Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/FmZg-bW3hE1ru2pRCONVrvD3Qy8.roa
File: FmZg-bW3hE1ru2pRCONVrvD3Qy8.roa (raw, json)
Hash identifier: 01XBXhI4ohSZEUimcwiN6YwEt7OYVjfuP0CIc0/Aghs=
Subject key identifier: 16:66:60:F9:B5:B7:84:4D:6B:BB:6A:51:08:E3:55:AE:F0:F7:43:2F
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 019CF6B56814ABD757E07B7FE9EF18D421BB
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/FmZg-bW3hE1ru2pRCONVrvD3Qy8.roa
Signing time: Mon 16 Mar 2026 12:53:29 +0000
ROA not before: Mon 16 Mar 2026 12:53:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63023
IP address blocks: 87.76.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f6:b5:68:14:ab:d7:57:e0:7b:7f:e9:ef:18:d4:21:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Mar 16 12:53:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=166660f9b5b7844d6bbb6a5108e355aef0f7432f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:20:52:1e:7b:91:85:52:9b:e9:dc:4e:c9:b0:
10:c4:ea:e5:48:33:76:6d:c0:b9:3f:e4:69:8e:98:
74:6a:8b:a3:b1:07:4d:99:27:a3:b3:93:94:03:e4:
9d:a4:14:65:6f:38:a8:91:db:97:9b:20:2e:c9:fb:
11:23:05:56:1e:84:b8:3b:ff:4b:7e:b6:65:3e:89:
b8:2f:bf:60:22:8b:e3:ef:f3:be:53:07:45:80:1b:
4b:d8:c5:5d:79:71:30:0d:70:1c:72:0d:ef:22:28:
1a:7f:79:58:80:63:67:25:42:c9:75:fc:94:20:17:
4a:92:d0:52:ba:70:ec:79:dd:96:4f:ac:37:09:f3:
49:56:d4:9f:0a:e8:5b:c1:fa:66:7c:b1:3b:18:ed:
2b:82:58:02:97:1e:eb:1b:dd:ae:ca:ae:7e:ae:c4:
3b:fd:3e:90:20:bb:89:97:d0:67:63:7f:90:14:8a:
fc:7d:52:9b:09:92:30:de:3e:ba:f4:2b:42:a2:da:
c7:2c:3c:fd:c7:93:22:87:9f:55:a2:25:e9:86:91:
3a:4a:f4:41:40:67:d4:99:7c:99:48:35:a2:c7:fd:
6a:fe:d4:36:e2:2e:2b:9a:79:db:93:eb:2e:32:99:
de:1f:8d:c0:5b:79:f8:44:d6:0f:bd:d3:dd:6c:55:
c8:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:66:60:F9:B5:B7:84:4D:6B:BB:6A:51:08:E3:55:AE:F0:F7:43:2F
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/FmZg-bW3hE1ru2pRCONVrvD3Qy8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.206.0/24
Signature Algorithm: sha256WithRSAEncryption
73:8f:8d:51:2e:a8:dc:6c:bc:d1:7d:9d:f3:b0:67:89:d4:dc:
99:c2:ac:ea:aa:89:66:70:65:da:82:44:b5:d2:d2:e8:f4:5e:
45:7f:74:03:63:05:e6:77:b3:6b:91:71:ea:7f:74:ae:e3:da:
0e:bb:12:31:dc:d6:cc:c7:c9:c8:92:00:d4:32:df:9e:35:6a:
56:84:c3:59:85:20:ce:55:f4:e1:48:d1:d8:48:8c:51:8d:6f:
05:05:ba:81:90:67:1d:af:f3:f2:8c:69:24:8a:08:3a:ce:54:
cd:64:f0:f7:dd:3a:fe:08:a2:96:b8:8b:e2:c5:ab:44:13:b1:
bb:07:de:73:df:c9:49:55:e9:19:c8:0c:e0:08:40:f2:e2:2c:
8f:c8:1b:80:9a:1a:d9:b9:48:a5:54:3a:c1:ae:4f:ff:70:15:
3f:42:7a:8f:f8:be:a9:c7:f7:24:5c:bd:3e:b2:b7:f8:0b:7b:
c6:f9:88:4c:3b:44:3c:6c:d1:83:6f:1e:45:89:24:07:83:10:
04:ca:e7:8e:f5:93:03:4a:e5:73:39:ff:26:d9:7a:40:2c:59:
c1:b9:eb:d4:7d:f2:14:46:65:a5:21:be:49:b2:36:9f:4d:df:
2b:56:e6:d0:aa:17:34:a2:2b:58:68:02:79:14:99:0b:8c:35:
95:0e:19:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:47:35 2026 by rpki-client