Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/knHvp7T0PTkmp3itmNgVURJWUKg.roa
File: knHvp7T0PTkmp3itmNgVURJWUKg.roa (raw, json)
Hash identifier: j/om8kmoMJeEk/q4nLoPFNFzf9QICn5A86Q1v65SsRg=
Subject key identifier: 92:71:EF:A7:B4:F4:3D:39:26:A7:78:AD:98:D8:15:51:12:56:50:A8
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 019F84CB769C3074D8626C1270267281059D
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/knHvp7T0PTkmp3itmNgVURJWUKg.roa
Signing time: Tue 21 Jul 2026 13:09:14 +0000
ROA not before: Tue 21 Jul 2026 13:09:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211859
IP address blocks: 87.76.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:cb:76:9c:30:74:d8:62:6c:12:70:26:72:81:05:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Jul 21 13:09:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9271efa7b4f43d3926a778ad98d81551125650a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ac:6f:39:a8:d8:2d:c7:a8:1f:e2:99:08:0c:
b8:98:4e:8d:b0:fa:68:6b:eb:4a:59:aa:16:74:bf:
ec:40:d6:e8:cc:76:34:d0:c2:7c:72:f9:7f:49:12:
81:47:12:2a:a3:12:45:eb:fa:69:a1:e3:10:fd:2f:
15:7f:71:0d:c3:0c:33:2d:62:44:f5:d6:6d:af:be:
e9:29:4a:dd:34:09:f7:0c:86:d2:ff:d1:7c:bd:d9:
81:76:7a:b4:31:90:58:d7:fe:c9:63:5d:dc:33:37:
87:89:7b:e0:90:b6:51:9b:13:96:11:d6:66:23:d8:
6f:ad:9e:b4:a6:02:0f:fc:07:70:d4:94:c9:4b:6b:
03:f3:1b:64:a1:ac:fc:e7:fd:38:bd:7a:c7:92:ad:
85:73:1a:d5:91:31:5b:6a:36:71:c3:cf:49:8a:21:
b7:14:e8:c1:55:8b:3a:66:bf:d8:57:49:80:29:b1:
a9:54:bd:15:94:dd:4c:95:db:f1:71:26:20:03:b0:
15:85:4b:9b:58:45:42:dc:45:c7:ab:a5:a2:bd:73:
77:35:89:a9:a9:a9:51:ae:12:d7:81:c3:a0:70:c1:
c3:3a:ec:c8:9c:3c:37:79:0a:7e:0c:dc:85:00:d4:
b2:28:72:e5:e0:08:ef:0b:a5:cb:e4:10:28:27:18:
8d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:71:EF:A7:B4:F4:3D:39:26:A7:78:AD:98:D8:15:51:12:56:50:A8
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/knHvp7T0PTkmp3itmNgVURJWUKg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.195.0/24
Signature Algorithm: sha256WithRSAEncryption
82:c8:d5:a1:23:f5:3c:ea:f5:14:3b:b0:56:e6:3a:c4:fb:28:
89:bd:21:c6:30:62:28:b1:5c:e6:a8:4f:3d:38:05:e7:dd:ca:
2b:fc:58:93:9d:5d:38:3c:da:78:a0:70:c6:68:dc:51:74:5d:
f5:7d:e1:56:9b:e6:97:89:1c:cf:35:21:2c:dc:1c:da:44:fb:
7b:f2:75:47:36:07:d3:51:cc:14:b4:ef:d8:95:cf:76:6e:84:
17:02:05:b2:40:9c:bc:23:95:20:b2:d3:c0:ca:86:c0:97:b9:
5c:08:af:ee:94:28:0b:8f:a2:e8:fc:63:12:93:32:48:0f:4a:
d3:6c:95:ff:e3:75:42:7f:b8:65:e9:6f:0e:cf:a8:16:9e:e2:
04:59:f6:9d:86:5a:56:94:49:d1:35:d9:c2:ce:bc:e8:24:e0:
f8:74:1a:ad:fb:4f:f0:dd:13:0f:21:50:34:63:c5:1c:ac:96:
a7:69:9c:e4:af:22:8f:9e:c2:cb:09:87:7e:4c:1e:4f:75:50:
7b:d7:9c:41:1a:72:df:d0:c1:79:c3:88:03:dd:72:63:39:6c:
0d:1d:35:33:16:27:54:b3:e4:9b:ac:74:c5:c7:5b:1a:33:b6:
ac:c3:73:22:5a:f5:b8:bf:7c:b7:80:8d:66:e5:9f:d7:15:ff:
0e:d6:fb:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:42:36 2026 by rpki-client