Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/j8Vo_gxel-Ewo2ujFF8Zxs5sREU.roa
File: j8Vo_gxel-Ewo2ujFF8Zxs5sREU.roa (raw, json)
Hash identifier: lt8+xJCa1ci7z9cXseSO2uOFM/wcMgTvb27aCh6JHtw=
Subject key identifier: 8F:C5:68:FE:0C:5E:97:E1:30:A3:6B:A3:14:5F:19:C6:CE:6C:44:45
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 019DFC7B4CE54F765A9701820091A1E27967
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/j8Vo_gxel-Ewo2ujFF8Zxs5sREU.roa
Signing time: Wed 06 May 2026 08:50:32 +0000
ROA not before: Wed 06 May 2026 08:50:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 153671
IP address blocks: 87.76.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:fc:7b:4c:e5:4f:76:5a:97:01:82:00:91:a1:e2:79:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: May 6 08:50:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8fc568fe0c5e97e130a36ba3145f19c6ce6c4445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:26:5a:61:60:cc:e2:cb:26:e0:aa:79:13:6d:
3e:62:d0:98:00:44:30:8b:0e:23:23:a6:75:70:52:
fa:91:74:2e:d7:06:c4:e2:d3:41:1e:53:10:15:fa:
cc:5c:2f:c0:bb:a7:09:d3:4c:96:62:94:56:0f:87:
17:ef:f8:02:d8:09:91:cd:8b:77:83:b9:6d:47:e2:
88:b4:06:ad:58:1d:9d:f0:69:e8:14:00:87:de:8e:
4d:ca:ff:7b:11:10:b9:ab:e7:d9:17:e7:10:28:18:
40:e4:25:14:e9:87:ed:97:66:c2:c0:12:26:d1:c2:
60:71:20:08:d3:5e:33:99:5a:02:20:62:c2:a9:cf:
a3:05:54:c3:08:14:5c:a8:fe:48:4f:95:71:af:2c:
31:ac:83:75:0a:e6:cb:31:ac:9a:2e:a4:d3:79:0b:
2c:1e:df:88:9f:fe:84:4f:e4:28:0f:78:fa:84:9e:
38:1e:2a:74:db:14:80:96:70:31:01:70:b7:8c:7e:
de:f2:28:a7:d3:75:7f:fe:f7:20:ea:be:e2:4f:b5:
81:eb:12:8a:02:f2:e2:f7:d2:43:a6:fe:90:b9:4e:
4a:44:46:64:09:10:04:17:9f:da:a1:39:9d:85:ad:
38:84:be:1c:79:9f:b3:e5:18:0c:85:c0:9b:7e:58:
29:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:C5:68:FE:0C:5E:97:E1:30:A3:6B:A3:14:5F:19:C6:CE:6C:44:45
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/j8Vo_gxel-Ewo2ujFF8Zxs5sREU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.146.0/24
Signature Algorithm: sha256WithRSAEncryption
74:08:de:00:b0:a8:20:86:34:bb:20:5b:d5:1f:6d:0e:cc:75:
2b:26:e8:48:15:a3:b7:0d:24:ba:dc:85:a9:ea:4e:42:b5:7a:
5b:5c:3c:41:84:84:3c:8c:e6:1a:cb:94:4b:44:6d:9a:26:2b:
32:7a:d0:da:49:9e:51:9c:e1:ca:e6:bd:22:c3:30:c3:d7:f7:
11:33:b9:3e:b1:97:d0:06:bb:9a:48:e1:5e:98:68:b8:20:09:
c7:b4:0e:64:ef:ab:cf:2c:db:3d:3f:2d:7b:5c:f6:8d:fc:d8:
12:a7:95:ac:67:6d:6b:c1:f0:7b:e9:fd:3a:77:9b:93:51:9d:
13:e1:5a:6e:cc:e0:06:ab:3b:b0:c1:60:bc:d7:29:af:9d:98:
52:04:23:e0:ce:5a:06:9b:87:ff:39:bb:62:ee:d2:3f:5c:e3:
59:55:b1:07:71:c5:c3:33:33:04:d3:f6:ef:27:f7:d6:23:4b:
c6:b3:88:82:5a:56:2c:ed:d9:70:ca:b7:46:85:6e:b4:fb:ad:
04:05:eb:07:e8:6a:18:f5:79:84:20:23:06:38:d9:dc:2a:b6:
6f:e7:93:c0:e9:bf:15:c7:06:e4:0e:f7:48:be:d2:c5:19:b1:
b7:64:66:2c:81:5d:aa:be:bb:1b:8e:87:6e:30:37:9e:87:9d:
62:77:b3:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:57:59 2026 by rpki-client