Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/qF8BKh9mp0vDJO6FyYEDuRfeqMQ.roa
File: qF8BKh9mp0vDJO6FyYEDuRfeqMQ.roa (raw, json)
Hash identifier: xi6m2/Z05MKiWaV8HScj8OTGx5dYIbRrVtgLppGHGVA=
Subject key identifier: A8:5F:01:2A:1F:66:A7:4B:C3:24:EE:85:C9:81:03:B9:17:DE:A8:C4
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 01A0C34FE222F560039A42E5F91C125CA628
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/qF8BKh9mp0vDJO6FyYEDuRfeqMQ.roa
Signing time: Mon 21 Sep 2026 09:33:07 +0000
ROA not before: Mon 21 Sep 2026 09:33:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 142561
IP address blocks: 87.76.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:4f:e2:22:f5:60:03:9a:42:e5:f9:1c:12:5c:a6:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Sep 21 09:33:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a85f012a1f66a74bc324ee85c98103b917dea8c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a8:bf:3b:d0:de:d5:07:de:59:80:8c:2d:ae:
f4:1a:ec:f3:14:ba:bb:b6:2c:13:ed:4b:57:d3:06:
88:1a:a4:51:bb:8c:4c:3b:af:56:e4:cf:06:46:4c:
aa:2f:c6:ce:53:36:7f:f7:87:4f:13:40:a7:5e:ec:
05:b3:e6:a6:e9:fc:b3:f0:d0:77:c6:1d:9d:fe:d4:
dc:a3:c1:60:f1:73:d3:cf:ea:53:7b:eb:b2:8b:93:
ac:cf:50:b7:ea:ad:f8:79:4e:74:12:84:b7:16:50:
4f:5e:5c:7c:bb:c0:ba:99:6c:8d:66:d7:7f:45:82:
08:e2:c5:b8:bf:a2:f6:36:91:31:c7:55:f8:cc:92:
98:e5:a8:e4:b1:34:a5:03:0e:ee:37:7f:db:03:41:
ea:a5:d0:4e:6b:70:85:6e:8b:e0:a6:35:24:ec:f5:
66:e8:d4:12:02:a5:77:8e:bc:46:15:60:60:5b:3a:
d8:dc:bd:7f:85:95:e2:12:f1:dc:d9:43:b9:86:dd:
4b:51:76:64:13:ba:ae:39:aa:db:00:4f:8c:5c:ac:
18:bb:8e:a6:d9:57:cf:fc:f7:5a:34:4b:f3:0e:35:
b2:8e:66:b6:33:a6:43:4c:b2:db:0a:12:55:74:39:
aa:93:fb:78:2e:bd:e6:95:63:c5:79:e3:77:51:58:
3a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:5F:01:2A:1F:66:A7:4B:C3:24:EE:85:C9:81:03:B9:17:DE:A8:C4
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/qF8BKh9mp0vDJO6FyYEDuRfeqMQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.184.0/24
Signature Algorithm: sha256WithRSAEncryption
81:4b:53:95:3a:4b:2a:d1:b1:bc:5c:47:96:98:d9:6a:c8:a2:
d7:2c:ea:5c:85:b0:86:73:97:b0:34:28:35:ec:a6:7c:d5:fa:
a7:b4:48:a9:19:3a:c1:e5:b8:86:32:29:57:da:19:ad:09:89:
06:5c:ca:3c:af:e3:b1:cd:0c:84:9c:7b:e5:76:93:80:fa:c7:
fb:4a:f6:c6:65:c2:01:12:76:b8:c1:69:4d:5b:b9:88:c5:f0:
b4:89:b5:7b:e8:95:4c:a5:63:b7:ea:57:08:5e:dc:78:a6:80:
c6:7a:2c:67:eb:23:f6:f3:a4:44:9e:c7:2a:a8:05:32:3b:a8:
74:2f:63:26:3c:3f:24:90:27:6c:71:6d:85:83:e3:88:2a:43:
11:02:79:01:fe:ed:a5:51:2b:98:1a:35:da:92:91:8c:0d:04:
cf:09:44:f7:41:43:67:26:95:d4:59:aa:10:08:ef:84:e2:1f:
be:c4:80:0e:ed:78:0d:73:ee:6d:9c:f5:52:54:e7:ca:23:90:
c6:dd:62:f9:84:86:78:ac:05:77:a0:b2:82:05:93:ee:ee:c0:
1f:a0:0e:e4:9d:ce:22:2c:7c:b1:45:db:93:c5:ad:a9:0c:f2:
da:58:ae:04:f0:b7:9b:65:eb:b9:7f:15:21:d5:a5:82:49:19:
dc:e8:db:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 10:16:12 2026 by rpki-client