Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/UqJpt_zurel2T_ns2kWVFYer2f8.roa
File: UqJpt_zurel2T_ns2kWVFYer2f8.roa (raw, json)
Hash identifier: abMdW87A4G38J7CcZCSnf2/lRl2yOJzicamnpNG30ts=
Subject key identifier: 52:A2:69:B7:FC:EE:AD:E9:76:4F:F9:EC:DA:45:95:15:87:AB:D9:FF
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 019DFC669F84AC978B6FDA39A5B23E108B17
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/UqJpt_zurel2T_ns2kWVFYer2f8.roa
Signing time: Wed 06 May 2026 08:27:57 +0000
ROA not before: Wed 06 May 2026 08:27:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35661
IP address blocks: 87.76.129.0/24 maxlen: 24
87.76.165.0/24 maxlen: 24
87.76.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:fc:66:9f:84:ac:97:8b:6f:da:39:a5:b2:3e:10:8b:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: May 6 08:27:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=52a269b7fceeade9764ff9ecda45951587abd9ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:44:d0:f3:cf:66:ea:10:9b:0a:80:19:de:e6:
05:bf:17:8c:55:69:98:0f:ec:ea:29:7d:5d:22:ce:
d2:32:e0:95:3b:62:b5:c7:87:d0:d9:18:fb:ec:12:
05:c9:33:3d:17:67:19:65:f2:ae:a1:dc:6b:9a:5e:
e5:11:5c:01:44:94:41:f8:03:4c:b9:a7:ee:29:eb:
20:ed:a2:19:51:78:80:9d:6e:b0:65:8a:42:d2:60:
30:f8:09:e6:ec:e8:bf:82:15:21:f2:ce:e2:62:39:
41:53:96:57:59:0e:18:d0:91:5c:bd:a7:2d:c6:8f:
5a:1a:bb:39:4c:68:b7:c3:79:c2:e0:68:21:61:57:
13:36:2c:a6:6c:04:90:c5:9e:36:98:4d:28:f7:45:
c5:02:c6:6c:0f:c5:0a:dd:fb:91:6f:5b:89:d3:1c:
15:e8:c2:6f:0b:a5:64:63:c5:f9:cd:89:e9:98:65:
6c:6a:3f:bb:5c:14:af:c3:f7:e6:3f:d4:ae:e6:38:
82:07:39:5f:2c:09:7c:71:1d:3e:64:78:f1:32:09:
48:a8:f5:c4:e8:31:87:b3:ac:3e:0d:1f:fb:41:60:
bb:ce:2e:65:87:cf:08:49:36:25:ac:60:2e:c0:41:
70:48:42:c1:22:f8:b0:3e:41:25:55:0f:71:ca:a1:
bb:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:A2:69:B7:FC:EE:AD:E9:76:4F:F9:EC:DA:45:95:15:87:AB:D9:FF
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/UqJpt_zurel2T_ns2kWVFYer2f8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.129.0/24
87.76.165.0/24
87.76.167.0/24
Signature Algorithm: sha256WithRSAEncryption
29:28:50:14:24:4f:34:cd:b7:04:fe:50:9c:cc:42:01:d3:d2:
d7:35:09:76:73:dc:52:e6:c8:87:3c:e4:f6:85:bc:3d:41:75:
76:e1:4d:16:81:92:08:f0:68:2a:57:be:b1:91:ca:f4:6c:18:
9c:a3:fb:b0:49:3f:8c:b5:63:11:79:9b:ca:a2:84:4f:b9:40:
