Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Hb_ZryiVYDGuwi_o8HJ09-TGdys.roa
File: Hb_ZryiVYDGuwi_o8HJ09-TGdys.roa (raw, json)
Hash identifier: /Sxur46MId7e+OPZTnALxrhkmD/ik4p4Kx2h9+UMo4M=
Subject key identifier: 1D:BF:D9:AF:28:95:60:31:AE:C2:2F:E8:F0:72:74:F7:E4:C6:77:2B
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 019E1C25738862169032CD61D2287B826269
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Hb_ZryiVYDGuwi_o8HJ09-TGdys.roa
Signing time: Tue 12 May 2026 12:24:36 +0000
ROA not before: Tue 12 May 2026 12:24:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204150
IP address blocks: 87.76.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:25:73:88:62:16:90:32:cd:61:d2:28:7b:82:62:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: May 12 12:24:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1dbfd9af28956031aec22fe8f07274f7e4c6772b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:78:df:1a:68:b3:9b:e3:b4:58:2b:4f:d1:37:
87:c9:bf:a8:90:9d:30:46:12:3e:e6:42:f1:ab:e1:
62:9b:36:99:03:3d:39:35:a3:d1:fa:32:b1:7d:07:
9c:02:97:c8:5f:50:7a:d7:ab:4b:b4:4d:b8:13:ee:
e7:54:bf:24:f0:ab:79:26:34:f2:af:8a:91:dd:22:
94:25:d2:4d:a7:0b:80:ca:46:79:ce:c5:17:a5:1c:
03:e1:41:75:ee:a0:b2:9c:73:b6:2c:0d:eb:6f:8e:
62:54:46:56:79:88:b3:1d:ad:cb:28:04:3d:07:42:
e2:05:f7:e0:db:e4:bd:80:f8:31:51:33:43:a4:2a:
d3:86:05:a6:0d:e7:40:0b:8a:7f:9a:0f:ae:6e:9b:
2b:35:05:80:7e:ec:bb:b4:c7:c4:9f:29:aa:f0:14:
81:c9:a5:54:26:4b:9f:2f:e7:87:7d:f6:8d:d7:f0:
b3:a3:cf:df:88:6f:f7:41:1c:21:0b:f6:a4:bf:b0:
ec:25:fe:f0:24:4d:5a:59:ae:ef:af:46:e2:4b:32:
6b:cf:80:b8:8a:10:55:12:3f:1c:88:81:a0:2a:c8:
ba:ae:d5:68:2f:38:f6:33:04:8c:d5:d0:e2:54:c0:
e2:61:e7:0f:b5:d8:f4:d6:2f:d4:06:5c:08:53:c5:
ba:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:BF:D9:AF:28:95:60:31:AE:C2:2F:E8:F0:72:74:F7:E4:C6:77:2B
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Hb_ZryiVYDGuwi_o8HJ09-TGdys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.162.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:16:7f:fa:d7:75:0f:56:98:3a:a6:73:6f:94:81:7a:f2:32:
20:e6:42:f5:32:c8:fb:c7:e4:ee:e7:cb:6e:63:ed:13:96:87:
c5:e3:40:db:07:db:ac:eb:70:71:54:ec:53:a2:13:9e:59:bc:
f9:0a:08:33:8e:7b:6f:db:67:9e:5a:3b:15:be:f4:99:5f:01:
14:43:de:6f:33:ef:78:b1:de:dd:db:b8:04:f8:77:81:45:ab:
26:92:50:2d:07:15:ac:a6:23:d8:8c:77:dd:40:d4:4f:48:8e:
ce:c8:f1:dc:aa:26:98:ee:b9:44:8c:56:23:c7:e0:c3:34:42:
e2:de:2f:dc:1a:20:d7:a6:ff:c0:86:fd:fa:fb:83:18:f6:44:
78:32:97:60:34:fc:5b:07:de:48:11:42:c9:f5:3f:18:5e:84:
e2:d0:6a:b2:f0:72:2e:db:d6:53:95:53:8c:49:02:57:8d:9f:
0e:4e:fb:41:0e:fe:c1:d9:bf:a3:e8:17:c9:7f:e8:d7:e9:3f:
06:bb:73:8b:12:e2:54:56:d0:63:94:a8:16:39:0b:cf:be:d1:
52:ea:22:56:18:96:e7:ae:0e:d2:ff:51:c7:ca:fe:46:00:27:
26:54:34:c6:5f:6a:29:43:60:ac:98:cb:29:15:c4:d6:2b:1e:
11:69:b4:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:38:38 2026 by rpki-client