Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/jyEP4kRZJJBJbHeNNqKh3KxLdoQ.roa
File: jyEP4kRZJJBJbHeNNqKh3KxLdoQ.roa (raw, json)
Hash identifier: LDR2C8R+QlmzDqxhEa0nQjAnEJy2OwZfZjsiygWIHj8=
Subject key identifier: 8F:21:0F:E2:44:59:24:90:49:6C:77:8D:36:A2:A1:DC:AC:4B:76:84
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 019F3CDED3F492C9F1CB0022B42C9EFB33E7
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/jyEP4kRZJJBJbHeNNqKh3KxLdoQ.roa
Signing time: Tue 07 Jul 2026 13:57:44 +0000
ROA not before: Tue 07 Jul 2026 13:57:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201667
IP address blocks: 87.76.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3c:de:d3:f4:92:c9:f1:cb:00:22:b4:2c:9e:fb:33:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Jul 7 13:57:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8f210fe244592490496c778d36a2a1dcac4b7684
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0b:83:e4:1f:d5:45:9d:19:c5:25:80:01:35:
86:9e:47:93:00:fd:45:fd:ce:2c:86:38:64:79:a0:
74:45:3e:05:3f:9d:0e:6e:5a:04:21:d1:21:37:fe:
47:be:40:b7:ea:a2:c2:25:03:65:94:eb:4d:66:2b:
64:62:e7:43:99:4f:a4:80:c1:c0:55:00:fa:54:11:
83:3c:7f:5c:42:a9:d9:e3:b8:93:f9:c4:95:31:d5:
c5:7b:45:45:a3:1c:40:04:3a:51:f5:1c:58:49:7a:
84:c4:0b:d7:bd:ee:a6:d7:52:9a:f3:82:f4:60:0b:
a8:50:37:9e:d2:c5:ba:b4:bf:a6:85:32:5a:c2:27:
64:51:14:cd:96:0f:7b:86:9d:f3:c6:9a:68:ed:51:
64:16:79:af:7e:30:1b:f6:e8:8a:63:ec:d2:04:e4:
b4:16:77:d8:de:30:3c:51:74:7f:02:ff:62:05:55:
81:79:5f:97:e7:f8:27:b2:77:d2:e6:7b:5a:58:24:
ab:67:cd:40:14:8b:a2:cd:e6:97:b8:4c:86:0f:bd:
52:50:47:04:61:1c:a2:31:04:39:b1:06:2e:ca:8f:
a9:18:c3:08:e6:cc:4d:c4:bd:37:36:e7:e3:63:81:
cc:94:fc:42:01:29:fd:6d:88:8a:c3:a5:ec:3b:f2:
be:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:21:0F:E2:44:59:24:90:49:6C:77:8D:36:A2:A1:DC:AC:4B:76:84
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/jyEP4kRZJJBJbHeNNqKh3KxLdoQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.190.0/24
Signature Algorithm: sha256WithRSAEncryption
25:6d:09:0f:28:87:cf:03:13:bd:e9:a7:c1:22:a4:1a:e1:5b:
00:57:de:02:bc:7b:b4:7b:c3:a6:05:99:fb:1a:59:7a:f9:85:
59:07:b6:9a:c0:1f:7f:8a:02:7b:66:01:2a:76:dc:04:60:ef:
a8:cf:a1:ec:6e:75:33:bd:a0:49:58:af:db:75:b9:53:bc:d2:
97:fe:64:be:65:64:14:a1:47:f1:52:46:47:33:5a:4c:b3:c1:
9d:53:30:79:87:07:ad:7e:c2:e7:c8:89:6c:a9:3f:e8:5d:bd:
47:3a:00:b4:8d:2a:44:c8:00:55:d8:1f:1a:0b:64:c7:7c:fc:
4f:88:7d:ed:8c:32:6a:66:07:76:06:df:43:38:5f:01:10:64:
f0:74:48:b7:0e:04:24:f2:f7:2d:04:df:49:b3:81:dc:b6:6c:
9f:16:dd:d8:01:98:d8:cd:a7:5d:e9:80:ec:34:b0:9b:bc:be:
0f:9c:95:d8:96:1a:7d:11:b2:15:87:ac:f5:b1:e0:37:62:34:
46:d5:a6:ef:6c:42:8b:f8:ca:42:12:ce:9e:e6:e5:81:c2:29:
5a:99:47:db:66:d0:46:36:2a:e7:ff:0f:8c:76:01:7d:5d:7a:
d8:1d:a3:22:f9:dc:4f:26:01:c3:3d:6e:f6:78:fc:02:cd:35:
e2:6f:17:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:25:27 2026 by rpki-client