Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/TAB9DEhfH3ucivL1XvP0kO0ogDQ.roa
File: TAB9DEhfH3ucivL1XvP0kO0ogDQ.roa (raw, json)
Hash identifier: YqiPL/VoSl6QNPQggS3f6jY+XATNPoYmSe6h2bf1d3U=
Subject key identifier: 4C:00:7D:0C:48:5F:1F:7B:9C:8A:F2:F5:5E:F3:F4:90:ED:28:80:34
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 019F90FB94C6038723E9208405406A92FBAB
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/TAB9DEhfH3ucivL1XvP0kO0ogDQ.roa
Signing time: Thu 23 Jul 2026 21:57:14 +0000
ROA not before: Thu 23 Jul 2026 21:57:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 87.76.149.0/24 maxlen: 24
87.76.185.0/24 maxlen: 24
87.76.189.0/24 maxlen: 24
87.76.213.0/24 maxlen: 24
87.76.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:57:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:fb:94:c6:03:87:23:e9:20:84:05:40:6a:92:fb:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Jul 23 21:57:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4c007d0c485f1f7b9c8af2f55ef3f490ed288034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2b:3f:84:32:0a:f0:83:01:86:d3:5c:85:67:
ae:ab:78:99:b2:9f:b1:6b:07:5a:dd:58:1f:94:48:
6f:30:cb:84:ed:72:b5:c9:c8:e0:72:ac:e8:67:ab:
0f:93:54:7e:73:c1:93:13:28:6e:6f:d2:f3:aa:f7:
12:32:ca:13:39:e7:42:ca:1d:1b:6e:ef:b1:7f:79:
9d:41:3a:0b:04:18:3c:35:53:42:91:f3:d9:93:12:
b9:b6:f9:b4:e3:2b:94:fd:8c:dc:25:47:0c:3a:f5:
65:cc:39:1c:55:87:09:c3:87:71:d9:52:96:75:3b:
96:13:2d:ce:48:b9:9c:8a:f1:d5:11:e1:c9:15:f4:
cd:c4:88:4e:ab:25:23:69:4c:c3:75:3c:6a:e8:91:
4b:fb:62:bd:57:ad:52:6d:49:ca:ff:e0:a1:6d:22:
04:3d:14:32:c6:69:2f:a0:4f:fd:50:2a:24:84:3a:
f1:fa:3e:4d:4a:87:4d:8c:38:06:06:28:c1:5c:f4:
46:80:6a:fb:f8:d9:49:6a:8d:82:96:f9:c1:9a:b4:
36:8d:5c:41:ad:5f:57:c2:1c:63:bc:8b:bc:21:19:
49:d8:78:d1:25:3a:00:80:e9:d8:e1:8b:b9:1a:51:
03:2b:21:e7:0f:ac:2c:59:b7:b7:d1:d9:21:91:4a:
5c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:00:7D:0C:48:5F:1F:7B:9C:8A:F2:F5:5E:F3:F4:90:ED:28:80:34
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/TAB9DEhfH3ucivL1XvP0kO0ogDQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.149.0/24
87.76.185.0/24
87.76.189.0/24
87.76.213.0-87.76.214.255
Signature Algorithm: sha256WithRSAEncryption
3c:3f:cd:0c:6a:63:09:d6:77:a7:f9:0a:43:d0:64:6f:df:e5:
a7:8e:4e:7f:f9:8d:81:eb:c4:99:38:cb:30:a5:4f:52:1e:dc:
79:7b:3f:3e:82:f2:fd:e2:f1:1f:7c:de:37:ed:9a:f1:40:8e:
00:21:b2:86:79:8a:76:d0:d7:52:4e:82:2c:08:e8:8c:da:39:
be:d2:e7:04:97:5e:46:18:42:13:09:5b:e6:47:b4:15:f7:38:
12:6a:c5:41:00:08:51:97:46:56:e3:39:a4:e5:7b:46:36:a3:
ca:b5:00:37:ae:16:53:e1:1e:ec:14:33:48:14:db:3c:1d:13:
23:44:d1:81:6f:b3:5f:97:4f:13:68:32:68:82:f4:e2:17:3a:
bc:81:87:c9:e5:a2:c6:a4:3e:00:a4:04:7e:08:69:a4:d5:1b:
47:62:9f:c8:27:b0:b0:00:df:da:59:ed:2d:3e:66:1e:54:0a:
bf:b8:76:00:94:f4:12:05:e0:af:4c:e4:87:43:86:10:94:4f:
69:78:26:16:1f:1f:0e:c2:93:e0:07:35:61:9a:2f:ad:0a:2f:
1b:ea:c9:d5:3f:c9:2b:cf:08:72:5f:63:ce:b9:b2:30:c5:9c:
fb:82:b7:23:a1:d5:24:33:68:5b:75:69:56:2e:a1:e6:25:a1:
6f:27:04:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:50:22 2026 by rpki-client