Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/eLeqe7_YpZFz_8QwJKi3Unc8HqQ.roa
File: eLeqe7_YpZFz_8QwJKi3Unc8HqQ.roa (raw, json)
Hash identifier: US9Oa3u4UtqaGF2sA8nZWPbipyXsj6nuL34f5I+dpv0=
Subject key identifier: 78:B7:AA:7B:BF:D8:A5:91:73:FF:C4:30:24:A8:B7:52:77:3C:1E:A4
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 019CD975EFF854AA005AB485CAF1A72B9A44
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/eLeqe7_YpZFz_8QwJKi3Unc8HqQ.roa
Signing time: Tue 10 Mar 2026 20:35:10 +0000
ROA not before: Tue 10 Mar 2026 20:35:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 272524
IP address blocks: 87.76.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d9:75:ef:f8:54:aa:00:5a:b4:85:ca:f1:a7:2b:9a:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Mar 10 20:35:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=78b7aa7bbfd8a59173ffc43024a8b752773c1ea4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fa:6d:33:bb:8d:1d:d3:d2:84:ab:1a:22:21:
32:b1:e2:ef:6d:a2:3a:d1:e6:83:dd:2c:fd:c9:53:
fa:77:ec:a1:ea:de:02:88:ca:2d:d7:3b:d6:58:dd:
9a:03:5a:38:47:01:48:7f:9d:a6:01:16:f4:20:e7:
cb:40:3d:ff:e3:d8:b9:0b:56:56:3f:ef:6e:3e:ee:
ff:a1:65:71:a9:fb:7d:0d:35:32:40:b8:27:b8:59:
8f:6e:e2:3e:5d:19:74:53:be:82:b0:4f:4c:a5:9f:
53:17:92:3c:df:c8:8e:2f:d4:8d:84:b3:b2:e5:c7:
e1:7f:f1:9a:ff:c0:f4:c8:c3:c7:34:ff:c4:04:f1:
24:44:79:40:a8:33:c4:46:86:d4:d2:20:74:f5:e1:
10:52:c8:ab:f8:e4:31:ff:3b:79:c5:2e:c2:67:2f:
df:d2:1a:5b:af:e3:12:fb:09:ae:99:f9:79:2f:f6:
8d:a7:ea:0c:90:aa:6c:30:81:9c:f7:7d:cd:4e:15:
de:d6:cb:c6:d1:cd:7f:ee:3f:e7:06:37:96:75:40:
7b:12:27:4f:14:ea:35:e4:83:f3:8d:4a:e3:63:92:
85:a3:b6:76:96:35:a3:05:5c:88:7e:9c:1d:8c:c1:
54:16:17:c7:b4:b4:19:5f:9d:c9:76:03:8a:77:e4:
6a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:B7:AA:7B:BF:D8:A5:91:73:FF:C4:30:24:A8:B7:52:77:3C:1E:A4
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/eLeqe7_YpZFz_8QwJKi3Unc8HqQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.204.0/24
Signature Algorithm: sha256WithRSAEncryption
89:3b:cf:c0:7a:00:43:00:9d:26:d2:86:e2:3a:50:72:10:ee:
fa:68:af:b2:16:bb:b3:ee:7e:fb:e4:6b:94:60:25:84:12:52:
30:cd:1e:c9:02:f0:af:6f:18:75:38:dd:ce:18:d3:e2:1d:06:
55:c9:0b:02:bf:85:89:92:19:31:2b:a4:da:a4:55:a8:26:e3:
0c:65:d8:42:55:8e:56:fd:02:8d:78:84:57:93:a4:cc:2a:d0:
1b:1e:67:cd:c9:71:cb:e8:0e:ab:a1:7a:6f:ca:c8:75:1a:bd:
35:f1:95:7b:c8:76:24:48:23:bb:51:89:e9:dc:15:ad:af:fa:
80:ad:e0:4c:18:65:4b:63:ad:fb:18:69:aa:3b:ab:d2:ff:88:
ab:bc:ae:53:92:44:99:d7:b1:cd:c0:88:d3:a6:f2:1a:41:1d:
9b:e4:13:99:6d:a8:6e:73:e2:5a:3f:57:73:9f:c7:b9:a5:b8:
86:19:03:1e:e4:c9:b5:63:b3:bf:68:bf:34:26:14:63:be:9a:
69:55:27:6f:ed:f8:2b:d6:1a:d4:34:6c:54:a3:7c:14:f7:a6:
ca:e9:f3:e0:fd:76:c5:66:d7:5a:3a:85:de:4d:ac:9f:31:b5:
b3:9c:24:78:07:e3:2b:a7:fe:2c:66:72:0d:66:e5:6b:fc:bf:
fe:0e:6e:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:48:12 2026 by rpki-client