Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/8oBEE0mrev0Ni48lIVdiqjalqxM.roa
File: 8oBEE0mrev0Ni48lIVdiqjalqxM.roa (raw, json)
Hash identifier: GxTD29a9GAME+2VzFzIEScefXeyUqa7iaKLIYaFPWwU=
Subject key identifier: F2:80:44:13:49:AB:7A:FD:0D:8B:8F:25:21:57:62:AA:36:A5:AB:13
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 019F9377DF64E11E71628E0FC182FA415EE9
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/8oBEE0mrev0Ni48lIVdiqjalqxM.roa
Signing time: Fri 24 Jul 2026 09:32:14 +0000
ROA not before: Fri 24 Jul 2026 09:32:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 147208
IP address blocks: 87.76.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:77:df:64:e1:1e:71:62:8e:0f:c1:82:fa:41:5e:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Jul 24 09:32:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f280441349ab7afd0d8b8f25215762aa36a5ab13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:88:f3:40:6a:bd:be:88:dd:cb:bc:ea:87:e8:
1f:74:46:5c:3c:e4:94:f5:62:bb:40:ee:0e:9f:96:
eb:7a:20:fb:d1:b3:af:98:9f:60:db:1f:a3:a6:2f:
40:83:be:eb:bf:37:e2:84:e3:da:b2:b5:96:d2:be:
c8:cd:41:7d:94:78:b5:84:20:59:23:e8:c1:47:51:
0a:a9:86:e1:2e:bf:23:55:a9:3b:90:68:40:e5:7a:
41:23:dc:47:c3:a7:45:b5:1a:74:57:a8:a6:ff:c4:
6f:ee:6a:ee:52:e1:fa:66:71:47:f3:50:0c:94:20:
bc:0f:34:04:67:17:bb:38:11:8f:4a:51:f9:a9:8e:
5d:a1:36:ed:68:1d:94:15:21:a5:ca:45:b5:98:c6:
fe:ad:dc:bd:1f:e9:0b:f6:3a:5f:28:a4:b9:f3:69:
7c:c7:eb:54:9b:40:f9:fa:ec:31:8c:08:3f:89:26:
9c:6d:d3:0f:86:d5:05:72:36:6b:bf:4b:d4:96:37:
bd:7d:d9:3a:ae:82:c7:53:0b:f0:91:e9:ac:bc:c9:
cc:36:17:e9:53:89:9c:ac:d6:ce:e1:4b:86:c5:31:
29:78:cf:21:76:fe:6d:46:88:eb:99:e0:a6:83:e3:
35:f1:52:29:86:8f:13:22:49:29:c9:ee:d0:82:26:
c5:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:80:44:13:49:AB:7A:FD:0D:8B:8F:25:21:57:62:AA:36:A5:AB:13
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/8oBEE0mrev0Ni48lIVdiqjalqxM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.149.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:23:09:8c:57:9f:cc:6e:be:a7:53:9c:af:6a:2f:86:42:2b:
6f:e4:a2:6a:79:70:cf:14:8a:dd:bc:8e:0d:f0:16:f0:73:db:
68:b3:a1:b5:22:4b:d1:91:7a:50:a0:30:7b:b2:7e:2e:81:a2:
6f:71:87:ce:e6:f3:cd:13:92:bb:06:10:49:94:fb:f8:80:d2:
8f:3f:4a:f8:19:82:07:4a:fa:73:b9:57:d0:e0:7e:9c:92:7f:
89:10:04:fb:f7:8d:8d:97:e3:ee:de:e9:55:7f:ce:a8:f6:34:
c2:70:da:09:0d:3d:90:5e:8a:cc:52:1b:99:cb:ad:83:f5:61:
c9:9e:1a:80:d6:60:36:86:29:0b:76:78:41:6b:cd:21:34:34:
90:e7:09:72:46:57:06:01:63:95:cf:97:cd:37:9b:6d:6c:99:
d8:df:4f:11:ba:16:3e:4d:ec:50:28:58:0a:6e:f6:32:42:9f:
9b:e4:f1:24:68:b5:33:0d:1f:69:45:36:6f:3a:69:6a:e4:7d:
00:93:01:6b:94:26:a7:a8:4a:de:55:ee:59:9e:45:04:48:98:
51:39:ee:e9:2c:1f:1f:68:36:3c:79:60:43:a1:81:34:0d:4a:
a1:2f:b7:70:e1:03:3c:75:bb:3e:4f:da:0f:86:7c:59:d9:da:
11:2b:d3:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:23:52 2026 by rpki-client