Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Ipq3DVKETg8P3AR2d3v53XRHP8E.roa
File: Ipq3DVKETg8P3AR2d3v53XRHP8E.roa (raw, json)
Hash identifier: OexlMNg1bkCu+ze+kDH7HWalEhLxpKBrfkNHr92XQtw=
Subject key identifier: 22:9A:B7:0D:52:84:4E:0F:0F:DC:04:76:77:7B:F9:DD:74:47:3F:C1
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 019CEC231BCF54A5C3295E7D6807555B06CF
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Ipq3DVKETg8P3AR2d3v53XRHP8E.roa
Signing time: Sat 14 Mar 2026 11:37:29 +0000
ROA not before: Sat 14 Mar 2026 11:37:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200234
IP address blocks: 87.76.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ec:23:1b:cf:54:a5:c3:29:5e:7d:68:07:55:5b:06:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Mar 14 11:37:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=229ab70d52844e0f0fdc0476777bf9dd74473fc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:24:52:fb:4b:95:d9:88:1d:78:3e:86:d0:79:
fd:d2:e6:7a:0c:22:34:0e:e7:16:74:7d:df:4a:bc:
10:0f:de:1d:75:15:44:99:08:1b:9f:7b:5f:73:32:
01:e5:9d:a3:b3:95:17:f6:95:bb:46:3c:de:ca:5b:
06:e7:09:58:c0:ad:08:7f:72:49:31:53:63:2b:de:
4f:3f:fb:9c:29:8a:45:7d:62:ca:ae:ba:1c:c6:e9:
2e:eb:59:94:e3:cf:f2:ef:f7:21:27:3c:36:90:1a:
61:0f:b6:3a:41:7a:a4:01:30:80:4d:c8:24:31:1e:
2f:11:99:12:40:d2:3d:bf:47:73:7e:b9:fe:e4:5d:
d0:2f:19:91:8b:99:76:a6:5c:32:02:71:86:99:b4:
2b:56:e2:61:7b:57:bd:bc:ed:f6:06:d1:66:31:4c:
6c:fc:f3:36:6c:a1:fa:06:ad:55:97:21:02:4a:e9:
90:57:66:d5:fb:cc:37:ce:dd:77:f3:ec:ae:f8:44:
a1:55:d0:15:cd:5d:5b:f6:37:91:b9:f2:30:39:d3:
f1:21:e8:33:54:04:98:83:78:29:86:3f:a4:1e:e8:
6e:76:a5:1f:65:8d:ff:ee:5d:25:ec:67:6c:cd:ca:
ce:99:23:2f:50:82:1d:e4:f3:98:28:71:e4:f0:a3:
4d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:9A:B7:0D:52:84:4E:0F:0F:DC:04:76:77:7B:F9:DD:74:47:3F:C1
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Ipq3DVKETg8P3AR2d3v53XRHP8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.203.0/24
Signature Algorithm: sha256WithRSAEncryption
82:6c:5c:c7:c8:cc:a3:2e:3a:24:dd:6a:d1:bc:c8:32:a7:a7:
28:f7:f3:f8:16:e2:15:ac:67:98:16:9a:02:12:3b:17:25:12:
58:7d:0c:31:52:80:d9:62:d5:4b:6c:19:3d:bb:88:1d:ed:18:
3f:73:54:79:90:ea:b9:d6:80:6d:69:e0:b7:2e:66:91:5e:ce:
49:55:ef:3f:4b:b4:68:10:5d:af:81:cf:5e:c8:70:9e:d6:8d:
62:7a:27:64:87:cd:5e:38:b4:05:42:f1:a1:3a:3f:5d:12:62:
e9:ac:31:b6:ea:fd:55:d0:54:07:7b:fe:ba:3b:53:0e:73:f7:
ba:84:a4:c1:2f:0c:f8:2b:a3:31:24:87:52:85:cf:2e:dc:c3:
c3:4f:bd:11:15:e8:4d:f2:9c:db:f2:e7:cb:bc:94:1a:40:53:
7a:86:88:6d:b3:c3:1a:58:16:20:66:66:86:ff:05:ca:b4:a6:
0c:be:a3:00:ed:e5:fe:3d:cf:ff:52:77:b1:7c:29:67:93:e2:
cf:44:dd:78:39:de:91:c9:98:b7:ef:ef:b4:31:cc:7d:10:29:
a7:b6:f9:b8:1f:6b:bc:16:af:0e:fa:91:50:3b:ae:e3:54:21:
43:18:38:ba:0f:12:4c:c4:9c:69:cb:53:85:d4:65:6c:60:ac:
e8:ab:b6:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:48:15 2026 by rpki-client