Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/Nr91FsYqmeZ7EY-rEk4o6Nqzd74.roa
File: Nr91FsYqmeZ7EY-rEk4o6Nqzd74.roa (raw, json)
Hash identifier: bbKv5SAvzjfvXLazQuuzke2OUcvEBZD0/ELG8ngnFRY=
Subject key identifier: 36:BF:75:16:C6:2A:99:E6:7B:11:8F:AB:12:4E:28:E8:DA:B3:77:BE
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 019DCF3A22DD7C789B929E96B39AE1BDF28A
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/Nr91FsYqmeZ7EY-rEk4o6Nqzd74.roa
Signing time: Mon 27 Apr 2026 13:56:26 +0000
ROA not before: Mon 27 Apr 2026 13:56:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214016
IP address blocks: 153.76.3.0/24 maxlen: 24
2a0f:b244:1000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:3a:22:dd:7c:78:9b:92:9e:96:b3:9a:e1:bd:f2:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Apr 27 13:56:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=36bf7516c62a99e67b118fab124e28e8dab377be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:21:5f:82:49:3a:ff:70:f7:b9:5e:ab:d2:01:
13:99:04:0f:ab:2e:e0:a7:49:eb:d4:80:20:a1:06:
be:58:c5:60:c2:75:d9:83:75:e3:c5:dd:e8:01:74:
e8:95:0a:17:f4:63:42:5e:69:ee:70:39:84:05:01:
38:bb:bb:99:f8:22:e3:f5:bc:96:82:d1:a2:c2:09:
5e:80:f8:bc:21:be:48:b7:26:db:b6:d7:b6:cc:0f:
cc:51:f3:59:5f:2a:c5:26:67:ba:ef:f2:1a:b5:00:
fc:68:eb:a3:27:0e:f1:aa:ce:36:f1:85:df:5d:b2:
53:2f:02:df:a9:ba:19:41:bd:a7:24:b1:8f:8f:69:
64:6f:c8:05:30:33:17:d3:c5:78:67:e5:82:b0:06:
b5:26:6d:a3:38:ad:70:96:37:4e:49:36:63:dc:db:
21:93:a0:61:fd:91:e2:c0:6b:32:1e:08:8f:43:b0:
17:62:c7:e3:44:eb:66:22:23:54:77:34:c3:82:81:
d3:c3:3d:da:29:7d:3d:46:bf:c6:bb:e7:8f:4a:9f:
ed:cf:b0:2d:11:a6:6f:50:4e:70:16:b1:39:da:29:
2c:b9:08:23:f2:78:11:c9:53:4e:c9:3c:eb:9a:8a:
c7:43:9b:1d:87:01:98:02:82:15:ab:0d:58:8a:9b:
d9:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:BF:75:16:C6:2A:99:E6:7B:11:8F:AB:12:4E:28:E8:DA:B3:77:BE
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/Nr91FsYqmeZ7EY-rEk4o6Nqzd74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.76.3.0/24
IPv6:
2a0f:b244:1000::/36
Signature Algorithm: sha256WithRSAEncryption
85:2d:7b:5f:c1:7a:61:f0:78:b8:38:cf:2c:81:28:e4:79:b5:
88:e6:fe:23:e5:96:07:4a:7d:fb:6d:d9:4e:df:30:12:3a:fb:
7f:2c:de:fa:c9:90:ec:92:ca:ec:eb:09:40:48:93:f2:60:27:
cd:7b:41:c1:2a:93:70:52:4f:36:45:11:1b:6a:fa:3d:b8:33:
b4:2e:f0:0c:46:1d:e3:80:f7:86:75:90:05:dc:4b:7d:a9:8c:
db:85:c1:a2:34:e9:45:40:5a:a7:71:c9:7c:77:8f:2d:27:02:
ae:31:f5:29:4d:39:81:9e:88:eb:bb:37:e5:2f:b4:8c:f3:f2:
b8:b2:87:40:dd:ec:c5:c7:15:40:c4:bd:aa:b6:e6:e6:59:cf:
be:78:75:2f:c2:df:0b:66:7f:72:53:c3:1c:c9:4b:44:c6:e7:
7a:4f:63:2c:41:b2:0b:00:a1:0a:07:39:3f:ae:8d:12:85:b7:
0a:57:1e:2a:1e:7b:6c:01:aa:01:f1:1c:2c:2c:9a:b3:a7:f6:
ee:c4:e1:74:0c:ae:42:7b:65:af:b2:47:ed:16:00:65:a6:c9:
87:ee:5c:d4:22:dd:42:d5:fd:4b:aa:70:0f:36:8b:e4:fb:8f:
8b:4b:b0:24:19:9e:9f:20:3d:23:f3:d8:1e:f9:f5:73:b1:14:
d3:8f:ce:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:42:01 2026 by rpki-client