Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/NYDaBmxU8Sji1S0fLXcOPgWLL8w.roa
File: NYDaBmxU8Sji1S0fLXcOPgWLL8w.roa (raw, json)
Hash identifier: vEpBuXYPCOvMeR25vKXsxYf8WJ7bhfb9Q6LdmDpF24A=
Subject key identifier: 35:80:DA:06:6C:54:F1:28:E2:D5:2D:1F:2D:77:0E:3E:05:8B:2F:CC
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 01A186F68E5AA06AF0D6FC1239EC23B8387B
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/NYDaBmxU8Sji1S0fLXcOPgWLL8w.roa
Signing time: Thu 29 Oct 2026 09:21:07 +0000
ROA not before: Thu 29 Oct 2026 09:21:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 87.76.140.0/24 maxlen: 24
87.76.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 10:37:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:86:f6:8e:5a:a0:6a:f0:d6:fc:12:39:ec:23:b8:38:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Oct 29 09:21:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3580da066c54f128e2d52d1f2d770e3e058b2fcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:17:59:e0:0d:43:12:4f:44:e9:3c:65:9d:40:
56:86:62:04:85:9a:d9:f8:dc:93:36:e5:f5:95:ab:
30:ab:27:e5:fe:b1:b9:fa:69:a1:ef:7e:f8:17:a2:
01:95:23:76:71:fe:16:a2:d0:fa:1c:82:f6:32:e4:
2b:df:d8:d8:54:12:2b:14:b3:73:4d:84:e0:0e:b9:
e0:6c:33:f1:e1:e3:b0:db:72:2a:32:08:0e:29:1b:
c7:fb:5b:d0:0c:cb:1a:ec:cf:99:05:98:79:9d:1d:
46:dd:83:4f:c6:57:d7:27:6b:db:20:ee:3f:5a:fd:
75:1e:bc:c9:34:66:8e:35:dd:ec:04:ac:db:11:9c:
78:77:6a:1c:dc:1a:c9:8a:d2:0a:69:c3:11:3b:ff:
7d:64:e1:a8:b7:f7:0d:52:1d:c4:92:9d:e1:f1:fa:
a7:5a:77:de:90:f8:03:fb:1e:15:4a:f6:98:29:7b:
27:4c:88:3e:17:21:9c:3e:82:c7:ba:09:9e:a8:e5:
7e:b7:5c:c1:9f:53:48:9a:c9:48:ee:bf:ab:4c:92:
3c:bb:e7:7b:d0:88:64:dc:63:ff:8a:6c:17:76:e5:
f4:52:6d:ad:a1:d2:5a:e9:65:bd:22:97:65:8c:38:
05:3f:09:20:55:a2:8e:6e:42:51:64:b6:8a:a1:f3:
f8:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:80:DA:06:6C:54:F1:28:E2:D5:2D:1F:2D:77:0E:3E:05:8B:2F:CC
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/NYDaBmxU8Sji1S0fLXcOPgWLL8w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.140.0/24
87.76.189.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:66:09:b1:12:e7:aa:d0:da:4d:e8:40:cb:a0:3e:72:cf:fb:
c8:0a:3c:c2:96:6d:04:5f:15:bb:f0:83:ac:a5:ef:86:d4:92:
11:6a:27:ae:38:2e:de:16:cc:c9:2d:3a:8c:ba:78:0d:3d:9e:
ca:60:ff:80:04:a1:5d:8a:f7:07:d5:5e:03:d5:a5:52:e7:8d:
6e:82:f4:de:bf:98:eb:51:16:e8:8d:05:88:d1:60:08:96:a3:
41:19:63:c2:21:ec:f3:a0:90:6b:95:0c:3f:0a:21:2a:42:74:
f1:9c:6a:97:a4:15:53:90:00:cf:e5:7b:e4:2c:8d:ce:72:cb:
2d:69:2a:ad:31:05:23:c3:31:96:30:00:25:10:2f:8f:cc:be:
4a:9a:0a:3c:bd:d6:df:43:86:6f:5a:34:ea:f6:f9:e6:1c:f6:
07:5d:e8:ba:f9:e6:7a:df:62:54:82:b0:a3:2e:63:e8:59:f6:
e2:e9:4d:f6:4e:54:cb:e6:93:55:14:4e:96:30:ce:64:84:71:
eb:d6:1a:e4:c6:db:39:f6:f0:7e:f0:1e:31:33:2d:ce:0e:f1:
e4:f0:f9:6b:d3:a0:28:6c:31:46:52:da:9a:33:ff:cc:c5:36:
cc:c7:5e:3d:d0:84:a5:47:bf:fd:a8:57:37:cf:46:2d:19:95:
10:15:55:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:44:38 2026 by rpki-client