Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/yiTCTog1JUi91vAMSKddoYv1SaQ.roa
File: yiTCTog1JUi91vAMSKddoYv1SaQ.roa (raw, json)
Hash identifier: qElApMLjSOW/qnC70UTiXT4XnfOKkmevxPsyyu0z59o=
Subject key identifier: CA:24:C2:4E:88:35:25:48:BD:D6:F0:0C:48:A7:5D:A1:8B:F5:49:A4
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 01A172953F520E3DAAF318951967E3E746EB
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/yiTCTog1JUi91vAMSKddoYv1SaQ.roa
Signing time: Sun 25 Oct 2026 10:22:26 +0000
ROA not before: Sun 25 Oct 2026 10:22:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25369
IP address blocks: 87.76.158.0/24 maxlen: 24
87.76.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:72:95:3f:52:0e:3d:aa:f3:18:95:19:67:e3:e7:46:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Oct 25 10:22:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ca24c24e88352548bdd6f00c48a75da18bf549a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:7d:62:b8:a5:6b:a2:cc:d6:92:72:1a:ba:42:
f9:8b:b8:0a:63:62:42:96:b7:09:ed:07:18:7f:71:
c8:6a:46:6c:6b:36:5e:dd:b9:a1:07:e0:43:e4:89:
4b:4a:bf:c0:21:57:44:c1:7a:3a:f8:00:b6:98:02:
fb:72:e5:45:88:d5:5d:72:67:fe:9a:39:32:c1:64:
d1:d6:56:50:7e:0a:ad:19:ad:f2:81:c3:31:8d:ba:
8d:f0:99:2c:c3:53:39:e0:dc:5b:5f:e6:25:48:c5:
64:62:36:db:5a:bd:44:19:94:ba:74:fd:ae:de:95:
d3:91:19:b0:5f:14:b7:83:f8:0c:bb:09:5b:a2:0e:
a1:3c:63:8c:2e:48:4d:58:a4:c9:cb:52:b5:de:eb:
48:12:b8:af:84:e1:77:c5:ef:8f:55:aa:28:74:de:
4f:e9:b9:5f:87:2f:0d:83:d5:26:ec:db:89:70:fc:
50:f4:a4:a6:75:87:80:71:f1:46:b4:32:0d:db:88:
51:3d:85:08:4f:da:1d:8d:17:95:68:b5:a1:2e:22:
b1:0e:ef:92:b5:df:aa:5e:31:88:92:6b:f1:b1:9e:
89:bb:91:55:34:73:9c:01:9f:ef:6a:a3:30:60:07:
e0:08:e4:40:88:2f:da:ff:5d:bc:89:31:2c:3c:2c:
9a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:24:C2:4E:88:35:25:48:BD:D6:F0:0C:48:A7:5D:A1:8B:F5:49:A4
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/yiTCTog1JUi91vAMSKddoYv1SaQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.158.0/24
87.76.173.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:88:97:22:6c:5e:4a:9b:a7:0e:25:66:73:8b:e4:89:62:6a:
78:27:ad:ed:e6:6a:fd:09:2f:f2:6e:6e:97:18:f9:bb:22:45:
c4:42:79:61:74:2e:6f:47:58:30:2b:f8:9e:47:fa:cf:9a:95:
6c:19:29:cf:f0:c9:86:36:23:c4:36:56:e6:87:67:33:bd:9a:
dc:4b:e8:09:9a:59:91:91:cf:e6:7d:45:b0:e3:28:80:48:8d:
ec:3c:4b:3a:b4:97:d3:74:58:7c:e1:13:62:c4:a7:a9:ff:a9:
6c:66:cc:8d:ba:7c:1d:82:85:86:c6:0b:e0:bc:61:5d:bc:a8:
a3:01:a9:3e:91:0d:67:ef:d8:a3:ce:a1:25:3b:57:62:cc:dc:
ac:8e:84:da:9e:08:9f:c8:f7:46:71:1d:80:d7:4b:0f:0f:a4:
80:3e:e1:ae:7a:6f:36:7a:c7:87:71:64:b2:f9:ec:e2:1a:52:
9b:73:82:16:7b:39:45:f4:17:67:78:e2:19:f6:9e:ae:cf:76:
a0:b7:64:b7:65:25:79:62:a4:fe:32:88:e2:01:56:02:d8:6d:
87:1c:fb:88:7f:f4:f9:b0:0c:08:64:5e:5f:93:66:bd:97:03:
48:e2:c9:64:02:4a:74:ba:76:e2:45:ca:d1:9d:27:54:13:07:
10:39:00:32
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaFylT9SDj2q8xiVGWfj50brMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyMWYwY2JhMTBkYWEzMDJlM2IxNjdjZWU1Mzk1Zjc0MmY1
MzBiMDkwHhcNMjYxMDI1MTAyMjI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYTI0YzI0ZTg4MzUyNTQ4YmRkNmYwMGM0OGE3NWRhMThiZjU0OWE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApX1iuKVroszWknIaukL5i7gKY2JC
lrcJ7QcYf3HIakZsazZe3bmhB+BD5IlLSr/AIVdEwXo6+AC2mAL7cuVFiNVdcmf+
mjkywWTR1lZQfgqtGa3ygcMxjbqN8Jksw1M54NxbX+YlSMVkYjbbWr1EGZS6dP2u
3pXTkRmwXxS3g/gMuwlbog6hPGOMLkhNWKTJy1K13utIErivhOF3xe+PVaoodN5P
6blfhy8Ng9Um7NuJcPxQ9KSmdYeAcfFGtDIN24hRPYUIT9odjReVaLWhLiKxDu+S
td+qXjGIkmvxsZ6Ju5FVNHOcAZ/vaqMwYAfgCORAiC/a/128iTEsPCya7QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMokwk6INSVIvdbwDEinXaGL9UmkMB8GA1UdIwQY
MBaAFFIfDLoQ2qMC47FnzuU5X3QvUwsJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWg4TXVoRGFvd0xqc1dmTzVUbGZkQzlUQ3drLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82OGNlMzYtNzRlNC00NDNiLWFlZjEt
M2JiOGIwNzVkNjlmLzEveWlUQ1RvZzFKVWk5MXZBTVNLZGRvWXYxU2FRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82OGNlMzYtNzRlNC00NDNiLWFlZjEtM2JiOGIwNzVkNjlm
LzEvVWg4TXVoRGFvd0xqc1dmTzVUbGZkQzlUQ3drLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAV0yeAwQA
V0ytMA0GCSqGSIb3DQEBCwUAA4IBAQAeiJcibF5Km6cOJWZzi+SJYmp4J63t5mr9
CS/ybm6XGPm7IkXEQnlhdC5vR1gwK/ieR/rPmpVsGSnP8MmGNiPENlbmh2czvZrc
S+gJmlmRkc/mfUWw4yiASI3sPEs6tJfTdFh84RNixKep/6lsZsyNunwdgoWGxgvg
vGFdvKijAak+kQ1n79ijzqElO1dizNysjoTangifyPdGcR2A10sPD6SAPuGuem82
eseHcWSy+eziGlKbc4IWezlF9BdneOIZ9p6uz3agt2S3ZSV5YqT+MojiAVYC2G2H
HPuIf/T5sAwIZF5fk2a9lwNI4slkAkp0unbiRcrRnSdUEwcQOQAy
-----END CERTIFICATE-----
Generated at Sun Nov 15 14:34:05 2026 by rpki-client