Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/n_b4kM7Nf4_ETJGD5sv_9At60LM.roa
File: n_b4kM7Nf4_ETJGD5sv_9At60LM.roa (raw, json)
Hash identifier: /RycuISVv9R6CTevSvfxxs9xKu6q4LT2+Ms2DmWVV6Q=
Subject key identifier: 9F:F6:F8:90:CE:CD:7F:8F:C4:4C:91:83:E6:CB:FF:F4:0B:7A:D0:B3
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 019D2A07F4E97FD71CE79D7522EE334EE702
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/n_b4kM7Nf4_ETJGD5sv_9At60LM.roa
Signing time: Thu 26 Mar 2026 12:04:17 +0000
ROA not before: Thu 26 Mar 2026 12:04:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 87.76.189.0/24 maxlen: 24
87.76.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:07:f4:e9:7f:d7:1c:e7:9d:75:22:ee:33:4e:e7:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Mar 26 12:04:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9ff6f890cecd7f8fc44c9183e6cbfff40b7ad0b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a0:a7:51:d2:6b:4c:39:4a:52:5f:98:a8:b2:
a2:eb:6c:73:7e:51:89:8d:76:43:71:24:11:14:36:
da:64:a5:c3:a0:17:20:eb:a6:7c:67:b0:aa:db:21:
22:73:e6:2c:a3:d1:98:53:2c:83:a7:d8:4a:ea:9c:
5d:7e:2a:f2:39:6a:43:e9:06:7f:69:9b:f5:f5:52:
74:6b:19:e2:f7:31:99:5f:9d:9b:76:6b:28:f8:27:
5d:75:3a:14:e6:17:5a:b7:21:1e:22:13:02:38:59:
b0:67:53:6b:91:b8:cb:0a:47:b8:e9:2e:8b:1e:11:
bc:24:84:55:05:44:f6:9b:cf:1c:91:b1:f4:bf:2f:
f0:57:43:fa:cf:79:0e:61:d0:1d:ae:0b:ae:2a:96:
b8:06:c4:84:61:48:e5:a5:c2:0d:b2:02:b7:d9:c6:
04:33:f1:52:cd:00:30:d8:e3:17:d8:12:ea:9e:46:
d5:c9:f6:67:8a:17:be:11:f7:8e:79:fe:2e:37:10:
81:bb:c1:7b:6b:e2:36:23:96:8b:14:59:7a:c4:ac:
87:c2:3b:47:b6:54:f5:80:ad:d7:86:60:05:9d:8b:
7a:c2:1b:39:4b:63:02:e8:fa:7a:2c:c6:a1:cd:d2:
c8:55:8e:34:38:a1:3d:41:ed:cb:7f:03:d0:ee:78:
f1:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:F6:F8:90:CE:CD:7F:8F:C4:4C:91:83:E6:CB:FF:F4:0B:7A:D0:B3
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/n_b4kM7Nf4_ETJGD5sv_9At60LM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.189.0-87.76.190.255
Signature Algorithm: sha256WithRSAEncryption
50:f1:f3:1a:33:b2:20:01:2c:a7:ad:5a:6a:62:f1:36:a0:e0:
4f:8a:53:ba:38:17:9e:1c:cc:7e:83:0c:55:65:c0:e8:ef:f8:
58:1e:82:7a:bf:01:5e:42:f0:59:5e:88:31:5c:cc:bf:b2:0e:
6a:65:71:05:a5:67:ed:2c:d5:e0:64:5f:e1:4e:f1:af:fd:ff:
8c:62:8b:3d:e6:19:73:64:1d:c9:a0:ad:d2:d2:78:e5:e2:94:
e1:86:2b:cf:67:37:f2:d6:d9:37:d1:dc:c2:f5:13:04:61:9e:
c3:3c:f3:b9:ee:71:d7:a2:e9:7f:d0:df:5a:cf:e7:9f:aa:92:
70:30:62:00:b0:64:9d:98:9e:f4:c9:91:91:bd:78:14:b0:b9:
9e:50:1d:26:db:68:2c:7f:00:06:c3:2a:49:b2:fe:3b:1c:ee:
4c:8f:3e:52:37:c3:b7:8c:9a:df:35:f9:3c:7a:11:db:2c:45:
6a:aa:e1:0a:f8:f8:90:46:e0:58:f3:57:5a:f8:6d:bd:bc:16:
48:d4:42:dd:35:f4:fd:b8:b4:db:51:1e:07:f4:bd:17:49:35:
21:7b:cd:c5:d5:4c:e3:5c:f2:d0:3b:72:70:6b:4f:4e:7b:69:
eb:b8:51:ef:ad:36:62:1e:59:ba:8a:7e:5b:ec:43:da:77:d7:
0c:e7:ad:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:34:05 2026 by rpki-client