Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Iv1LmuFlQIk1pk5dmEauK8uAo7Y.roa
File: Iv1LmuFlQIk1pk5dmEauK8uAo7Y.roa (raw, json)
Hash identifier: dW7RGq1kqXwNuDlzQKVOgu8MNHsCiAt97/MYRU742mY=
Subject key identifier: 22:FD:4B:9A:E1:65:40:89:35:A6:4E:5D:98:46:AE:2B:CB:80:A3:B6
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 01A191F355BB8A7DA9A84828A931BD5CD6E2
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Iv1LmuFlQIk1pk5dmEauK8uAo7Y.roa
Signing time: Sat 31 Oct 2026 12:33:25 +0000
ROA not before: Sat 31 Oct 2026 12:33:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59245
IP address blocks: 87.76.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 16:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:91:f3:55:bb:8a:7d:a9:a8:48:28:a9:31:bd:5c:d6:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Oct 31 12:33:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=22fd4b9ae165408935a64e5d9846ae2bcb80a3b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b3:d4:4b:37:76:f5:73:61:14:56:f3:35:3d:
3b:4c:66:e6:21:ec:8c:ff:bc:f5:26:c7:36:24:4f:
f1:97:af:31:5d:ed:a0:a0:b7:9b:bf:a3:ae:dc:90:
f9:f1:cf:06:18:5c:28:41:b5:b6:7f:68:4b:84:73:
27:bd:1e:2e:09:f8:a6:d0:7a:76:3e:c5:77:9c:0c:
e1:95:7e:6f:bb:4c:31:c7:e5:ef:da:cd:95:d2:bb:
cd:d7:d7:a5:f8:17:5c:53:9f:ae:ce:37:5e:2b:7b:
10:cb:0a:ca:14:c0:50:b1:c3:48:7e:cc:f2:08:3f:
fb:b6:12:ba:72:56:91:ae:43:a4:86:f9:77:20:62:
3f:e5:3f:38:be:44:12:99:bd:ff:7f:c7:e9:70:03:
fd:3d:fa:89:82:3d:d7:05:8f:d4:96:97:64:4b:83:
05:3a:4e:3f:08:2a:25:80:42:f8:1a:9d:48:85:96:
87:3f:e8:b9:39:3b:c6:ab:96:32:7d:44:4d:fd:8a:
7d:e3:fd:a7:3c:92:0a:9b:da:29:7a:d0:9b:1f:4c:
75:66:a6:f6:fd:e8:9e:23:1c:b0:87:d7:15:e8:4a:
d0:19:32:1b:00:f1:fd:2f:a5:cc:1f:b9:c8:fb:5f:
3c:35:a1:09:e2:e2:dd:ee:0f:61:18:e5:d3:36:52:
8c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:FD:4B:9A:E1:65:40:89:35:A6:4E:5D:98:46:AE:2B:CB:80:A3:B6
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Iv1LmuFlQIk1pk5dmEauK8uAo7Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.219.0/24
Signature Algorithm: sha256WithRSAEncryption
54:a4:50:f4:3b:ff:4a:0f:39:9a:85:29:ac:f2:b3:db:54:4d:
46:cf:8e:bd:65:66:06:ae:f9:1f:0f:ae:07:b7:2e:36:db:68:
49:39:08:81:80:d9:71:96:a2:b0:95:9d:74:03:23:05:df:bc:
a9:66:d7:2b:bc:e2:b0:e3:f9:c2:ac:fe:72:3f:68:5c:5a:46:
81:88:6c:58:b0:58:25:04:46:8a:62:01:7f:c8:d9:c9:ae:67:
61:fc:3c:97:11:20:46:a5:f2:8c:f5:d1:a1:ba:04:e8:3f:ee:
0c:91:35:26:66:37:d7:b9:03:3f:12:43:48:9c:73:01:0c:3b:
61:2b:b9:47:fc:3d:9f:aa:06:61:6e:94:30:67:51:07:aa:47:
74:11:d6:12:03:0f:ac:6c:59:56:84:22:c6:d5:8d:67:d9:96:
7a:0d:b5:c8:17:f7:3d:ce:71:46:44:f8:4c:bd:1f:62:8d:9e:
aa:a6:4e:e6:44:2a:b8:0f:76:d5:51:aa:f0:d8:b6:cf:48:41:
57:cc:4a:9b:c3:3d:1a:ad:af:61:91:bc:59:5d:fd:3e:74:3f:
aa:44:29:be:4a:fa:b0:a8:cd:37:ef:a3:31:16:05:4d:c8:1f:
ea:7e:c5:6e:a9:8d:47:58:bb:91:ce:5b:41:3f:a1:3c:07:70:
a6:fd:44:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:32:36 2026 by rpki-client