Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/k7Xb6pr3D4kMAA9I4N12JiGOGyc.roa
File: k7Xb6pr3D4kMAA9I4N12JiGOGyc.roa (raw, json)
Hash identifier: /ImV+5RSKREhzZ0Wqgrx7D4RzBF0tag9U0OGST3aWOw=
Subject key identifier: 93:B5:DB:EA:9A:F7:0F:89:0C:00:0F:48:E0:DD:76:26:21:8E:1B:27
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 019ED4C0F81332FB9A2B0F5C80ABEEB634F8
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/k7Xb6pr3D4kMAA9I4N12JiGOGyc.roa
Signing time: Wed 17 Jun 2026 08:44:36 +0000
ROA not before: Wed 17 Jun 2026 08:44:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214998
IP address blocks: 87.107.32.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d4:c0:f8:13:32:fb:9a:2b:0f:5c:80:ab:ee:b6:34:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Jun 17 08:44:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=93b5dbea9af70f890c000f48e0dd7626218e1b27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:5c:ab:57:d5:b6:2f:3d:b9:0c:cd:25:b7:74:
04:94:6c:71:17:5e:22:61:12:45:75:5c:45:2d:34:
db:5c:bc:f3:0c:be:31:98:69:ea:32:f6:b0:14:2a:
49:73:ce:7c:f2:2c:b6:bd:4c:a1:a5:9b:b5:88:3f:
1a:88:2a:0a:3c:1f:6b:9b:e6:4b:a7:68:97:6c:99:
82:d5:19:f1:30:d5:62:0f:ff:5b:04:c6:a4:38:95:
74:00:20:f9:29:f9:30:77:79:1f:3d:4d:d3:54:9b:
0f:c6:53:4b:b1:3d:bd:8f:f5:a1:28:a7:ed:65:ae:
bc:f7:47:f0:65:7d:4b:2d:bf:96:34:ef:82:77:f0:
09:05:8c:28:6a:57:ce:3f:3e:05:df:56:a7:ba:3d:
08:ce:37:0a:0d:19:3a:22:65:4b:81:13:ec:6e:d1:
7a:21:58:27:9d:b6:62:b2:da:ba:67:a1:c9:bd:8c:
b7:79:bb:cd:bb:b9:07:fa:bf:3d:57:62:4e:f7:59:
bc:15:c4:1e:1f:03:8d:e8:5b:7a:18:b0:57:f1:be:
2a:c5:35:93:0d:f9:18:95:bb:b5:93:c9:b8:9a:47:
bd:65:af:a3:16:29:78:6c:42:7a:6f:5a:ae:5c:1e:
dd:28:ee:e8:bf:3b:3a:a5:48:7e:e6:89:46:1f:e5:
47:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:B5:DB:EA:9A:F7:0F:89:0C:00:0F:48:E0:DD:76:26:21:8E:1B:27
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/k7Xb6pr3D4kMAA9I4N12JiGOGyc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.107.32.0/23
Signature Algorithm: sha256WithRSAEncryption
0d:95:45:ab:20:51:65:48:5c:41:90:88:57:fb:cd:8e:5e:af:
85:70:7b:49:65:63:90:b2:06:ad:f9:f9:b7:b8:4b:50:7b:2b:
78:de:11:da:b1:6c:47:ed:4a:66:20:50:8c:71:d7:14:17:a8:
3f:4e:ea:fe:90:cc:2a:74:a3:a5:7e:96:ea:4d:0f:2b:85:21:
30:be:e4:59:86:ad:83:2d:6b:7f:69:30:e3:ca:12:5c:cf:c4:
53:90:b5:45:bf:b8:c3:ef:f7:75:94:80:28:d8:67:b6:bf:c6:
3e:5b:45:ec:36:1f:f0:e5:52:9e:c8:61:5b:91:53:d0:5f:42:
99:bc:50:bd:8a:de:8d:b3:cb:59:cb:8f:a9:fd:8f:39:6f:ef:
25:35:d2:a3:0a:86:17:cd:ed:da:b2:d9:34:56:46:7a:6d:36:
d1:18:1e:8e:57:9b:d2:1c:8b:1b:3b:3c:94:5a:cc:63:af:7c:
01:cf:7e:67:76:19:95:18:21:42:1f:54:17:4d:50:75:05:cc:
5b:28:f5:1f:d3:2f:64:1a:7e:45:f0:85:8e:e6:27:ba:14:6a:
12:54:ae:d6:5d:38:a0:23:f6:37:27:4e:4e:f1:bb:61:83:70:
29:91:ad:72:ed:2f:68:8f:d2:a5:26:f0:92:f9:62:bb:ce:20:
92:8e:d8:a1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ7UwPgTMvuaKw9cgKvutjT4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwNzc1ZDk0NzFiODVkOTYzZmVmNmQyODM1OTBlMmQ5NDJk
ZDVjMjEwHhcNMjYwNjE3MDg0NDM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5M2I1ZGJlYTlhZjcwZjg5MGMwMDBmNDhlMGRkNzYyNjIxOGUxYjI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVyrV9W2Lz25DM0lt3QElGxxF14i
YRJFdVxFLTTbXLzzDL4xmGnqMvawFCpJc8588iy2vUyhpZu1iD8aiCoKPB9rm+ZL
p2iXbJmC1RnxMNViD/9bBMakOJV0ACD5Kfkwd3kfPU3TVJsPxlNLsT29j/WhKKft
Za6890fwZX1LLb+WNO+Cd/AJBYwoalfOPz4F31anuj0IzjcKDRk6ImVLgRPsbtF6
IVgnnbZistq6Z6HJvYy3ebvNu7kH+r89V2JO91m8FcQeHwON6Ft6GLBX8b4qxTWT
DfkYlbu1k8m4mke9Za+jFil4bEJ6b1quXB7dKO7ovzs6pUh+5olGH+VHfwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJO12+qa9w+JDAAPSODddiYhjhsnMB8GA1UdIwQY
MBaAFAB3XZRxuF2WP+9tKDWQ4tlC3VwhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQt
NzZiMzNlNGNlODIxLzEvazdYYjZwcjNENGtNQUE5STROMTJKaUdPR3ljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQtNzZiMzNlNGNlODIx
LzEvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBV2sgMA0G
CSqGSIb3DQEBCwUAA4IBAQANlUWrIFFlSFxBkIhX+82OXq+FcHtJZWOQsgat+fm3
uEtQeyt43hHasWxH7UpmIFCMcdcUF6g/Tur+kMwqdKOlfpbqTQ8rhSEwvuRZhq2D
LWt/aTDjyhJcz8RTkLVFv7jD7/d1lIAo2Ge2v8Y+W0XsNh/w5VKeyGFbkVPQX0KZ
vFC9it6Ns8tZy4+p/Y85b+8lNdKjCoYXze3astk0VkZ6bTbRGB6OV5vSHIsbOzyU
Wsxjr3wBz35ndhmVGCFCH1QXTVB1BcxbKPUf0y9kGn5F8IWO5ie6FGoSVK7WXTig
I/Y3J05O8bthg3Apka1y7S9oj9KlJvCS+WK7ziCSjtih
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:07:16 2026 by rpki-client