Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/yurYzf3bD7Pl0VlfaqKfGpzP5Yw.roa
File: yurYzf3bD7Pl0VlfaqKfGpzP5Yw.roa (raw, json)
Hash identifier: OKUNweXwMmzxz3EbXbr+G25r4rfC/1iwsOHTWdVZzZI=
Subject key identifier: CA:EA:D8:CD:FD:DB:0F:B3:E5:D1:59:5F:6A:A2:9F:1A:9C:CF:E5:8C
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 019F8191A8F3C18851C55FFA595927E9F9C9
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/yurYzf3bD7Pl0VlfaqKfGpzP5Yw.roa
Signing time: Mon 20 Jul 2026 22:07:14 +0000
ROA not before: Mon 20 Jul 2026 22:07:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209675
IP address blocks: 87.76.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:81:91:a8:f3:c1:88:51:c5:5f:fa:59:59:27:e9:f9:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Jul 20 22:07:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=caead8cdfddb0fb3e5d1595f6aa29f1a9ccfe58c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:26:3c:04:63:3d:34:8e:03:b1:65:12:9f:a5:
e4:67:3e:4a:08:be:78:c2:d5:bd:cb:52:db:7a:80:
5a:4e:30:ab:8e:e4:0b:6f:15:82:b9:7a:5b:27:8e:
46:9a:cf:15:03:1c:22:5b:1f:75:53:f7:f7:e7:66:
de:f1:35:e3:fc:68:c7:aa:41:6b:b9:1d:8d:60:95:
c1:c0:7a:25:7c:1c:1a:32:22:ba:fa:be:8e:62:e8:
25:cc:60:e4:44:8e:cb:ec:b4:f9:08:74:69:21:b9:
2b:69:73:b3:97:5a:3f:1a:3e:0f:55:4b:9c:42:58:
41:25:0d:39:de:6e:64:6d:19:96:47:7b:fa:6c:09:
63:37:a3:35:eb:65:f8:a4:21:3c:ed:48:08:74:8d:
b1:db:81:f7:cf:60:32:1f:6f:81:fd:d9:e5:73:20:
9e:22:d2:52:99:84:71:b1:d3:e2:10:36:1a:01:e5:
7f:ee:3a:6f:6d:ea:b5:80:76:f2:5b:a9:72:3a:a9:
59:20:49:0f:60:db:ac:1e:1a:fd:1a:34:5c:67:79:
a4:27:62:ca:2e:fb:b5:a6:02:71:9e:25:f7:00:51:
61:17:95:8a:15:97:f1:8c:87:4c:90:84:63:48:51:
69:14:e3:a3:a1:1c:ce:b5:46:f6:13:47:53:85:9e:
04:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:EA:D8:CD:FD:DB:0F:B3:E5:D1:59:5F:6A:A2:9F:1A:9C:CF:E5:8C
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/yurYzf3bD7Pl0VlfaqKfGpzP5Yw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.196.0/24
Signature Algorithm: sha256WithRSAEncryption
23:d3:e6:0c:98:4d:de:1d:7a:45:7d:92:d8:22:5a:8a:d8:7d:
03:9e:ff:75:97:65:4c:b6:0d:d4:3c:4e:a9:8f:3a:c1:db:5b:
42:c3:04:2a:dd:bd:60:76:85:90:b5:00:d3:50:85:d7:b3:20:
13:b8:ac:9e:27:7b:23:90:47:2d:45:9d:39:67:2d:ce:a9:b0:
38:98:cb:2c:9b:01:11:a2:54:0a:03:82:59:f9:4d:98:8e:f4:
37:a4:08:ed:fe:25:db:8b:75:ed:85:b6:e1:e7:54:3b:23:60:
b2:34:db:48:e6:ac:5e:a3:0f:db:aa:e4:ac:d8:89:07:f7:e5:
f5:d4:07:2c:f7:3f:64:cc:77:6f:8c:f4:3b:84:89:53:46:3c:
36:dd:38:12:ab:7d:74:69:da:71:6c:85:28:d7:51:d6:fd:2a:
ca:ad:f5:cb:58:9f:b8:08:eb:26:26:51:73:e1:fa:98:09:05:
b4:ad:9d:c2:a7:1f:db:42:b3:4f:f3:34:f2:a3:f5:b5:af:97:
8e:ea:03:51:a3:02:ae:ab:8a:28:68:9d:ed:08:56:70:33:ab:
2c:d6:81:89:f1:a9:96:a6:60:0f:3e:c1:7a:ae:64:2e:65:27:
ff:61:53:4f:ad:68:1e:52:66:38:3d:50:38:1e:27:14:a0:2f:
3c:07:8e:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:30:34 2026 by rpki-client