Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/YKqnuFwjEI6OQdq0wjkc4F1O-pI.roa
File: YKqnuFwjEI6OQdq0wjkc4F1O-pI.roa (raw, json)
Hash identifier: jdM8ouIKE7LvDAtloEp7Va00qdX1msF3QitYX3yXOsQ=
Subject key identifier: 60:AA:A7:B8:5C:23:10:8E:8E:41:DA:B4:C2:39:1C:E0:5D:4E:FA:92
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 019F8B42BCE79F906CC0A2AB8BE6BDFDA657
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/YKqnuFwjEI6OQdq0wjkc4F1O-pI.roa
Signing time: Wed 22 Jul 2026 19:17:14 +0000
ROA not before: Wed 22 Jul 2026 19:17:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 87.76.178.0/24 maxlen: 24
87.76.210.0/24 maxlen: 24
87.76.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8b:42:bc:e7:9f:90:6c:c0:a2:ab:8b:e6:bd:fd:a6:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Jul 22 19:17:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=60aaa7b85c23108e8e41dab4c2391ce05d4efa92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:79:39:44:ee:05:47:0b:7b:10:5d:0a:69:a4:
51:95:db:cd:3d:b2:e2:ea:66:89:cf:87:fb:ef:83:
0f:a4:c9:9c:11:ef:3a:26:c8:06:b2:f7:3b:3a:d0:
2d:b6:a1:06:70:19:3f:85:28:af:bb:cd:b8:31:61:
d4:56:22:65:c1:02:e3:4b:89:72:30:ec:55:07:30:
c2:fa:fb:44:8d:66:fa:95:02:39:fc:e0:76:94:61:
f8:cb:50:90:20:44:8c:85:35:c2:3b:12:f2:2e:9a:
3a:2b:3b:55:e0:5c:0a:0d:fa:25:0e:ee:d7:90:a9:
ee:54:49:da:36:08:df:10:4e:ce:d1:39:d7:05:67:
2d:c2:52:48:81:92:ed:a6:47:e0:d5:b8:cb:bc:c9:
6c:20:97:de:ce:c0:4e:0f:59:e5:ef:06:71:b7:05:
a0:88:1e:57:36:af:00:69:dc:16:ef:70:3f:1d:8b:
d4:b8:e7:e9:27:4e:55:b4:e9:60:fc:61:76:f8:fd:
f0:bb:40:09:93:cf:41:d2:27:a4:80:7f:e2:3f:55:
00:06:39:7c:7f:61:9e:ea:a0:01:ab:89:d4:1d:ef:
74:59:cd:22:68:39:e1:03:6c:06:e5:cf:63:b1:68:
29:76:9d:90:49:82:e5:dd:cd:5a:00:86:92:c9:6d:
54:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:AA:A7:B8:5C:23:10:8E:8E:41:DA:B4:C2:39:1C:E0:5D:4E:FA:92
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/YKqnuFwjEI6OQdq0wjkc4F1O-pI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.178.0/24
87.76.210.0/24
87.76.223.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:d0:f4:34:9b:60:d4:a1:a6:50:c7:fc:cd:c0:a9:0a:bd:e5:
b4:15:d5:c6:af:29:eb:7b:e3:27:e6:32:31:75:68:3f:e2:ce:
5f:0c:8c:90:51:10:1c:f1:fa:6e:20:f1:05:87:a4:fc:ec:3b:
75:82:0c:2b:73:01:99:7f:70:a3:e1:5a:f1:c8:c0:44:d8:20:
db:bb:d3:7b:59:d5:75:0a:61:63:f0:32:84:5f:38:1f:e9:30:
b8:42:e8:d2:52:e3:e8:f4:0d:56:f0:58:b5:06:bc:dc:66:66:
38:fe:56:87:1c:4a:70:3b:17:4d:92:8d:e2:54:52:7a:21:cb:
20:7a:9a:94:69:cd:ff:55:f2:e4:e7:5c:66:9d:8c:fc:96:20:
ad:cd:aa:ca:1b:1a:60:69:03:cd:bf:66:90:3f:48:db:19:7b:
fa:87:74:c0:d3:69:5e:c2:88:db:c9:ed:44:9f:46:b2:9b:f1:
5b:dc:b6:ee:0c:01:01:05:64:c3:23:2d:60:9a:42:96:93:7c:
91:94:b4:c4:15:12:a8:1d:79:0e:44:85:6a:53:48:7f:8b:07:
86:0c:e0:06:a5:59:24:0a:ce:c4:d6:b3:f6:44:62:8a:84:4d:
74:9b:c8:c2:f6:09:78:e8:d3:9b:af:2d:3c:ed:1d:88:b9:33:
be:ec:13:a4
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZ+LQrznn5BswKKri+a9/aZXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyMWYwY2JhMTBkYWEzMDJlM2IxNjdjZWU1Mzk1Zjc0MmY1
MzBiMDkwHhcNMjYwNzIyMTkxNzE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MGFhYTdiODVjMjMxMDhlOGU0MWRhYjRjMjM5MWNlMDVkNGVmYTkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHk5RO4FRwt7EF0KaaRRldvNPbLi
6maJz4f774MPpMmcEe86JsgGsvc7OtAttqEGcBk/hSivu824MWHUViJlwQLjS4ly
MOxVBzDC+vtEjWb6lQI5/OB2lGH4y1CQIESMhTXCOxLyLpo6KztV4FwKDfolDu7X
kKnuVEnaNgjfEE7O0TnXBWctwlJIgZLtpkfg1bjLvMlsIJfezsBOD1nl7wZxtwWg
iB5XNq8AadwW73A/HYvUuOfpJ05VtOlg/GF2+P3wu0AJk89B0iekgH/iP1UABjl8
f2Ge6qABq4nUHe90Wc0iaDnhA2wG5c9jsWgpdp2QSYLl3c1aAIaSyW1UfwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFGCqp7hcIxCOjkHatMI5HOBdTvqSMB8GA1UdIwQY
MBaAFFIfDLoQ2qMC47FnzuU5X3QvUwsJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWg4TXVoRGFvd0xqc1dmTzVUbGZkQzlUQ3drLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82OGNlMzYtNzRlNC00NDNiLWFlZjEt
M2JiOGIwNzVkNjlmLzEvWUtxbnVGd2pFSTZPUWRxMHdqa2M0RjFPLXBJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82OGNlMzYtNzRlNC00NDNiLWFlZjEtM2JiOGIwNzVkNjlm
LzEvVWg4TXVoRGFvd0xqc1dmTzVUbGZkQzlUQ3drLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAV0yyAwQA
V0zSAwQAV0zfMA0GCSqGSIb3DQEBCwUAA4IBAQAM0PQ0m2DUoaZQx/zNwKkKveW0
FdXGrynre+Mn5jIxdWg/4s5fDIyQURAc8fpuIPEFh6T87Dt1ggwrcwGZf3Cj4Vrx
yMBE2CDbu9N7WdV1CmFj8DKEXzgf6TC4QujSUuPo9A1W8Fi1BrzcZmY4/laHHEpw
OxdNko3iVFJ6IcsgepqUac3/VfLk51xmnYz8liCtzarKGxpgaQPNv2aQP0jbGXv6
h3TA02lewojbye1En0aym/Fb3LbuDAEBBWTDIy1gmkKWk3yRlLTEFRKoHXkORIVq
U0h/iweGDOAGpVkkCs7E1rP2RGKKhE10m8jC9gl46NObry087R2IuTO+7BOk
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:54:29 2026 by rpki-client