Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/kV8P8ynEQTVEFFz772DXANfH9wE.roa
File: kV8P8ynEQTVEFFz772DXANfH9wE.roa (raw, json)
Hash identifier: GagDCXqiiNUS8Koslq7+Db6+RK5vDbbR8AEJmdY8r4I=
Subject key identifier: 91:5F:0F:F3:29:C4:41:35:44:14:5C:FB:EF:60:D7:00:D7:C7:F7:01
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 01A181E87DC2B2276327BB76A4FD559C7469
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/kV8P8ynEQTVEFFz772DXANfH9wE.roa
Signing time: Wed 28 Oct 2026 09:47:39 +0000
ROA not before: Wed 28 Oct 2026 09:47:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 134494
IP address blocks: 87.76.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:e8:7d:c2:b2:27:63:27:bb:76:a4:fd:55:9c:74:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Oct 28 09:47:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=915f0ff329c4413544145cfbef60d700d7c7f701
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:fd:f1:12:9b:f4:bd:c8:c9:56:2d:99:db:b3:
83:4b:86:6f:9f:32:fa:1a:cf:55:2c:d2:76:82:14:
f5:ed:3c:9a:45:79:bf:85:ea:e3:ba:fb:2a:6d:9b:
00:c9:a0:6a:8f:b7:1e:d1:ec:f0:6b:ed:28:63:c6:
b5:5c:5e:23:51:c0:f2:5d:3f:99:ee:04:89:17:11:
67:21:1a:cf:d0:99:07:e9:1f:9d:d4:e3:4e:8c:af:
2f:aa:af:df:35:0a:2c:95:5d:b5:db:81:5d:bf:b7:
e2:85:74:a1:69:4c:cd:5f:09:45:12:63:b1:1a:b6:
7c:00:ca:a9:26:ef:09:5b:b2:ce:5e:5e:f5:1c:f3:
6f:7f:95:f6:37:2b:72:75:0b:c7:9b:f1:1a:4f:1a:
ce:8e:b9:28:8d:55:3e:5c:6e:c0:9d:2d:13:73:99:
85:ce:bc:6d:76:77:fb:a3:74:93:b5:e4:41:65:e6:
8e:45:ff:e2:bc:b5:5f:a4:89:74:c1:b8:13:e6:a8:
e0:37:aa:6f:e8:9e:89:2d:43:fd:3a:34:96:d2:1c:
70:ed:98:c7:ab:a0:06:8c:2f:71:c1:0d:54:eb:14:
7a:0e:fa:39:66:bb:77:5e:81:e3:0e:fc:55:19:18:
83:9f:54:53:ec:e1:09:2f:80:65:d3:2f:05:a1:f3:
fe:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:5F:0F:F3:29:C4:41:35:44:14:5C:FB:EF:60:D7:00:D7:C7:F7:01
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/kV8P8ynEQTVEFFz772DXANfH9wE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.144.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:33:36:ae:56:16:d7:41:17:13:2b:97:c1:65:37:02:f9:38:
33:ed:a4:ed:c5:ea:6d:0a:7b:6b:9f:a3:68:d3:4f:d6:46:90:
d7:ca:b3:fd:78:07:e6:e5:76:18:51:39:83:b0:06:0a:0e:e0:
c2:7d:69:d1:32:df:80:1a:65:d8:8a:1e:e0:63:4f:23:b4:92:
a8:ae:3f:db:d6:87:17:df:4a:1e:db:b7:23:d4:7e:45:bb:f6:
27:3b:4b:55:7d:9f:8b:7d:19:26:09:9e:91:11:a1:77:8a:b5:
87:2f:2e:d8:ac:43:8a:2e:46:d0:57:a2:f0:04:b6:15:ad:36:
7d:12:2c:23:6c:15:32:e4:e2:69:78:5f:bf:78:ce:ec:bf:b8:
20:18:6e:75:52:a2:98:63:02:b8:9b:be:8d:35:96:1d:1d:04:
c9:94:71:84:f0:d5:84:1d:4c:4f:a5:bf:a3:80:1c:72:bb:9f:
11:5b:8d:38:b6:96:8e:09:02:27:00:e1:08:95:fc:47:52:ec:
11:2a:d8:1b:7e:90:a8:85:62:fb:6c:48:0c:63:d2:65:6b:78:
f0:63:2b:6a:d4:46:bd:8a:7c:bb:35:20:86:90:51:a8:38:0a:
ea:44:04:bf:9e:be:33:10:29:55:47:da:5c:c6:e0:f7:2f:96:
36:97:6c:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:32:43 2026 by rpki-client