:3f:59:b4:23:fd:19:fc:06:d3:
cf:1f:ef:74:6d:c7:c3:92:7a:d3:18:ed:4e:25:86:41:16:e4:
fd:2a:67:41:42:fa:fa:2c:76:f8:88:eb:1a:e0:f1:7c:2c:f1:
13:37:af:f8:fc:8e:34:ff:2c:a1:e2:c7:1d:f5:e1:55:12:86:
c5:ec:f0:39:07:a3:a1:31:02:cb:f4:df:e4:17:73:6e:dc:74:
fa:e3:f2:10:22:7d:74:27:0b:a1:e8:9f:21:db:a0:b7:57:5a:
8d:36:46:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:40:59 2026 by rpki-client