Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Ar0t8M1PqH4N7AjCzVKgphQqSvY.roa
File: Ar0t8M1PqH4N7AjCzVKgphQqSvY.roa (raw, json)
Hash identifier: KiAO5rlZxMhiFR0eUjb3refStPmslV+ymPSVfqVEE/Y=
Subject key identifier: 02:BD:2D:F0:CD:4F:A8:7E:0D:EC:08:C2:CD:52:A0:A6:14:2A:4A:F6
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 019DE90BAAFB767003AF8E6C5DBFB551A240
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Ar0t8M1PqH4N7AjCzVKgphQqSvY.roa
Signing time: Sat 02 May 2026 14:15:49 +0000
ROA not before: Sat 02 May 2026 14:15:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51559
IP address blocks: 87.76.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:e9:0b:aa:fb:76:70:03:af:8e:6c:5d:bf:b5:51:a2:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: May 2 14:15:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=02bd2df0cd4fa87e0dec08c2cd52a0a6142a4af6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:fe:a4:b9:6d:b2:36:99:45:a9:b7:f4:91:dd:
10:35:69:d5:82:69:55:f2:43:6e:73:34:83:51:8e:
4f:d5:e8:94:6a:5f:8e:34:43:f5:d1:02:54:5d:68:
3f:ae:20:0c:ed:71:cc:14:09:68:fe:8a:a5:0e:2d:
56:4c:c3:95:15:47:a5:0f:3c:00:7c:e2:e8:e9:fe:
c6:8c:46:95:eb:c2:69:5b:0d:f9:f6:53:35:c0:b2:
7e:1a:85:98:47:fc:47:58:5c:55:fc:a1:a9:db:49:
f2:39:9f:90:ca:a5:33:bb:1c:02:b6:2c:86:19:21:
80:34:92:8f:3e:44:a5:ad:a4:9b:72:97:3d:15:bd:
6c:2f:04:5a:30:20:46:da:b1:f0:b8:e5:b7:1b:6b:
2f:10:72:8e:f0:5b:d9:72:39:c3:19:c2:d1:ef:10:
8a:06:6d:a0:f5:41:8e:21:d1:40:f3:de:50:af:07:
85:77:91:b2:20:8d:b3:55:b4:3b:c9:03:e0:cf:f9:
f6:08:30:40:86:91:f3:28:a6:9f:e0:09:7f:11:56:
ae:42:ad:b9:84:cc:84:33:19:6d:a3:95:e5:42:16:
c2:5c:50:c5:fd:e0:f1:b9:3e:20:a2:78:46:67:0a:
cf:e5:ac:06:34:a7:02:26:fe:34:91:14:b2:6f:ee:
dc:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:BD:2D:F0:CD:4F:A8:7E:0D:EC:08:C2:CD:52:A0:A6:14:2A:4A:F6
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Ar0t8M1PqH4N7AjCzVKgphQqSvY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.194.0/24
Signature Algorithm: sha256WithRSAEncryption
22:81:20:c1:1a:43:94:35:36:90:01:7b:6e:79:b6:62:c9:37:
1b:a0:7d:64:2f:42:96:20:de:95:b8:ca:57:41:a6:f3:4e:35:
1b:97:b6:73:36:b3:e4:c1:72:30:6c:0d:63:84:1a:bc:3e:50:
a2:6c:3e:34:48:f8:7c:ff:48:26:4c:7e:3e:1f:1f:58:03:41:
b2:39:2f:99:e3:8a:69:24:3a:40:8f:c0:58:41:56:b8:7e:50:
9d:28:b5:df:47:46:77:d1:1c:47:86:69:35:9b:c0:c5:cb:98:
78:c7:b8:c2:51:fb:d0:84:ae:e8:c0:58:d2:8d:75:16:7f:81:
85:63:2b:c3:af:e9:01:d0:ad:f1:08:21:c9:da:b9:65:cd:33:
57:88:d8:15:ab:09:f4:8f:1c:09:9e:8b:4b:74:f8:0a:15:fd:
4c:9d:eb:4e:0a:57:b4:6d:c2:21:87:b5:b5:79:47:33:33:67:
f7:ad:78:00:cc:fc:7a:7f:b7:d3:31:08:30:24:40:3a:6c:5c:
fa:6b:c1:e4:cf:61:54:a2:40:34:e9:37:e9:1a:70:f6:21:ca:
6a:dd:97:b7:c0:f4:2c:28:8b:7a:0b:12:68:f3:a8:3c:fd:10:
0e:f5:8a:7e:b4:c1:ed:fb:3f:8d:93:be:ec:c6:c3:0f:c8:5e:
63:a2:a0:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:00:19 2026 by rpki-client