Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/av2859xW9b_u6NVbVDdqC0jNFp8.roa
File: av2859xW9b_u6NVbVDdqC0jNFp8.roa (raw, json)
Hash identifier: xUdQVFwm7IaIZHNtuL0XDiynKFHuwJia1PSterW2RQA=
Subject key identifier: 6A:FD:BC:E7:DC:56:F5:BF:EE:E8:D5:5B:54:37:6A:0B:48:CD:16:9F
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 019DCF9DEF7AD0B2BD0E255E747FE29A3DE2
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/av2859xW9b_u6NVbVDdqC0jNFp8.roa
Signing time: Mon 27 Apr 2026 15:45:27 +0000
ROA not before: Mon 27 Apr 2026 15:45:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7029
IP address blocks: 87.76.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:9d:ef:7a:d0:b2:bd:0e:25:5e:74:7f:e2:9a:3d:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Apr 27 15:45:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6afdbce7dc56f5bfeee8d55b54376a0b48cd169f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:77:70:03:04:49:0b:07:34:ec:42:cc:32:07:
2c:8b:41:ce:be:f0:fd:4f:8a:4e:03:cc:12:00:3b:
5b:0f:7b:3a:1c:c1:e0:73:b1:08:93:7c:50:32:b8:
8f:d9:76:7a:c9:9c:35:cf:f8:3b:12:aa:05:9e:d8:
98:92:7b:cf:5a:b1:cc:04:87:1e:ec:2d:0e:8f:42:
ea:41:e7:b7:92:ad:bd:b9:38:c4:d2:59:be:41:79:
03:23:29:bc:bb:de:b1:74:7b:fc:68:01:1d:46:e0:
8b:c7:d1:c7:e4:64:db:a3:49:b0:d4:82:f9:46:37:
f2:9b:1d:1a:bd:24:ef:ec:ba:26:1f:c6:a7:c4:bb:
de:96:2d:de:70:b9:68:76:9b:85:57:a6:e3:8e:7b:
a5:62:cc:10:0a:85:07:79:b5:55:cb:d4:36:d7:4e:
16:bf:36:d1:9f:53:1f:de:b2:f2:0b:7f:df:f7:b0:
f7:84:6c:3b:88:82:09:9c:76:6b:5f:f6:98:ba:6e:
e6:8d:65:fa:fb:c0:54:80:83:62:28:cc:65:59:22:
97:5d:c3:92:33:e0:cf:bb:99:9c:53:22:e1:9b:c0:
73:9d:5f:79:ea:63:64:9a:18:21:3b:75:90:46:68:
b0:c2:83:06:85:54:9b:f1:9f:5b:9b:f3:fd:f5:04:
c8:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:FD:BC:E7:DC:56:F5:BF:EE:E8:D5:5B:54:37:6A:0B:48:CD:16:9F
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/av2859xW9b_u6NVbVDdqC0jNFp8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.186.0/24
Signature Algorithm: sha256WithRSAEncryption
89:b1:b0:00:92:49:41:49:67:6e:78:61:1b:bd:36:8f:d4:60:
b4:33:d5:1c:57:99:88:7f:f1:e8:b9:9b:fc:72:13:5e:c0:df:
4c:a7:50:bd:71:0e:de:45:20:07:62:d5:1d:db:1e:56:1e:4a:
08:3b:08:f3:5d:be:56:bb:38:40:74:87:bc:b8:bd:ae:d6:ab:
49:89:97:28:b2:f6:22:1e:e5:64:3d:0a:1f:4b:78:04:01:ed:
7b:32:49:2e:46:4f:a3:5e:86:a8:22:34:da:62:b3:0d:b8:34:
65:14:1c:90:a9:84:93:df:f3:a8:1b:66:29:20:8f:a9:f7:ef:
d9:29:d1:e4:89:e6:61:09:e9:51:b6:1e:d4:fc:4f:e3:d7:24:
82:7b:19:40:ef:e4:be:1b:ab:fb:86:75:b9:58:df:00:d0:9e:
2a:c2:d9:a8:f9:3c:52:de:0a:95:9e:8c:61:18:4e:46:c1:57:
35:61:2c:06:43:9d:d4:e6:6f:77:2e:1a:fd:f0:4b:4e:c9:b1:
61:95:f9:43:8e:1b:fe:3d:c9:39:4c:bf:59:22:e1:e7:4d:f3:
45:8b:b4:0c:3b:c4:0d:17:8b:47:f8:7d:50:73:a3:91:9f:2a:
d6:5a:d5:15:c5:57:0b:e9:22:1e:03:3a:c6:a5:3c:38:9e:4f:
5c:59:cd:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:11:59 2026 by rpki-client