Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/6NYe5jqTINetqLixcb0zgBls--8.roa
File: 6NYe5jqTINetqLixcb0zgBls--8.roa (raw, json)
Hash identifier: GKyawW0I8lCCP1CkbAvbyGepK2aZKrtfwn77g2gmoVs=
Subject key identifier: E8:D6:1E:E6:3A:93:20:D7:AD:A8:B8:B1:71:BD:33:80:19:6C:FB:EF
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 01A19A6D22513E929D4826CE2DC2476BC8A0
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/6NYe5jqTINetqLixcb0zgBls--8.roa
Signing time: Mon 02 Nov 2026 04:03:25 +0000
ROA not before: Mon 02 Nov 2026 04:03:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216169
IP address blocks: 87.107.40.0/24 maxlen: 24
87.107.41.0/24 maxlen: 24
87.107.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 18:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9a:6d:22:51:3e:92:9d:48:26:ce:2d:c2:47:6b:c8:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Nov 2 04:03:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e8d61ee63a9320d7ada8b8b171bd3380196cfbef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:90:31:c9:8a:69:6d:b2:2b:f5:70:1e:5a:08:
f3:9c:86:6c:18:f5:2c:d0:af:39:28:d4:3d:e8:ed:
3c:1d:e0:e3:8f:ef:e5:70:0c:e4:96:9d:98:0e:16:
a8:56:83:19:cb:b0:dd:fa:cd:30:3c:9d:8a:ce:43:
83:33:2f:bb:3d:9b:68:34:7c:d4:9e:a7:8e:d5:25:
c6:35:6d:dd:5b:73:56:6a:e7:51:2c:70:98:63:f3:
3a:75:07:b1:d4:41:ca:4e:64:3c:eb:a2:7e:1e:f1:
52:b8:cc:ed:3d:e7:2c:a4:de:91:a7:c0:ac:44:24:
41:29:f6:b1:77:2c:83:f5:70:8c:3f:22:b9:e9:ba:
44:33:a5:bf:98:84:a5:32:e7:43:4c:23:43:12:ab:
21:1c:e6:8b:b3:52:c7:9f:8a:4e:9f:3c:fa:9b:f3:
96:10:f7:38:e0:5f:4d:7d:9e:6b:16:4d:af:e5:17:
7f:fd:af:c9:48:c9:37:09:1b:3f:ae:b4:28:30:e4:
e9:33:e8:4d:c2:f7:e0:ce:93:cd:7f:e3:cc:54:cb:
75:7e:47:9f:ed:af:ea:e2:95:a8:c6:07:79:53:d2:
09:c2:50:3c:7e:8e:a5:42:37:f4:b6:e6:83:cf:a8:
7f:a4:55:7b:f5:4c:cd:f1:05:a6:91:93:93:e4:d1:
9c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:D6:1E:E6:3A:93:20:D7:AD:A8:B8:B1:71:BD:33:80:19:6C:FB:EF
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/6NYe5jqTINetqLixcb0zgBls--8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.107.40.0/23
87.107.171.0/24
Signature Algorithm: sha256WithRSAEncryption
95:43:a1:d6:44:81:66:03:04:83:65:a4:1c:32:47:b9:1a:81:
65:84:25:82:f1:a7:f2:1a:13:e4:8e:1c:1e:d5:66:60:ab:0a:
1c:e2:f8:c8:86:d3:2f:be:da:7c:5b:91:2c:21:57:87:ca:0c:
4a:55:31:5a:6f:d5:65:1b:0e:4d:92:fe:36:99:55:6c:b9:fc:
92:91:d1:db:9c:98:b2:5e:14:a8:18:85:e1:df:68:70:f4:81:
0c:a4:7e:73:82:cc:a9:89:89:6a:5d:76:4b:2f:3d:26:11:d0:
12:cc:65:23:a9:e5:3e:71:af:e7:e7:d4:cb:66:41:cf:6a:6f:
49:71:3c:40:52:75:71:b7:cc:54:74:76:c0:91:2f:6b:48:4e:
e2:44:81:8c:6c:3b:a7:73:4c:9b:9c:72:0d:e9:62:c9:31:59:
63:93:47:46:0e:32:b8:3d:2d:2e:24:b9:2c:80:8d:93:52:98:
dd:71:c6:6d:0c:03:cf:dc:fd:7e:ec:a6:16:1d:ae:f7:12:e9:
25:bf:bf:06:72:fe:ba:94:ad:29:19:9b:8c:0f:e1:1e:1d:22:
c5:19:fb:ed:f8:b5:2a:9f:e6:f8:56:e9:b9:86:d7:b9:3c:4f:
65:47:ca:05:09:ca:6b:57:5e:f5:54:1d:f1:e3:81:c6:eb:7d:
0e:59:d1:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:34:06 2026 by rpki-client