Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/UmGKiYKR95iy20x4um3FvBO2d_0.roa
File: UmGKiYKR95iy20x4um3FvBO2d_0.roa (raw, json)
Hash identifier: QKrlNewUrDfRfkLgpDGsWcGnSjS9jEpC9bf1cco8zm8=
Subject key identifier: 52:61:8A:89:82:91:F7:98:B2:DB:4C:78:BA:6D:C5:BC:13:B6:77:FD
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 019F64EE907383FFDE1909F0C707850AE8BB
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/UmGKiYKR95iy20x4um3FvBO2d_0.roa
Signing time: Wed 15 Jul 2026 08:39:43 +0000
ROA not before: Wed 15 Jul 2026 08:39:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219206
IP address blocks: 87.76.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:57:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:64:ee:90:73:83:ff:de:19:09:f0:c7:07:85:0a:e8:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Jul 15 08:39:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=52618a898291f798b2db4c78ba6dc5bc13b677fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b3:98:6d:63:f4:c6:9c:14:16:0b:9c:82:c2:
e9:7a:af:d6:20:4a:62:95:75:79:cb:cf:91:0a:6e:
95:a6:bf:e7:99:63:c0:f1:7a:cd:a3:30:92:d4:68:
54:60:e2:57:ca:8b:51:6a:0a:ad:57:04:c3:ab:d6:
f7:6d:b8:55:82:b9:13:41:8b:32:49:0d:d5:6c:2e:
70:55:1c:6e:33:d7:6d:9a:09:97:28:36:00:0d:8d:
bb:f5:9e:bc:84:df:b3:8c:71:4e:3a:54:7d:84:1e:
08:6c:60:79:45:89:de:3a:97:f0:7f:7d:d9:47:c1:
42:8d:0a:a2:c9:c1:9f:1d:b4:bc:ad:fd:a8:f6:1e:
d7:a1:fa:ca:47:0a:9b:39:10:2b:9b:31:0f:03:20:
94:22:c0:ef:56:7e:14:ec:ed:1d:31:a5:87:92:a8:
f1:9c:3b:ce:27:75:1e:f9:1a:50:2d:cc:4d:85:c6:
b3:b1:6c:8c:db:46:06:44:d9:66:7d:11:a6:5e:e7:
8b:db:7a:3e:57:6a:65:18:3a:56:b2:bb:9a:7f:f5:
db:b7:8a:d7:4a:de:af:85:68:df:80:ef:ab:ec:09:
de:10:28:a1:9f:97:8c:b4:e5:02:da:e2:35:e9:47:
34:47:fd:0c:e0:31:08:ea:31:48:09:a2:f8:c3:dc:
8b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:61:8A:89:82:91:F7:98:B2:DB:4C:78:BA:6D:C5:BC:13:B6:77:FD
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/UmGKiYKR95iy20x4um3FvBO2d_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.160.0/24
Signature Algorithm: sha256WithRSAEncryption
90:cc:ac:f0:95:dc:c5:68:b8:e5:9d:71:18:26:c1:de:20:7d:
f7:c9:25:e4:3a:52:8b:6f:b4:91:e7:95:c1:ca:c7:42:98:a8:
51:6b:c5:5b:76:23:ac:d3:e1:45:ee:66:55:17:57:b6:a5:ad:
5c:02:19:85:d3:e8:ee:d5:2d:70:07:b8:6b:ec:96:20:ae:35:
1d:17:82:fb:f1:6f:9c:be:e9:8c:4e:d3:46:bc:d6:eb:a7:6b:
63:52:7e:33:ae:37:01:64:41:16:0d:72:f3:72:50:be:57:0e:
69:9d:59:06:2b:23:3f:4d:95:89:89:f9:65:c1:70:b7:b9:96:
ef:ef:6a:7a:0e:4e:46:bc:9f:e6:dc:8e:af:ba:4b:8b:e8:45:
11:52:0b:9c:f4:46:a1:86:ce:bc:45:f0:28:95:46:8f:0c:1e:
2e:4c:c4:63:b5:3f:ee:8c:dc:03:85:e6:d3:c9:f7:cf:76:1d:
3c:ed:c3:75:45:f9:79:39:aa:4c:df:18:bb:5d:7d:fc:c5:ef:
b0:c7:6d:32:95:33:e8:82:86:e3:ad:44:2e:fb:34:73:d1:ea:
88:63:79:bf:a6:8f:dc:1b:9a:53:cf:9f:9c:b9:5d:c2:b1:44:
89:ac:74:49:8d:ce:68:9c:83:8e:8b:24:fe:ab:a9:e3:19:ce:
2a:63:5a:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:00:19 2026 by rpki-client