Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Z4Ue561pB2PYpTmT43861ZLhHFE.roa
File: Z4Ue561pB2PYpTmT43861ZLhHFE.roa (raw, json)
Hash identifier: 9flxyJjO3TUOvI4prxtm32ghVCvoLt+N3xNyc6CZ7g8=
Subject key identifier: 67:85:1E:E7:AD:69:07:63:D8:A5:39:93:E3:7F:3A:D5:92:E1:1C:51
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 019F90EC0426767B9AB676C8A0946015A6B5
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Z4Ue561pB2PYpTmT43861ZLhHFE.roa
Signing time: Thu 23 Jul 2026 21:40:14 +0000
ROA not before: Thu 23 Jul 2026 21:40:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212477
IP address blocks: 87.76.128.0/24 maxlen: 24
87.76.142.0/24 maxlen: 24
87.76.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:57:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:ec:04:26:76:7b:9a:b6:76:c8:a0:94:60:15:a6:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Jul 23 21:40:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=67851ee7ad690763d8a53993e37f3ad592e11c51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:14:19:78:7a:7d:83:a1:23:eb:2e:be:aa:6e:
71:2f:28:06:17:de:5f:c5:f0:01:f0:18:8b:8f:b1:
1e:d7:86:27:bb:c2:88:5c:87:fd:07:29:74:17:09:
0b:9e:10:e9:da:f9:ec:05:36:ba:3f:5e:1a:78:fa:
3d:1f:5a:aa:14:0d:bc:90:42:ec:d9:ae:0f:dd:ee:
8f:b0:dd:eb:ff:14:4c:4d:ba:04:8d:2e:90:c8:de:
28:46:05:fc:f5:3f:55:b6:1d:30:ad:b1:e9:a4:03:
10:71:9a:77:0e:ec:9a:64:c2:2a:ab:28:01:31:b4:
d0:b7:9a:05:6e:26:2f:2f:06:ab:98:f2:08:47:19:
d4:38:98:f3:a0:7c:26:02:c9:06:5c:4d:73:e0:6b:
ce:96:6c:ab:51:19:44:ab:41:5c:09:74:ab:a8:3d:
e8:50:34:2d:96:10:e3:a4:04:f4:a8:53:9d:fe:6b:
e7:d1:29:c9:bf:8b:63:4e:d4:5c:be:09:79:e1:92:
f0:a3:c5:c8:03:6c:93:af:f5:94:fa:d8:ae:e8:b4:
21:e6:54:38:fa:11:b0:9f:00:6f:88:b7:02:8b:1a:
9b:a3:d1:4d:73:69:13:71:ed:06:aa:c9:f5:4b:72:
2a:a2:b9:e1:c6:3b:fe:2c:93:86:91:20:16:13:e5:
82:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:85:1E:E7:AD:69:07:63:D8:A5:39:93:E3:7F:3A:D5:92:E1:1C:51
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Z4Ue561pB2PYpTmT43861ZLhHFE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.128.0/24
87.76.142.0/24
87.76.157.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:fb:1f:0b:00:e7:be:01:54:03:5c:18:b4:5b:0d:ee:8a:9a:
27:4d:85:8e:a0:96:70:ef:e1:ee:9c:22:8e:d1:ae:f4:ee:42:
9c:12:8e:d6:cb:08:dd:a4:e9:2a:26:f8:a8:03:1d:fa:d4:02:
70:c2:46:d4:ff:e1:82:4f:cc:35:5d:aa:61:35:03:24:1f:fe:
86:b7:87:ce:13:5e:3f:dc:06:46:ac:4d:72:d8:c6:38:4c:0d:
83:58:67:78:b0:17:61:df:7b:bc:1f:fa:de:35:0c:64:45:d6:
4b:66:45:3d:a9:fe:e8:35:d1:90:dc:07:49:b4:3b:58:e6:13:
c5:35:87:7c:85:7f:f3:06:3b:cf:3a:31:5a:60:9d:ac:ae:fc:
5c:be:a9:e8:a9:2f:16:89:cd:d9:df:15:f4:23:ce:99:b3:e2:
99:b4:53:5f:6b:4e:9b:e6:40:84:91:c3:d7:26:27:f5:9d:a8:
08:94:bd:9e:c9:b0:c0:2e:8a:59:59:c7:10:b3:ae:3d:01:f1:
e3:de:ee:5e:2a:b7:9f:f4:31:f1:90:43:c9:07:ff:bc:4d:38:
f3:5c:7f:26:ef:5d:29:34:53:06:cb:9f:55:d5:86:6e:79:dc:
03:35:7e:d6:da:91:46:65:93:ef:cd:49:d7:cf:75:e9:4d:28:
a4:0d:85:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:27:53 2026 by rpki-client