Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/WFRhidPQLhkFKzMic7ZyMDkTWjI.roa
File: WFRhidPQLhkFKzMic7ZyMDkTWjI.roa (raw, json)
Hash identifier: Uk/D31kD3a+f8Ymn+xIbPNw42WqomvUpEjxCH0H71EE=
Subject key identifier: 58:54:61:89:D3:D0:2E:19:05:2B:33:22:73:B6:72:30:39:13:5A:32
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 019F7ADDF56890B8193B896B6857ADBC354A
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/WFRhidPQLhkFKzMic7ZyMDkTWjI.roa
Signing time: Sun 19 Jul 2026 14:53:14 +0000
ROA not before: Sun 19 Jul 2026 14:53:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 154132
IP address blocks: 87.76.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:7a:dd:f5:68:90:b8:19:3b:89:6b:68:57:ad:bc:35:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Jul 19 14:53:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=58546189d3d02e19052b332273b6723039135a32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6b:f0:c3:1d:93:15:53:b7:28:c3:2c:ad:13:
39:b9:a5:e4:2a:86:5e:a5:bb:8c:f7:e4:95:29:e1:
7b:89:d3:cc:3e:2e:fa:e6:af:88:08:2d:5c:85:69:
e5:4a:ed:21:55:4a:4e:20:a9:4c:8d:a3:b0:64:3e:
8e:f5:5b:d4:d2:51:55:af:75:5e:b5:62:04:a7:54:
85:a5:7b:c8:7d:8b:a7:b9:fc:f6:f0:3c:95:c2:fc:
6d:d2:b0:a9:66:4f:c5:4e:4f:4e:bf:8b:da:07:6f:
e9:6d:57:ae:d8:ff:11:89:0c:d6:0d:16:4e:a8:e5:
1a:3a:1b:b0:3e:cb:4c:fb:5e:64:25:4e:04:a3:5e:
e6:d8:68:0b:24:b5:8d:c8:4c:95:40:65:40:e4:69:
0d:34:0c:a2:48:d3:b7:49:03:01:2b:7a:c6:3a:34:
f2:ea:30:41:4f:8b:d3:f5:7a:30:58:ba:97:9e:40:
65:11:2c:25:53:0f:b6:68:bd:fd:37:86:c4:82:b2:
e1:f4:7e:c6:5e:13:28:c1:5d:87:98:10:34:88:f0:
c8:3d:5b:e2:2c:c9:c9:dd:5a:58:2b:f3:01:92:c7:
c8:1f:58:c4:32:fb:c3:f1:05:a4:ed:19:d8:90:a3:
37:2c:a1:b5:0c:16:f7:72:c9:da:f2:b0:e9:6f:89:
aa:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:54:61:89:D3:D0:2E:19:05:2B:33:22:73:B6:72:30:39:13:5A:32
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/WFRhidPQLhkFKzMic7ZyMDkTWjI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.168.0/24
Signature Algorithm: sha256WithRSAEncryption
57:8f:7d:97:6a:7a:d7:7c:1c:c4:76:e7:1b:20:ef:a4:5d:9b:
fd:74:d4:bb:55:c1:bf:6a:90:6b:95:d5:34:78:15:46:4f:20:
09:a1:55:cd:84:48:35:27:a4:f8:8d:a4:a3:d4:24:8c:69:a7:
24:c7:f2:f0:ab:92:fd:49:2c:99:91:b0:5a:59:c3:b5:d8:44:
09:5c:3c:d6:d7:f6:d4:2f:d8:97:95:92:09:94:ee:16:c7:dc:
24:9a:a2:9b:42:ae:64:5e:cb:42:43:7d:cd:c8:26:0c:6b:a7:
ba:4e:4b:b9:da:86:a2:b0:19:1a:6e:6b:df:5d:5a:a5:32:ad:
dc:b0:9b:52:1d:26:1a:f8:3e:00:b4:e1:ed:56:75:a6:a3:37:
d1:e4:d0:a0:d9:b8:bf:46:47:16:73:fa:0a:a4:af:55:18:8f:
57:85:2e:a9:28:f4:e9:8f:b4:4a:2a:26:ec:15:cc:b7:6e:a0:
5a:60:00:a0:4f:d2:6f:f8:6b:c9:6b:63:8a:65:31:87:75:b8:
15:a9:65:94:47:15:31:e5:55:b9:55:c3:ab:3c:36:d5:1b:8a:
71:64:50:cc:02:99:99:c6:46:a3:63:9b:5a:9b:9b:bf:79:aa:
5c:2c:a1:05:b0:8f:8b:2e:93:18:3e:2b:bd:35:4c:ba:dd:e1:
6e:87:40:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:58:24 2026 by rpki-client