Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/mHvontDFZrGJDv_gBEzMo3dLoD0.roa
File: mHvontDFZrGJDv_gBEzMo3dLoD0.roa (raw, json)
Hash identifier: LKgxkeejG7TqlgAKWNSoKlNdSblMi4mLolyl3RXUvbM=
Subject key identifier: 98:7B:E8:9E:D0:C5:66:B1:89:0E:FF:E0:04:4C:CC:A3:77:4B:A0:3D
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 019F83C1F6DDF8281410D7B534006D7BE58A
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/mHvontDFZrGJDv_gBEzMo3dLoD0.roa
Signing time: Tue 21 Jul 2026 08:19:14 +0000
ROA not before: Tue 21 Jul 2026 08:19:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214957
IP address blocks: 87.107.112.0/24 maxlen: 24
87.107.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:83:c1:f6:dd:f8:28:14:10:d7:b5:34:00:6d:7b:e5:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Jul 21 08:19:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=987be89ed0c566b1890effe0044ccca3774ba03d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f5:53:65:dd:02:84:53:d4:16:9b:23:64:8e:
84:9a:e9:56:ac:84:39:7e:7d:39:84:24:24:32:3b:
b7:f0:28:52:94:30:04:27:1e:77:dc:56:6d:5c:48:
a5:e0:fd:29:6e:41:2f:b8:72:0b:ae:7e:bb:42:6c:
c9:5b:b6:9e:4c:14:2c:ac:a8:0c:fa:70:63:3d:83:
3b:9c:c7:f4:cb:55:d6:dd:54:e4:9c:81:d1:cd:30:
3c:94:af:8e:5b:38:2d:05:e7:53:4d:05:d3:e9:7c:
3d:5e:92:cf:b0:0f:91:ed:4f:9e:87:66:2f:80:48:
19:b6:dc:6c:83:0d:b1:d3:a0:80:6b:1f:96:57:bf:
87:a3:24:d5:9d:d5:18:13:a6:ec:e6:46:b0:33:b5:
ed:e8:a9:32:d8:e2:98:f7:33:88:82:9c:a6:7b:e6:
17:1d:2d:74:db:0f:34:46:29:59:f8:77:40:25:e7:
79:e9:86:4b:00:99:a8:c0:95:76:06:45:64:34:0a:
25:65:b5:0d:53:07:18:ec:a4:b2:c2:9c:7f:92:75:
af:ae:b4:a9:18:a3:3f:5c:0d:ba:52:94:c9:56:14:
ff:d8:93:6e:9b:f0:38:b8:8f:9a:24:42:d9:f4:d5:
45:62:f6:be:f7:da:0f:50:7f:62:35:13:7e:eb:1f:
59:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:7B:E8:9E:D0:C5:66:B1:89:0E:FF:E0:04:4C:CC:A3:77:4B:A0:3D
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/mHvontDFZrGJDv_gBEzMo3dLoD0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.107.112.0/24
87.107.115.0/24
Signature Algorithm: sha256WithRSAEncryption
82:29:b8:96:07:66:04:9d:4f:91:d4:7b:45:72:44:b9:66:01:
d1:96:38:0d:4e:d5:ae:41:32:67:b8:11:ac:c9:71:72:33:68:
50:11:44:42:27:d2:b5:0c:64:8f:15:eb:75:3b:af:3d:2a:c0:
fc:98:84:2d:e8:69:64:64:dc:23:11:d0:f8:82:a9:a7:42:d8:
24:67:2e:f4:45:0f:89:8c:00:e7:99:21:51:34:65:7b:15:5d:
16:ea:31:91:41:7a:4a:28:25:a9:82:4a:b5:fb:99:92:c2:12:
22:5e:e4:7e:ea:0d:4d:ad:55:d5:76:6e:f0:5d:aa:5a:ca:29:
fc:17:03:d1:9f:92:37:22:ec:92:7b:10:df:83:4e:81:1b:02:
e3:e7:44:15:db:45:0c:22:03:12:79:0f:88:4f:3f:8b:b4:11:
a8:46:c7:d2:8d:3c:e5:21:f9:06:48:02:b7:1e:b9:d9:ef:20:
0d:89:a3:25:1b:36:bc:1a:d0:f9:22:93:2b:1b:8a:40:3f:41:
ff:2e:b6:45:ca:7c:6c:d4:28:ed:43:af:6a:66:2b:64:a6:20:
a2:cc:8b:a9:95:27:e4:dc:ed:55:24:f2:18:2f:ac:fc:da:89:
63:6c:71:e7:0d:7e:63:93:ea:ea:8c:01:c8:ee:f0:19:71:14:
11:aa:6e:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:37:30 2026 by rpki-client