Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Vix3AT8M_Z0WNppyxtg3BwxRabk.roa
File: Vix3AT8M_Z0WNppyxtg3BwxRabk.roa (raw, json)
Hash identifier: YbCK9VlBBTBp7wuy95JUPlYMCdRipVhiMHq8DlIshjQ=
Subject key identifier: 56:2C:77:01:3F:0C:FD:9D:16:36:9A:72:C6:D8:37:07:0C:51:69:B9
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 019F84CA8C1810AE422C0811E557C03E523C
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Vix3AT8M_Z0WNppyxtg3BwxRabk.roa
Signing time: Tue 21 Jul 2026 13:08:14 +0000
ROA not before: Tue 21 Jul 2026 13:08:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6205
IP address blocks: 87.76.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:ca:8c:18:10:ae:42:2c:08:11:e5:57:c0:3e:52:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Jul 21 13:08:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=562c77013f0cfd9d16369a72c6d837070c5169b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:fd:90:e6:e7:a8:81:05:91:91:b5:76:9f:3a:
90:5f:13:9f:78:4b:cf:31:42:7a:85:e4:6f:0b:b3:
e4:b7:d8:58:09:c0:e4:80:a7:30:c3:45:54:00:eb:
a7:5e:ef:55:49:49:12:1c:75:a0:d8:d2:2d:7a:1e:
95:7e:e1:fd:67:ca:31:c1:74:33:79:a2:ea:57:45:
b9:cf:26:ca:bd:1f:e2:9a:72:ff:5a:24:48:07:e5:
97:59:81:8a:b1:d9:f1:be:99:60:c9:88:63:8d:fe:
31:fb:2a:0d:9d:cd:f5:8c:c2:1b:1f:6a:a1:61:47:
12:ae:59:fa:7b:28:34:c8:5f:4b:c0:67:b2:14:3e:
4d:78:9e:be:21:1f:bd:71:f7:e9:33:21:12:5b:e5:
56:4e:d1:1d:c9:fe:2f:23:0f:6c:ac:5b:a5:7d:36:
7d:15:e1:ec:7f:0d:1f:60:03:20:47:d6:26:67:e2:
24:3c:92:1c:35:59:e3:6d:d5:75:c4:cf:f2:59:86:
7a:11:1c:b9:7e:92:c8:78:63:e4:f2:c4:c1:fa:07:
4c:cf:fd:f0:57:7c:4c:e5:c5:d6:02:b9:d3:ec:4e:
bf:b1:47:7a:ab:c9:39:c9:3c:a1:3d:43:39:9c:57:
33:53:e4:d2:69:22:72:76:dc:ba:2b:86:96:00:4a:
0f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:2C:77:01:3F:0C:FD:9D:16:36:9A:72:C6:D8:37:07:0C:51:69:B9
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Vix3AT8M_Z0WNppyxtg3BwxRabk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.195.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:32:36:fa:a5:3f:73:94:8b:b8:69:50:88:22:5f:d5:ca:f5:
2a:60:75:e7:fd:02:f9:68:79:50:42:ac:21:82:5c:57:c7:04:
a6:33:4f:df:a1:59:fb:cd:e5:74:49:15:3b:61:d7:4a:1d:29:
93:0b:2d:9d:7d:e8:99:38:a4:31:19:e2:7c:73:f8:f8:2e:33:
a1:ca:37:d9:6a:b1:15:e2:6b:ae:5f:96:f2:a1:8e:14:26:93:
ff:e6:1c:b9:c2:c6:30:d1:9a:cf:67:b9:51:42:79:35:9a:37:
08:56:b2:69:57:13:b7:50:2d:14:0c:53:5c:57:f1:2a:80:99:
07:a6:64:22:cc:d0:8f:10:cf:f7:6f:76:a4:3c:42:d3:4f:46:
8e:71:af:e9:6f:75:3d:da:b4:09:aa:39:1c:f8:1e:31:4d:ab:
fe:2f:93:bd:04:47:80:c6:83:3b:70:61:c0:56:72:18:9e:c0:
af:e3:17:4b:90:e0:80:29:ef:e7:cd:5e:41:66:ed:ba:a3:08:
d4:22:1e:8d:81:66:97:5c:aa:92:d1:dd:8a:96:a1:e3:e2:de:
a7:43:46:23:30:42:6d:a2:c7:ab:3e:66:49:79:78:f6:73:f7:
de:32:32:75:a7:da:5a:be:6b:33:63:47:28:be:fe:b0:a6:16:
91:33:dd:87
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ+EyowYEK5CLAgR5VfAPlI8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyMWYwY2JhMTBkYWEzMDJlM2IxNjdjZWU1Mzk1Zjc0MmY1
MzBiMDkwHhcNMjYwNzIxMTMwODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NjJjNzcwMTNmMGNmZDlkMTYzNjlhNzJjNmQ4MzcwNzBjNTE2OWI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0v2Q5ueogQWRkbV2nzqQXxOfeEvP
MUJ6heRvC7Pkt9hYCcDkgKcww0VUAOunXu9VSUkSHHWg2NIteh6VfuH9Z8oxwXQz
eaLqV0W5zybKvR/imnL/WiRIB+WXWYGKsdnxvplgyYhjjf4x+yoNnc31jMIbH2qh
YUcSrln6eyg0yF9LwGeyFD5NeJ6+IR+9cffpMyESW+VWTtEdyf4vIw9srFulfTZ9
FeHsfw0fYAMgR9YmZ+IkPJIcNVnjbdV1xM/yWYZ6ERy5fpLIeGPk8sTB+gdMz/3w
V3xM5cXWArnT7E6/sUd6q8k5yTyhPUM5nFczU+TSaSJydty6K4aWAEoPZwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFYsdwE/DP2dFjaacsbYNwcMUWm5MB8GA1UdIwQY
MBaAFFIfDLoQ2qMC47FnzuU5X3QvUwsJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWg4TXVoRGFvd0xqc1dmTzVUbGZkQzlUQ3drLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82OGNlMzYtNzRlNC00NDNiLWFlZjEt
M2JiOGIwNzVkNjlmLzEvVml4M0FUOE1fWjBXTnBweXh0ZzNCd3hSYWJrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82OGNlMzYtNzRlNC00NDNiLWFlZjEtM2JiOGIwNzVkNjlm
LzEvVWg4TXVoRGFvd0xqc1dmTzVUbGZkQzlUQ3drLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV0zDMA0G
CSqGSIb3DQEBCwUAA4IBAQB+Mjb6pT9zlIu4aVCIIl/VyvUqYHXn/QL5aHlQQqwh
glxXxwSmM0/foVn7zeV0SRU7YddKHSmTCy2dfeiZOKQxGeJ8c/j4LjOhyjfZarEV
4muuX5byoY4UJpP/5hy5wsYw0ZrPZ7lRQnk1mjcIVrJpVxO3UC0UDFNcV/EqgJkH
pmQizNCPEM/3b3akPELTT0aOca/pb3U92rQJqjkc+B4xTav+L5O9BEeAxoM7cGHA
VnIYnsCv4xdLkOCAKe/nzV5BZu26owjUIh6NgWaXXKqS0d2KlqHj4t6nQ0YjMEJt
oserPmZJeXj2c/feMjJ1p9pavmszY0covv6wphaRM92H
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:58:38 2026 by rpki-client