84:fc:ad:04:bc:32:57:b5:2b:9a:17:fb:cd:4f:45:2e:da:15:
ed:09:d5:7f:0d:17:7f:1d:0e:27:99:8c:2e:79:e1:6b:63:fb:
ec:e6:fb:11:26:e1:84:9c:25:1d:91:85:54:0f:a8:8d:ce:c9:
f3:71:5e:46:2f:e4:0d:46:07:4d:87:57:99:a9:60:3f:7a:82:
8f:b1:5d:81:1b:09:f5:e3:e0:fe:5a:6b:30:96:52:a6:7b:70:
75:99:61:aa:e5:3c:71:eb:d9:3c:f6:7e:8a:1f:f3:3e:d6:e0:
54:57:7d:69:c4:8f:65:d1:c0:d1:46:33:d8:04:ae:53:bb:f0:
7c:41:cc:bc:c5:12:4d:34:bd:51:be:5f:87:d6:2d:27:0d:e8:
26:c6:a8:b5:84:68:a7:c4:ae:7d:b5:c9:15:fe:31:e3:d9:2a:
99:f9:45:17:ac:94:7a:a6:4d:cf:a2:10:d1:17:4b:48:e1:bd:
ff:71:57:8c
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZ38Zp+ErJeLb9o5pbI+EIsXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyMWYwY2JhMTBkYWEzMDJlM2IxNjdjZWU1Mzk1Zjc0MmY1
MzBiMDkwHhcNMjYwNTA2MDgyNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MmEyNjliN2ZjZWVhZGU5NzY0ZmY5ZWNkYTQ1OTUxNTg3YWJkOWZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwETQ889m6hCbCoAZ3uYFvxeMVWmY
D+zqKX1dIs7SMuCVO2K1x4fQ2Rj77BIFyTM9F2cZZfKuodxrml7lEVwBRJRB+ANM
uafuKesg7aIZUXiAnW6wZYpC0mAw+Anm7Oi/ghUh8s7iYjlBU5ZXWQ4Y0JFcvact
xo9aGrs5TGi3w3nC4GghYVcTNiymbASQxZ42mE0o90XFAsZsD8UK3fuRb1uJ0xwV
6MJvC6VkY8X5zYnpmGVsaj+7XBSvw/fmP9Su5jiCBzlfLAl8cR0+ZHjxMglIqPXE
6DGHs6w+DR/7QWC7zi5lh88ISTYlrGAuwEFwSELBIviwPkElVQ9xyqG7tQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFFKiabf87q3pdk/57NpFlRWHq9n/MB8GA1UdIwQY
MBaAFFIfDLoQ2qMC47FnzuU5X3QvUwsJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWg4TXVoRGFvd0xqc1dmTzVUbGZkQzlUQ3drLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82OGNlMzYtNzRlNC00NDNiLWFlZjEt
M2JiOGIwNzVkNjlmLzEvVXFKcHRfenVyZWwyVF9uczJrV1ZGWWVyMmY4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82OGNlMzYtNzRlNC00NDNiLWFlZjEtM2JiOGIwNzVkNjlm
LzEvVWg4TXVoRGFvd0xqc1dmTzVUbGZkQzlUQ3drLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAV0yBAwQA
V0ylAwQAV0ynMA0GCSqGSIb3DQEBCwUAA4IBAQApKFAUJE80zbcE/lCczEIB09LX
NQl2c9xS5siHPOT2hbw9QXV24U0WgZII8GgqV76xkcr0bBico/uwST+MtWMReZvK
ooRPuUCE/K0EvDJXtSuaF/vNT0Uu2hXtCdV/DRd/HQ4nmYwueeFrY/vs5vsRJuGE
nCUdkYVUD6iNzsnzcV5GL+QNRgdNh1eZqWA/eoKPsV2BGwn14+D+WmswllKme3B1
mWGq5Txx69k89n6KH/M+1uBUV31pxI9l0cDRRjPYBK5Tu/B8Qcy8xRJNNL1Rvl+H
1i0nDegmxqi1hGinxK59tckV/jHj2SqZ+UUXrJR6pk3PohDRF0tI4b3/cVeM
-----END CERTIFICATE-----
Generated at Wed May 13 02:40:05 2026 by rpki-client