Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/gQWGyIZoZwBBRCaHOpnA4s1PFK0.roa
File: gQWGyIZoZwBBRCaHOpnA4s1PFK0.roa (raw, json)
Hash identifier: PsU55lQjR+ZPtUxXH0qMW6J5RZfPVGGea/JdpTz/Gas=
Subject key identifier: 81:05:86:C8:86:68:67:00:41:44:26:87:3A:99:C0:E2:CD:4F:14:AD
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 019CAE1B3E69829E0A154F3FC1E0965DCACD
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/gQWGyIZoZwBBRCaHOpnA4s1PFK0.roa
Signing time: Mon 02 Mar 2026 10:32:26 +0000
ROA not before: Mon 02 Mar 2026 10:32:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29491
IP address blocks: 87.76.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:1b:3e:69:82:9e:0a:15:4f:3f:c1:e0:96:5d:ca:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Mar 2 10:32:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=810586c886686700414426873a99c0e2cd4f14ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:cd:6c:b1:76:f4:2d:14:47:da:41:3a:13:54:
ce:5f:3c:2b:9e:48:de:35:e7:17:8c:f9:b6:96:70:
31:cb:a1:5e:aa:84:5b:eb:07:e8:20:80:c9:12:dd:
73:2e:ab:52:c7:6e:9a:a9:1c:e1:3f:a8:5c:5b:60:
c1:32:49:d9:70:9e:a7:3d:5c:81:42:2b:77:14:27:
7c:7f:cc:50:af:0a:1c:c1:b4:aa:12:e2:49:b5:a4:
1c:b3:87:a3:91:65:90:88:c3:b4:46:93:e7:40:e5:
8a:eb:42:2b:27:93:a2:cd:4b:9c:04:da:c0:57:52:
8c:f9:7e:67:be:0f:ee:18:ee:7d:b5:7b:50:48:44:
ae:ac:25:47:1c:9b:b0:a7:aa:17:bd:b6:59:04:89:
44:2a:ed:5e:7c:83:36:3e:99:a4:25:a4:e8:00:22:
5b:48:04:5f:d2:8a:67:4d:ed:0e:d6:f9:ad:87:09:
20:5c:2f:56:97:84:c0:7c:e4:ac:24:29:1a:3d:36:
47:79:8e:1b:22:da:14:1a:a7:c8:0e:7d:43:7d:59:
c7:0b:81:57:c6:c4:00:fc:27:ce:f2:4b:c2:81:7b:
a1:97:fb:ba:81:a0:09:7d:07:7f:fd:fa:01:7c:ce:
33:ac:e1:6d:de:3a:52:1a:3c:aa:62:a0:ad:e7:74:
e3:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:05:86:C8:86:68:67:00:41:44:26:87:3A:99:C0:E2:CD:4F:14:AD
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/gQWGyIZoZwBBRCaHOpnA4s1PFK0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.194.0/24
Signature Algorithm: sha256WithRSAEncryption
60:51:ba:f8:8f:df:e7:62:03:a7:1b:64:65:4d:ce:0c:b7:ba:
93:43:d0:a4:35:c1:ab:18:41:b6:53:20:e4:48:98:f3:ae:35:
eb:94:3a:77:a3:3d:64:4e:b0:1c:4d:9f:ff:4d:c9:b8:54:60:
99:75:d0:4c:5e:88:58:05:4d:65:a8:d0:e1:c3:96:45:f3:32:
99:a3:93:ae:30:c9:5a:43:61:15:b0:ab:a1:67:22:c0:1e:1f:
6c:61:d6:e5:ff:e2:cf:74:68:a4:97:1a:5a:ca:8f:b7:99:7d:
51:b3:a0:63:18:df:7c:20:34:04:dd:7f:72:30:2f:6a:3b:d3:
64:ef:a8:9b:be:01:c6:d2:85:10:0a:97:4f:17:b1:56:5a:56:
48:c9:5f:49:fd:ee:7f:e8:76:f7:3c:b3:7a:fa:11:c4:73:ed:
b8:2b:ad:8a:b7:6c:7e:e6:9d:74:f4:61:2e:f8:87:4e:30:9c:
30:ac:c7:88:4b:58:a4:36:20:d0:b6:a4:98:6e:c6:16:0e:5c:
da:21:ea:ab:d5:2f:2d:28:81:38:cd:c2:83:ff:ce:b2:e5:a7:
da:2c:0c:54:ad:b2:c8:90:f1:fd:33:da:99:48:bf:42:1f:5e:
d1:38:6e:59:cb:57:30:10:1c:bb:52:37:b2:1d:c2:97:80:4f:
35:80:60:3d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZyuGz5pgp4KFU8/weCWXcrNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyMWYwY2JhMTBkYWEzMDJlM2IxNjdjZWU1Mzk1Zjc0MmY1
MzBiMDkwHhcNMjYwMzAyMTAzMjI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MTA1ODZjODg2Njg2NzAwNDE0NDI2ODczYTk5YzBlMmNkNGYxNGFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx81ssXb0LRRH2kE6E1TOXzwrnkje
NecXjPm2lnAxy6FeqoRb6wfoIIDJEt1zLqtSx26aqRzhP6hcW2DBMknZcJ6nPVyB
Qit3FCd8f8xQrwocwbSqEuJJtaQcs4ejkWWQiMO0RpPnQOWK60IrJ5OizUucBNrA
V1KM+X5nvg/uGO59tXtQSESurCVHHJuwp6oXvbZZBIlEKu1efIM2PpmkJaToACJb
SARf0opnTe0O1vmthwkgXC9Wl4TAfOSsJCkaPTZHeY4bItoUGqfIDn1DfVnHC4FX
xsQA/CfO8kvCgXuhl/u6gaAJfQd//foBfM4zrOFt3jpSGjyqYqCt53TjeQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIEFhsiGaGcAQUQmhzqZwOLNTxStMB8GA1UdIwQY
MBaAFFIfDLoQ2qMC47FnzuU5X3QvUwsJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWg4TXVoRGFvd0xqc1dmTzVUbGZkQzlUQ3drLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82OGNlMzYtNzRlNC00NDNiLWFlZjEt
M2JiOGIwNzVkNjlmLzEvZ1FXR3lJWm9ad0JCUkNhSE9wbkE0czFQRkswLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82OGNlMzYtNzRlNC00NDNiLWFlZjEtM2JiOGIwNzVkNjlm
LzEvVWg4TXVoRGFvd0xqc1dmTzVUbGZkQzlUQ3drLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV0zCMA0G
CSqGSIb3DQEBCwUAA4IBAQBgUbr4j9/nYgOnG2RlTc4Mt7qTQ9CkNcGrGEG2UyDk
SJjzrjXrlDp3oz1kTrAcTZ//Tcm4VGCZddBMXohYBU1lqNDhw5ZF8zKZo5OuMMla
Q2EVsKuhZyLAHh9sYdbl/+LPdGiklxpayo+3mX1Rs6BjGN98IDQE3X9yMC9qO9Nk
76ibvgHG0oUQCpdPF7FWWlZIyV9J/e5/6Hb3PLN6+hHEc+24K62Kt2x+5p109GEu
+IdOMJwwrMeIS1ikNiDQtqSYbsYWDlzaIeqr1S8tKIE4zcKD/86y5afaLAxUrbLI
kPH9M9qZSL9CH17ROG5Zy1cwEBy7UjeyHcKXgE81gGA9
-----END CERTIFICATE-----
Generated at Thu Mar 26 01:48:10 2026 by rpki-client