Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/fZyAK4-7mQSEWnWBipSmG29XhLg.roa
File: fZyAK4-7mQSEWnWBipSmG29XhLg.roa (raw, json)
Hash identifier: VyEh3g7KQaKsqvuCH4j2Vw0hondgOxxQ+lgKbocRpTM=
Subject key identifier: 7D:9C:80:2B:8F:BB:99:04:84:5A:75:81:8A:94:A6:1B:6F:57:84:B8
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 019D1FF0A9D49C174E170744D842DF850294
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/fZyAK4-7mQSEWnWBipSmG29XhLg.roa
Signing time: Tue 24 Mar 2026 13:02:38 +0000
ROA not before: Tue 24 Mar 2026 13:02:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402047
IP address blocks: 87.76.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1f:f0:a9:d4:9c:17:4e:17:07:44:d8:42:df:85:02:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Mar 24 13:02:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7d9c802b8fbb9904845a75818a94a61b6f5784b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:24:31:cc:b9:48:76:90:dc:33:c8:8d:2c:55:
76:39:b4:32:99:ab:4f:02:4d:20:bc:2a:38:f6:ba:
9a:df:55:b2:8c:e2:a5:82:68:3c:c5:0c:87:3d:64:
c3:ea:5e:53:69:cf:f3:b8:10:b9:e4:fe:d8:3d:73:
5f:97:48:99:fd:c6:35:27:bd:06:e3:65:a0:bb:a6:
d7:45:65:3f:d2:14:73:f1:9b:6f:c2:7e:00:94:e9:
b1:2f:ab:70:aa:24:2d:1b:4d:22:15:49:e7:ac:60:
9b:d8:14:f0:8a:0e:02:5a:e7:c4:33:33:de:c8:34:
75:1f:31:31:4e:da:ed:98:d5:f6:75:bb:60:4e:af:
77:99:74:a0:75:20:ca:7c:7c:ff:cd:6b:47:e3:db:
0f:49:07:64:2e:db:a7:1c:f8:36:83:ee:4b:75:2d:
45:1a:02:10:20:de:5f:2b:a2:ff:ea:1c:68:d4:9d:
e8:0f:8b:64:50:50:1f:f5:f5:c7:e4:d4:32:4d:37:
02:05:c7:78:57:36:ca:59:fe:5e:38:39:96:f2:50:
6a:9e:83:d0:8f:42:9d:7a:65:e5:c1:71:3b:28:3a:
d6:d3:28:eb:8a:f7:8e:e8:5d:a6:08:9d:af:3b:d8:
2e:c7:6b:a5:c7:fb:ac:d0:f1:ae:93:d8:c5:c5:41:
49:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:9C:80:2B:8F:BB:99:04:84:5A:75:81:8A:94:A6:1B:6F:57:84:B8
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/fZyAK4-7mQSEWnWBipSmG29XhLg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.187.0/24
Signature Algorithm: sha256WithRSAEncryption
69:45:1c:75:22:5a:4f:76:0c:56:99:84:4f:f0:00:79:e0:53:
62:4f:e5:61:0e:71:f6:11:66:40:2d:6d:59:f7:63:d8:23:11:
95:61:73:f5:97:99:27:ca:12:7a:94:25:a8:0c:f8:f5:bd:b5:
be:13:13:fd:ce:88:21:52:17:af:f6:38:a1:6f:7c:3c:52:61:
3e:c0:f2:d8:65:26:85:a4:29:66:02:ec:41:34:9b:2b:44:30:
72:e2:5f:2b:cc:dd:e9:e4:53:80:b0:d0:90:4a:96:c2:48:39:
d4:80:47:85:a7:1a:ab:7a:62:e5:96:80:ed:23:39:53:9a:44:
61:fc:e1:d6:03:50:50:10:96:52:cb:fb:1d:0a:5a:ab:cb:b0:
96:0b:32:cf:f0:bc:7e:32:c9:d4:53:4f:af:d3:e0:c9:9d:be:
0d:b1:fa:40:71:b0:01:24:5e:be:14:a7:97:2e:31:4e:78:6e:
59:90:61:fa:5c:c2:71:17:36:95:d3:e4:0a:06:f3:9c:8a:0f:
56:2b:8e:ab:df:a2:0e:96:6f:d6:3b:d0:6b:38:3a:47:2c:8b:
5b:44:75:bd:ff:39:7f:53:50:50:db:c0:a2:53:db:7f:6a:70:
15:74:65:ea:40:c6:e2:36:84:7e:bc:0b:2a:b4:be:73:2b:a8:
16:07:df:a3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ0f8KnUnBdOFwdE2ELfhQKUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyMWYwY2JhMTBkYWEzMDJlM2IxNjdjZWU1Mzk1Zjc0MmY1
MzBiMDkwHhcNMjYwMzI0MTMwMjM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZDljODAyYjhmYmI5OTA0ODQ1YTc1ODE4YTk0YTYxYjZmNTc4NGI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSQxzLlIdpDcM8iNLFV2ObQymatP
Ak0gvCo49rqa31WyjOKlgmg8xQyHPWTD6l5Tac/zuBC55P7YPXNfl0iZ/cY1J70G
42Wgu6bXRWU/0hRz8Ztvwn4AlOmxL6twqiQtG00iFUnnrGCb2BTwig4CWufEMzPe
yDR1HzExTtrtmNX2dbtgTq93mXSgdSDKfHz/zWtH49sPSQdkLtunHPg2g+5LdS1F
GgIQIN5fK6L/6hxo1J3oD4tkUFAf9fXH5NQyTTcCBcd4VzbKWf5eODmW8lBqnoPQ
j0KdemXlwXE7KDrW0yjriveO6F2mCJ2vO9gux2ulx/us0PGuk9jFxUFJPQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH2cgCuPu5kEhFp1gYqUphtvV4S4MB8GA1UdIwQY
MBaAFFIfDLoQ2qMC47FnzuU5X3QvUwsJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWg4TXVoRGFvd0xqc1dmTzVUbGZkQzlUQ3drLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82OGNlMzYtNzRlNC00NDNiLWFlZjEt
M2JiOGIwNzVkNjlmLzEvZlp5QUs0LTdtUVNFV25XQmlwU21HMjlYaExnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82OGNlMzYtNzRlNC00NDNiLWFlZjEtM2JiOGIwNzVkNjlm
LzEvVWg4TXVoRGFvd0xqc1dmTzVUbGZkQzlUQ3drLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV0y7MA0G
CSqGSIb3DQEBCwUAA4IBAQBpRRx1IlpPdgxWmYRP8AB54FNiT+VhDnH2EWZALW1Z
92PYIxGVYXP1l5knyhJ6lCWoDPj1vbW+ExP9zoghUhev9jihb3w8UmE+wPLYZSaF
pClmAuxBNJsrRDBy4l8rzN3p5FOAsNCQSpbCSDnUgEeFpxqremLlloDtIzlTmkRh
/OHWA1BQEJZSy/sdClqry7CWCzLP8Lx+MsnUU0+v0+DJnb4NsfpAcbABJF6+FKeX
LjFOeG5ZkGH6XMJxFzaV0+QKBvOcig9WK46r36IOlm/WO9BrODpHLItbRHW9/zl/
U1BQ28CiU9t/anAVdGXqQMbiNoR+vAsqtL5zK6gWB9+j
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:10:42 2026 by rpki-client