Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/okIUJno80AZ2y8psDzQspozBlCU.roa
File: okIUJno80AZ2y8psDzQspozBlCU.roa (raw, json)
Hash identifier: rUyIplyQpNWaP6SLGQB0HhHCrObAX0PV9jObfjkTDKw=
Subject key identifier: A2:42:14:26:7A:3C:D0:06:76:CB:CA:6C:0F:34:2C:A6:8C:C1:94:25
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 019F3B668CB141DF6F2ECEE23A24DC3B122A
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/okIUJno80AZ2y8psDzQspozBlCU.roa
Signing time: Tue 07 Jul 2026 07:06:44 +0000
ROA not before: Tue 07 Jul 2026 07:06:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51082
IP address blocks: 87.76.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3b:66:8c:b1:41:df:6f:2e:ce:e2:3a:24:dc:3b:12:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Jul 7 07:06:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a24214267a3cd00676cbca6c0f342ca68cc19425
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:0a:75:52:69:17:68:5d:c9:17:1b:dd:72:45:
5d:fd:3a:0b:12:f3:3c:37:d8:3f:51:05:5d:dc:99:
b0:3b:94:04:75:b8:1e:5e:4a:d0:cd:b8:ed:3a:4b:
34:24:13:ad:78:c3:63:e2:fe:59:5b:9b:03:a3:74:
99:6d:55:cc:0e:29:26:fc:b8:0d:49:89:65:ce:8a:
75:35:83:b5:15:dc:2a:17:e4:36:ea:cc:71:80:71:
97:e4:a5:ef:a9:33:70:ef:df:1c:21:ca:f9:b4:4d:
33:de:3f:67:a0:eb:f9:0c:06:b2:e0:68:5b:9e:22:
5c:3a:2f:66:79:0b:91:f9:88:21:ec:c4:13:25:e8:
ea:9a:05:f6:80:b4:c3:c2:d3:d1:5e:2c:9a:e6:8c:
d8:48:5a:7d:94:9f:e7:b6:41:95:40:97:a1:c0:97:
aa:a7:39:8c:88:e2:cf:e3:a2:4f:ad:5c:e4:f6:07:
f4:7c:46:8d:cf:26:88:59:a6:c1:ba:24:46:63:50:
54:22:11:8c:fe:e3:c8:b2:0c:d1:df:ea:09:46:5c:
86:c9:ff:61:2e:44:6e:be:b2:ef:91:54:7b:73:76:
54:8b:d1:ca:37:26:d7:3d:8b:7a:df:e3:64:75:38:
11:cd:66:b2:ae:63:20:30:69:c1:6a:09:ce:8f:74:
66:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:42:14:26:7A:3C:D0:06:76:CB:CA:6C:0F:34:2C:A6:8C:C1:94:25
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/okIUJno80AZ2y8psDzQspozBlCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.177.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:40:8f:45:f1:2a:af:b2:0f:d5:1d:c2:17:2c:59:12:4e:4b:
c4:0f:c8:56:c9:41:70:a6:ab:a8:00:62:8c:e0:6a:a5:d2:20:
53:c1:00:de:81:60:88:3d:75:2f:99:2a:96:7f:8f:5b:69:f4:
74:08:3d:07:69:f4:57:ae:fe:ff:2a:2f:0b:69:37:69:12:fe:
91:a9:a6:c2:d9:53:3a:82:fe:2c:24:c1:1a:a3:bd:34:e2:54:
35:9e:de:33:46:84:f2:e9:3a:33:16:af:ee:29:e6:19:31:31:
b2:52:86:93:06:d3:e1:59:5c:fb:18:8e:2e:8b:bd:6e:e9:3e:
95:6f:7c:14:06:44:ed:94:bd:2b:8e:64:1d:8f:30:50:11:90:
d0:14:d9:eb:df:b3:df:42:89:a0:cb:e9:65:a1:f1:fc:7a:2d:
ad:27:0b:22:9b:e6:9d:11:55:76:86:23:4f:b5:16:ad:0d:56:
0e:d2:14:1d:0d:dc:85:14:c9:1d:cc:5f:ba:29:3b:58:e2:03:
f8:00:ca:2a:31:93:8c:f9:13:cc:de:4a:e7:ab:a9:68:12:f1:
b8:82:4d:4f:c4:f6:6f:b5:82:a4:3d:7c:40:0c:81:ab:02:c0:
a3:25:b0:7a:5f:51:53:46:7d:7f:16:e8:5c:af:22:b3:31:d0:
4e:93:fe:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:58:21 2026 by rpki-client