Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/r3h1_0bxIKQ6_9ISYREGOJB_I2s.roa
File: r3h1_0bxIKQ6_9ISYREGOJB_I2s.roa (raw, json)
Hash identifier: OivtJwlaMN9DVaShkpfN5tkcri8q5WBUE89vNal9ilE=
Subject key identifier: AF:78:75:FF:46:F1:20:A4:3A:FF:D2:12:61:11:06:38:90:7F:23:6B
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 019F909A88B1325EE8E3D145D21307C1FE37
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/r3h1_0bxIKQ6_9ISYREGOJB_I2s.roa
Signing time: Thu 23 Jul 2026 20:11:14 +0000
ROA not before: Thu 23 Jul 2026 20:11:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56630
IP address blocks: 87.76.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:9a:88:b1:32:5e:e8:e3:d1:45:d2:13:07:c1:fe:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Jul 23 20:11:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=af7875ff46f120a43affd21261110638907f236b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b5:16:8c:cf:5a:d4:39:30:79:51:7c:b7:c5:
66:16:2c:8e:eb:b0:9a:f1:67:2a:f9:98:37:0e:f4:
9e:f3:70:ca:4c:af:46:ba:66:d7:09:18:dc:07:bb:
3a:af:99:c6:ef:26:a9:58:0c:fb:d4:26:7e:ef:95:
1d:f7:81:98:ad:34:65:02:a5:c8:b4:ce:71:0c:17:
cb:75:ca:06:82:f1:01:6c:2e:45:bf:61:28:10:05:
ef:97:45:ba:87:66:c7:78:e2:8f:bd:ba:bc:34:ad:
f7:c4:7d:cf:e1:bd:4e:e2:21:ab:b4:af:32:27:b0:
18:fe:25:70:6e:93:05:bf:77:dc:90:55:ed:8f:48:
ad:a4:9e:7a:e2:27:12:8c:d1:69:65:4a:a6:ca:42:
5c:d8:35:5e:3b:e2:08:46:ec:9b:3d:e9:3d:e1:64:
3a:da:d4:68:97:e8:56:87:94:c3:47:bb:69:5a:91:
1e:fb:f4:de:82:67:24:fb:76:d3:c1:2f:6d:83:df:
c7:55:41:b9:56:b2:b1:fe:ad:ea:2f:cd:a4:13:5d:
87:d7:d4:d8:35:77:22:54:7d:fd:d3:9d:b9:c3:25:
e5:f7:29:61:a2:48:b4:54:6e:fc:74:a0:fc:7b:14:
f4:b8:d4:c4:62:f3:2a:e4:c5:3c:81:22:3c:12:09:
8e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:78:75:FF:46:F1:20:A4:3A:FF:D2:12:61:11:06:38:90:7F:23:6B
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/r3h1_0bxIKQ6_9ISYREGOJB_I2s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.128.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:26:9c:3a:86:f4:d1:36:b8:34:fd:cb:b1:ee:18:6f:a8:6e:
98:98:20:62:53:06:03:d9:03:3c:2f:54:a6:ec:23:68:b9:a2:
a3:d2:b9:29:c0:ec:b7:47:5d:da:dd:82:4f:f4:b5:cc:e6:63:
e9:2d:85:00:7a:86:62:34:bd:0f:da:7b:8c:5f:25:16:c0:d4:
cc:14:6e:58:6d:33:ff:f1:c8:5f:fd:e5:68:3f:63:bf:b0:75:
2d:21:5f:c0:b3:ac:b8:fe:09:5b:15:6d:ce:f9:17:72:46:5a:
12:a0:31:11:e4:76:6e:49:ab:d3:1b:46:c9:24:46:79:a6:8a:
c6:42:42:9c:a1:a8:0e:9a:89:06:7b:77:fe:81:d7:9a:41:e5:
40:61:9c:af:cc:92:fa:c9:12:7e:3e:04:f1:0b:49:8f:7f:f4:
7d:62:aa:69:47:ec:58:b1:63:5a:1f:bb:99:a5:81:13:1a:66:
fd:04:dc:d2:7f:b9:d6:10:a3:82:83:75:3f:9f:c5:0c:64:ce:
84:cf:0b:fb:63:f6:54:9f:9e:2d:fc:23:a9:5c:ba:f3:09:22:
21:cd:97:f9:bd:a2:04:25:f8:4c:87:72:ef:ef:55:7e:5a:26:
ec:10:46:8c:30:80:37:20:5b:51:30:9c:37:3e:94:89:7c:11:
9c:6b:74:d3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ+QmoixMl7o49FF0hMHwf43MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyMWYwY2JhMTBkYWEzMDJlM2IxNjdjZWU1Mzk1Zjc0MmY1
MzBiMDkwHhcNMjYwNzIzMjAxMTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZjc4NzVmZjQ2ZjEyMGE0M2FmZmQyMTI2MTExMDYzODkwN2YyMzZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLUWjM9a1DkweVF8t8VmFiyO67Ca
8Wcq+Zg3DvSe83DKTK9GumbXCRjcB7s6r5nG7yapWAz71CZ+75Ud94GYrTRlAqXI
tM5xDBfLdcoGgvEBbC5Fv2EoEAXvl0W6h2bHeOKPvbq8NK33xH3P4b1O4iGrtK8y
J7AY/iVwbpMFv3fckFXtj0itpJ564icSjNFpZUqmykJc2DVeO+IIRuybPek94WQ6
2tRol+hWh5TDR7tpWpEe+/Tegmck+3bTwS9tg9/HVUG5VrKx/q3qL82kE12H19TY
NXciVH390525wyXl9ylhoki0VG78dKD8exT0uNTEYvMq5MU8gSI8EgmOtQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFK94df9G8SCkOv/SEmERBjiQfyNrMB8GA1UdIwQY
MBaAFFIfDLoQ2qMC47FnzuU5X3QvUwsJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWg4TXVoRGFvd0xqc1dmTzVUbGZkQzlUQ3drLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82OGNlMzYtNzRlNC00NDNiLWFlZjEt
M2JiOGIwNzVkNjlmLzEvcjNoMV8wYnhJS1E2XzlJU1lSRUdPSkJfSTJzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82OGNlMzYtNzRlNC00NDNiLWFlZjEtM2JiOGIwNzVkNjlm
LzEvVWg4TXVoRGFvd0xqc1dmTzVUbGZkQzlUQ3drLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV0yAMA0G
CSqGSIb3DQEBCwUAA4IBAQAPJpw6hvTRNrg0/cux7hhvqG6YmCBiUwYD2QM8L1Sm
7CNouaKj0rkpwOy3R13a3YJP9LXM5mPpLYUAeoZiNL0P2nuMXyUWwNTMFG5YbTP/
8chf/eVoP2O/sHUtIV/As6y4/glbFW3O+RdyRloSoDER5HZuSavTG0bJJEZ5porG
QkKcoagOmokGe3f+gdeaQeVAYZyvzJL6yRJ+PgTxC0mPf/R9YqppR+xYsWNaH7uZ
pYETGmb9BNzSf7nWEKOCg3U/n8UMZM6Ezwv7Y/ZUn54t/COpXLrzCSIhzZf5vaIE
JfhMh3Lv71V+WibsEEaMMIA3IFtRMJw3PpSJfBGca3TT
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:58:02 2026 by rpki-client