Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/lRnf8za-646WfhzHp7cvc83ClHA.roa
File: lRnf8za-646WfhzHp7cvc83ClHA.roa (raw, json)
Hash identifier: KL2Lu4IT9kJSPWEC8nxIaENmSPxjXunSgEsWOPxfW7A=
Subject key identifier: 95:19:DF:F3:36:BE:EB:8E:96:7E:1C:C7:A7:B7:2F:73:CD:C2:94:70
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 019F46E25004BA34EABF36185BA9588E456B
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/lRnf8za-646WfhzHp7cvc83ClHA.roa
Signing time: Thu 09 Jul 2026 12:37:44 +0000
ROA not before: Thu 09 Jul 2026 12:37:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 87.76.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:57:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:46:e2:50:04:ba:34:ea:bf:36:18:5b:a9:58:8e:45:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Jul 9 12:37:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9519dff336beeb8e967e1cc7a7b72f73cdc29470
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:35:2a:43:27:7d:3b:a4:c6:c0:32:df:d0:da:
9c:04:dc:3d:75:fa:7f:51:22:73:1e:89:05:ab:a3:
8f:70:37:14:f4:b6:c1:44:3d:bd:cd:4b:71:c2:b4:
87:b5:89:33:72:7a:a9:4a:3a:12:37:ac:d6:ae:32:
90:8e:ec:01:6c:89:10:44:e1:92:da:45:14:6a:e8:
58:ef:3b:d1:c5:3a:aa:9a:ba:c8:7c:b1:b4:c7:73:
62:0f:3b:46:9d:8e:48:95:4d:de:35:79:b1:99:c1:
ae:54:13:76:5e:a6:80:57:6d:e4:d3:31:70:4b:c9:
24:79:27:a9:8f:2e:2f:7d:1e:ad:9d:c2:ef:41:cb:
3e:77:0f:fd:7d:35:9d:3e:7b:58:92:af:e9:07:e7:
85:50:e8:8a:d0:49:3f:ef:06:c8:57:df:5d:a3:b3:
0b:9b:a0:87:31:f8:03:07:be:8c:9d:07:59:ec:2e:
28:b1:6a:71:8e:54:0f:c7:c5:86:0f:4e:c5:5b:00:
91:9b:7a:45:ba:af:0b:47:a5:d4:6c:10:ab:12:e9:
4d:21:9b:fb:92:7e:91:b8:12:7e:bf:3c:33:fa:53:
ec:b2:bc:fc:9a:0c:7b:a1:e1:18:29:28:4a:29:9a:
2d:e8:86:b8:e8:ef:bf:1d:6d:85:57:7e:d2:fa:37:
af:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:19:DF:F3:36:BE:EB:8E:96:7E:1C:C7:A7:B7:2F:73:CD:C2:94:70
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/lRnf8za-646WfhzHp7cvc83ClHA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.171.0/24
Signature Algorithm: sha256WithRSAEncryption
02:d5:fe:54:69:8e:dd:7a:f7:ca:be:4e:1f:7d:78:55:5a:43:
bb:e4:43:6c:a3:6b:5d:c7:7c:a7:cf:ea:21:b0:56:27:f4:a8:
b0:d9:12:d9:ee:72:63:9c:a2:6a:e0:53:4d:16:0b:18:9d:d9:
d6:a6:b4:e7:87:37:33:01:68:46:b0:aa:45:14:bc:2a:60:de:
20:ba:3e:61:99:78:a3:1d:6e:67:98:08:43:0d:0f:bf:6d:f2:
2f:db:1f:39:2f:b3:9a:c2:45:d0:5e:c6:21:65:5b:00:8e:b0:
f4:4b:93:ea:c8:1e:67:69:c5:0f:10:e4:bd:68:53:56:0f:4b:
fa:1e:c0:70:8c:9b:06:ec:06:3e:d5:4c:ac:ad:87:70:c3:47:
69:bc:a6:c4:0a:d3:1c:78:5d:7c:4e:aa:a1:e8:92:a0:22:75:
03:8c:55:99:e7:f0:ca:c7:73:e1:39:00:c0:62:d0:74:96:65:
75:31:5d:46:12:58:ba:93:4f:b6:da:b3:89:08:d2:9f:11:ec:
22:92:34:ba:ee:c2:2b:d6:ee:c8:69:04:72:d3:87:66:06:d8:
6f:fb:53:96:06:25:4e:e2:c3:f2:10:7f:d2:a3:30:39:76:09:
c8:08:df:5a:46:27:75:35:61:eb:7e:7a:d2:ef:a9:53:e6:8b:
f7:f6:00:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:37:48 2026 by rpki-client