Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Byd3zUmpgJN0q9MJgjnDEb4n6us.roa
File: Byd3zUmpgJN0q9MJgjnDEb4n6us.roa (raw, json)
Hash identifier: UGpLEv9+73hsB5WqNwe/+SgaoFX7XE6oQQcWoYMyDoQ=
Subject key identifier: 07:27:77:CD:49:A9:80:93:74:AB:D3:09:82:39:C3:11:BE:27:EA:EB
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 019F60317E6E8F220CA5E9BDD8895B5B865B
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Byd3zUmpgJN0q9MJgjnDEb4n6us.roa
Signing time: Tue 14 Jul 2026 10:34:44 +0000
ROA not before: Tue 14 Jul 2026 10:34:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199920
IP address blocks: 87.76.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:60:31:7e:6e:8f:22:0c:a5:e9:bd:d8:89:5b:5b:86:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Jul 14 10:34:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=072777cd49a9809374abd3098239c311be27eaeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:8b:a8:fa:d3:c0:6c:4f:10:c7:5b:fa:f4:1f:
e4:44:d1:7e:f1:f1:6b:db:4a:e7:fd:09:7a:32:01:
ee:9d:05:a5:3e:30:b1:4e:d4:51:27:18:f9:5f:97:
25:aa:c7:0e:11:a3:8e:15:16:51:66:22:30:62:62:
e3:f1:a8:b7:d6:c8:c3:ba:6a:c3:1a:be:30:92:2d:
c1:6c:74:11:c8:69:a2:a8:18:03:9d:26:3a:0e:ce:
01:1d:c4:78:1a:a2:1f:c3:1f:89:13:26:38:3e:81:
19:95:7f:ff:b1:6a:59:6d:f6:dc:5a:5b:79:eb:ce:
79:89:9e:c4:ed:0a:ce:a8:d2:bf:29:ae:7e:1f:11:
05:2a:5f:e5:76:03:7e:1f:08:27:6a:9d:69:69:9e:
4c:8a:69:23:94:d5:53:e3:41:f7:01:e3:61:fc:51:
83:22:72:b8:ab:bb:ed:69:c7:2f:a2:0f:ee:53:e9:
78:7b:02:94:a4:51:d5:1a:12:21:0a:f6:4d:f9:c5:
5f:7c:5a:c0:d1:0a:80:ed:05:76:19:b2:ec:a3:fd:
dd:77:81:ab:80:81:67:b1:94:b4:bf:04:52:4f:b1:
ea:f7:97:b1:68:ba:f0:fe:cd:15:db:a7:84:34:83:
95:9d:c9:70:bb:26:f6:0a:e2:c9:1d:96:b2:ac:b7:
05:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:27:77:CD:49:A9:80:93:74:AB:D3:09:82:39:C3:11:BE:27:EA:EB
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Byd3zUmpgJN0q9MJgjnDEb4n6us.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.133.0/24
Signature Algorithm: sha256WithRSAEncryption
36:e5:fd:89:c9:81:f7:01:8f:28:a9:0d:47:de:a4:bd:9e:f4:
98:8d:3a:87:aa:5c:1a:23:2f:4f:d0:41:a3:81:a0:d6:ca:d5:
aa:cf:32:13:81:ad:59:a8:18:1b:b6:e4:12:f0:ec:07:36:8f:
d0:70:34:29:00:b7:88:21:b0:0a:d1:42:31:75:3a:a0:89:81:
9a:a1:f9:fb:75:44:e5:8d:81:43:6f:4b:fd:5c:ea:74:b9:a4:
7b:03:66:81:d5:1b:13:e4:93:f9:cb:4c:ed:83:01:94:43:64:
13:8c:0d:d1:3c:99:99:52:e1:e1:bd:59:23:4e:de:3b:7b:2c:
e1:d1:6c:a5:98:d5:d5:0c:00:ea:73:51:1a:60:20:ed:3a:46:
07:0a:69:6c:27:6f:7a:5f:96:56:5a:c3:b0:6c:bf:80:ea:7c:
f0:13:61:7b:bb:8f:86:2c:9f:d8:09:41:ef:90:73:8c:03:78:
89:81:8b:ff:ce:6b:65:00:8f:1f:fb:08:3c:e4:31:3a:ed:01:
14:db:79:09:8e:5e:df:8f:c1:39:a7:56:a8:8f:0e:ad:d0:c8:
0a:50:c0:ad:66:2e:94:dd:d7:2a:5c:63:fe:81:b2:4b:be:4d:
94:12:d1:69:14:04:49:97:13:0e:44:32:e5:f3:95:88:fa:cb:
20:29:49:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:10:59 2026 by rpki-client