Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/kNLGNQYYVKNNtz4NPXzfNfaO2yA.roa
File: kNLGNQYYVKNNtz4NPXzfNfaO2yA.roa (raw, json)
Hash identifier: VJmnS5B5bfBOwQGEw3DwSY9zU3wS19eOtw0ATx1JGzk=
Subject key identifier: 90:D2:C6:35:06:18:54:A3:4D:B7:3E:0D:3D:7C:DF:35:F6:8E:DB:20
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 019CF7B3ECC4ECD6D52ECC5B6FEB6A5FC285
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/kNLGNQYYVKNNtz4NPXzfNfaO2yA.roa
Signing time: Mon 16 Mar 2026 17:31:29 +0000
ROA not before: Mon 16 Mar 2026 17:31:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207267
IP address blocks: 87.76.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f7:b3:ec:c4:ec:d6:d5:2e:cc:5b:6f:eb:6a:5f:c2:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Mar 16 17:31:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=90d2c635061854a34db73e0d3d7cdf35f68edb20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f3:cd:73:52:c8:86:5f:af:a1:ef:3b:cf:10:
11:1c:11:86:d4:75:83:cb:b9:42:2f:89:4d:76:c0:
85:ed:c7:91:6d:18:ca:a7:d9:71:66:80:c3:a9:cd:
19:dc:17:13:10:4a:86:0a:3f:f2:05:8e:28:73:d9:
ac:a5:c1:48:ce:6e:cc:39:55:03:1d:fc:85:5d:19:
fc:13:c2:48:3c:61:d8:29:de:5c:b7:29:1c:02:f4:
b2:1a:59:e9:38:c8:2b:f4:ad:74:40:21:1a:5c:96:
7a:06:79:c3:f5:9f:e1:a5:23:1e:aa:6c:60:9c:25:
fd:a4:83:3b:2e:55:01:3f:61:db:68:24:74:99:40:
47:b7:bd:b4:ec:cf:f3:40:0a:f1:d8:f2:80:6e:62:
1e:d4:ac:4c:c8:3e:cf:59:7e:76:18:26:d3:78:01:
f2:a2:26:02:32:fb:06:3d:4f:86:82:ed:31:69:24:
8f:67:f0:17:95:af:11:23:02:e9:b7:60:a7:bc:a6:
7a:37:73:4b:72:cb:25:df:ec:69:97:dd:56:93:22:
1d:3c:d9:d5:45:df:93:1e:e3:34:48:bb:20:f2:5d:
81:4d:47:60:6e:66:95:fa:32:8f:47:76:bc:b3:8f:
97:00:9b:36:2c:70:b9:1e:47:ba:e9:de:bf:99:96:
4f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:D2:C6:35:06:18:54:A3:4D:B7:3E:0D:3D:7C:DF:35:F6:8E:DB:20
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/kNLGNQYYVKNNtz4NPXzfNfaO2yA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.207.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:3f:20:96:20:38:ae:5c:d6:53:26:40:0d:82:e3:34:ec:0e:
61:87:c7:49:5a:f4:32:0e:d8:24:e2:f0:84:ed:ae:83:6d:57:
1d:0e:d1:f2:0c:31:99:85:56:00:e1:be:44:88:49:fe:b5:be:
2a:4b:5d:27:95:df:86:6a:71:83:27:c8:c6:36:a0:0c:66:a0:
32:de:e9:62:e2:92:bc:08:f5:e3:a5:28:42:d9:08:c4:90:f7:
99:22:bf:48:7d:a0:87:70:e5:8d:32:9d:f9:3d:48:a5:ba:01:
b9:67:d3:27:58:64:bc:83:2f:f8:fc:10:a7:d8:29:b7:2a:3e:
3d:b6:42:aa:74:86:1f:20:4f:e1:ac:ba:44:c2:65:e3:2b:c0:
4e:8e:fc:cc:87:54:d8:73:f2:62:15:85:3f:98:f2:62:e6:b8:
89:2a:b1:fe:6d:85:be:d5:1b:64:0f:5d:71:d8:78:90:72:00:
09:66:79:b9:a7:98:19:4f:e8:06:dc:27:c0:61:38:69:e9:37:
06:c7:0c:ca:fe:96:1e:d2:61:c3:61:a9:da:02:51:0b:ae:ff:
98:f3:47:50:9d:8a:1a:01:d2:98:f6:ae:7e:04:58:e3:86:c8:
ac:16:e3:c7:39:24:b3:f7:64:2c:6f:d0:30:51:c0:ba:6a:1d:
f4:12:03:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:12:05 2026 by rpki-client