Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Pt2jX6hDtVCEOoGCCsfyj74aues.roa
File: Pt2jX6hDtVCEOoGCCsfyj74aues.roa (raw, json)
Hash identifier: gTUmsCD76rg5XczaGK9AjhhpTU0uZSP225jY7VfGXvg=
Subject key identifier: 3E:DD:A3:5F:A8:43:B5:50:84:3A:81:82:0A:C7:F2:8F:BE:1A:B9:EB
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 019F3CDCFF65D9EACCE5C9EF60FFC0DB161F
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Pt2jX6hDtVCEOoGCCsfyj74aues.roa
Signing time: Tue 07 Jul 2026 13:55:44 +0000
ROA not before: Tue 07 Jul 2026 13:55:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15924
IP address blocks: 87.76.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3c:dc:ff:65:d9:ea:cc:e5:c9:ef:60:ff:c0:db:16:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Jul 7 13:55:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3edda35fa843b550843a81820ac7f28fbe1ab9eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:4b:59:cd:ad:f4:d4:62:98:cb:03:51:45:92:
50:2e:e8:47:e0:98:89:f4:5f:bf:3f:76:5c:69:53:
8d:1a:38:8f:f6:31:e9:9c:16:8c:47:49:be:eb:c2:
f8:dc:36:56:1a:50:03:e1:d9:49:c6:11:d3:73:23:
f8:53:4a:bb:2c:30:99:cf:90:f2:fb:00:5b:24:43:
bc:7a:bc:ad:18:21:38:3e:49:d1:f6:30:c3:9f:f4:
aa:54:65:0c:90:38:ec:fa:6e:60:ac:0c:87:20:d7:
14:a2:67:f7:33:fc:97:a8:36:fd:56:f1:86:12:a2:
e1:32:95:9f:da:0b:16:0a:86:22:4c:50:2f:c9:5d:
11:e1:12:8c:4e:8f:3c:99:48:28:a0:09:4e:92:7e:
56:47:8c:a1:03:4e:1b:b6:4f:4b:99:bd:c9:25:c1:
0c:e6:be:cb:0c:4f:a0:90:ce:b5:14:e2:d6:47:88:
43:62:62:8d:db:bb:67:d0:e6:ae:6c:4d:80:8c:31:
42:2c:41:df:d3:9a:30:f2:b8:1f:16:bd:a0:e9:6b:
a5:c8:bd:ca:f1:86:c1:50:fa:f4:22:fe:11:de:fd:
91:03:17:48:e1:23:9e:03:76:e2:b1:f4:8b:15:27:
c7:eb:cf:a0:10:4e:be:8e:93:b1:d9:5f:bb:bd:db:
27:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:DD:A3:5F:A8:43:B5:50:84:3A:81:82:0A:C7:F2:8F:BE:1A:B9:EB
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Pt2jX6hDtVCEOoGCCsfyj74aues.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.146.0/24
Signature Algorithm: sha256WithRSAEncryption
42:9b:23:8a:d3:01:aa:66:c5:0d:4b:8c:10:d5:ea:f1:fe:f2:
46:01:61:a3:79:68:03:93:9e:f3:77:6d:bd:02:9e:59:00:16:
ae:49:30:9d:49:ce:93:c3:9d:18:15:c8:cf:14:f9:36:e7:ab:
83:f6:fb:b4:35:0d:0a:c8:78:76:cd:d3:22:e0:00:b8:0f:a9:
4f:9c:f5:f4:cf:77:c7:c5:47:e1:2c:16:b3:3a:8e:35:66:0c:
c1:0a:e1:a1:b0:4e:50:59:d1:ac:03:4f:f7:14:d4:f2:e9:5c:
8b:08:b9:7b:22:77:33:1f:01:0f:e5:ea:18:5a:b1:8f:e2:c8:
54:fa:81:a1:f5:29:66:cc:f7:e4:41:0b:56:0e:28:ac:a4:a8:
3e:14:26:f2:ea:cb:c1:c0:2b:ed:d4:b7:1a:39:af:d4:ef:86:
3c:a7:4a:96:28:90:3a:5e:38:d2:b2:d7:e3:52:ab:a5:76:82:
06:12:a6:ef:5f:b7:74:5f:d8:69:1c:24:5f:f6:ae:44:d5:6f:
e9:c2:0e:08:6d:ad:bb:2f:18:d3:a9:11:5a:e6:65:18:fe:ce:
27:38:46:25:95:24:5c:1b:b3:cc:b3:86:26:7d:98:81:08:96:
d0:66:db:47:e6:f4:89:d5:a9:5f:73:2a:d1:7e:5f:92:97:23:
c3:84:8f:11
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ883P9l2erM5cnvYP/A2xYfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyMWYwY2JhMTBkYWEzMDJlM2IxNjdjZWU1Mzk1Zjc0MmY1
MzBiMDkwHhcNMjYwNzA3MTM1NTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZWRkYTM1ZmE4NDNiNTUwODQzYTgxODIwYWM3ZjI4ZmJlMWFiOWViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3EtZza301GKYywNRRZJQLuhH4JiJ
9F+/P3ZcaVONGjiP9jHpnBaMR0m+68L43DZWGlAD4dlJxhHTcyP4U0q7LDCZz5Dy
+wBbJEO8erytGCE4PknR9jDDn/SqVGUMkDjs+m5grAyHINcUomf3M/yXqDb9VvGG
EqLhMpWf2gsWCoYiTFAvyV0R4RKMTo88mUgooAlOkn5WR4yhA04btk9Lmb3JJcEM
5r7LDE+gkM61FOLWR4hDYmKN27tn0OaubE2AjDFCLEHf05ow8rgfFr2g6WulyL3K
8YbBUPr0Iv4R3v2RAxdI4SOeA3bisfSLFSfH68+gEE6+jpOx2V+7vdsnXQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFD7do1+oQ7VQhDqBggrH8o++GrnrMB8GA1UdIwQY
MBaAFFIfDLoQ2qMC47FnzuU5X3QvUwsJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWg4TXVoRGFvd0xqc1dmTzVUbGZkQzlUQ3drLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82OGNlMzYtNzRlNC00NDNiLWFlZjEt
M2JiOGIwNzVkNjlmLzEvUHQyalg2aER0VkNFT29HQ0NzZnlqNzRhdWVzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82OGNlMzYtNzRlNC00NDNiLWFlZjEtM2JiOGIwNzVkNjlm
LzEvVWg4TXVoRGFvd0xqc1dmTzVUbGZkQzlUQ3drLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV0ySMA0G
CSqGSIb3DQEBCwUAA4IBAQBCmyOK0wGqZsUNS4wQ1erx/vJGAWGjeWgDk57zd229
Ap5ZABauSTCdSc6Tw50YFcjPFPk256uD9vu0NQ0KyHh2zdMi4AC4D6lPnPX0z3fH
xUfhLBazOo41ZgzBCuGhsE5QWdGsA0/3FNTy6VyLCLl7InczHwEP5eoYWrGP4shU
+oGh9SlmzPfkQQtWDiispKg+FCby6svBwCvt1LcaOa/U74Y8p0qWKJA6XjjSstfj
UquldoIGEqbvX7d0X9hpHCRf9q5E1W/pwg4Iba27LxjTqRFa5mUY/s4nOEYllSRc
G7PMs4YmfZiBCJbQZttH5vSJ1alfcyrRfl+SlyPDhI8R
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:58:03 2026 by rpki-client