Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/B7uJFcLqc7Xu9qJ8s4tqACmUV88.roa
File: B7uJFcLqc7Xu9qJ8s4tqACmUV88.roa (raw, json)
Hash identifier: izOIKuTGDVS/wOGTAaBbH31pYgKeWIaPte5X/+hKw+s=
Subject key identifier: 07:BB:89:15:C2:EA:73:B5:EE:F6:A2:7C:B3:8B:6A:00:29:94:57:CF
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 019CBFE169CBB097BF80A1074DD6EAA69548
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/B7uJFcLqc7Xu9qJ8s4tqACmUV88.roa
Signing time: Thu 05 Mar 2026 21:22:26 +0000
ROA not before: Thu 05 Mar 2026 21:22:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206453
IP address blocks: 87.76.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:bf:e1:69:cb:b0:97:bf:80:a1:07:4d:d6:ea:a6:95:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Mar 5 21:22:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=07bb8915c2ea73b5eef6a27cb38b6a00299457cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:41:eb:4b:91:06:9f:da:1b:26:ba:9e:ad:f5:
51:1e:b6:eb:a8:cf:fa:c5:fe:85:a2:89:4b:40:34:
50:13:2c:b3:49:e4:8c:e9:77:48:80:51:e8:23:f6:
5e:dc:b0:05:43:8b:30:11:f6:ef:23:b0:33:ef:94:
b6:b8:1f:9f:f2:d1:00:e3:ea:0a:07:02:13:f3:b5:
ff:b3:34:e5:27:5f:45:6e:b2:51:79:26:48:80:ba:
40:e5:c2:56:f8:dd:78:c8:9a:1d:45:92:10:5c:cc:
8f:31:d4:9c:1e:df:fb:9f:28:99:2f:d4:50:5e:23:
7e:c6:4b:0c:61:ed:60:c6:1c:fc:a1:8c:69:6b:04:
ba:6d:67:a0:ff:ad:9f:71:ac:92:c0:75:0e:ab:de:
86:33:ae:a2:e1:e9:3a:76:e8:0f:96:e2:fa:8e:52:
d2:e2:fb:7f:5c:54:11:06:78:a3:66:a4:10:5f:18:
4f:f3:eb:14:0b:e5:66:2d:f2:e0:9c:40:c3:56:21:
bc:27:a8:f6:eb:b2:7f:9f:78:92:3e:0a:34:ad:aa:
da:fa:e3:cf:6f:32:71:a8:ba:92:9f:e3:7e:ce:66:
ad:c1:3e:2b:24:cf:23:f0:4b:be:e3:4a:63:9b:10:
d3:53:c6:76:d1:aa:9e:33:94:cc:77:75:8a:c0:8c:
f3:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:BB:89:15:C2:EA:73:B5:EE:F6:A2:7C:B3:8B:6A:00:29:94:57:CF
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/B7uJFcLqc7Xu9qJ8s4tqACmUV88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.209.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:88:d9:04:cd:13:8f:11:d1:4f:8e:83:6c:44:d8:67:1a:99:
34:f5:ca:eb:93:03:46:b3:37:2f:d6:60:d5:af:15:da:27:f5:
2a:24:de:9d:9c:55:3d:1e:13:68:e8:83:b3:ea:7d:04:57:a0:
6a:d5:bc:22:1a:8f:26:9a:28:83:46:dc:8b:43:a2:d7:38:9b:
50:49:13:8b:50:5a:36:36:5c:9c:56:6d:bb:a5:37:c1:1d:35:
48:26:80:09:61:ed:3b:0c:e0:a6:c6:ae:e5:1d:c2:fa:fd:81:
04:5d:22:32:c5:43:a8:03:08:d1:b9:cf:6f:dc:ba:9d:37:1b:
1e:51:c1:56:2b:fc:4a:b1:39:f4:48:df:cc:f2:44:c0:e7:c8:
d0:64:48:04:3b:bb:cc:f4:80:e0:5d:e4:32:be:d1:97:ed:fa:
b9:5c:0c:1c:29:9c:06:c4:88:ba:78:63:ab:05:2f:06:45:27:
d0:8a:da:64:4c:35:f6:c9:46:2d:e1:5c:d0:90:8e:0e:d5:9b:
13:0d:9b:2c:00:88:cd:15:58:fc:93:52:c8:5a:c9:7f:dd:fc:
9a:c7:fa:b4:45:a2:0c:f9:b4:e3:7b:dd:52:75:e6:a5:1b:15:
1a:1c:21:94:53:6c:f3:2e:b8:85:53:b4:d6:5c:e9:ad:71:85:
4f:f2:d7:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:09:43 2026 by rpki-client