Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/Axn0R7EhAOE5mhDJmMuqtrORZCM.roa
File: Axn0R7EhAOE5mhDJmMuqtrORZCM.roa (raw, json)
Hash identifier: q+ew8PEd1DHPPWAh092VbU3WTrzgIox9lcS202MdUjs=
Subject key identifier: 03:19:F4:47:B1:21:00:E1:39:9A:10:C9:98:CB:AA:B6:B3:91:64:23
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 01A16C5D24C6929FF57F2BBE6168CE2F5CB4
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/Axn0R7EhAOE5mhDJmMuqtrORZCM.roa
Signing time: Sat 24 Oct 2026 05:23:25 +0000
ROA not before: Sat 24 Oct 2026 05:23:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210578
IP address blocks: 153.76.11.0/24 maxlen: 24
2a0f:b240:7700::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6c:5d:24:c6:92:9f:f5:7f:2b:be:61:68:ce:2f:5c:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Oct 24 05:23:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0319f447b12100e1399a10c998cbaab6b3916423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:e1:b6:67:d7:79:d1:4b:ac:78:d5:5e:29:c5:
4e:b1:0d:f2:42:47:4e:bb:ed:c7:a3:9c:55:1b:13:
e7:3a:e1:c8:74:ad:9a:26:ef:07:d0:da:cd:78:ae:
b0:b8:d8:4c:08:5a:50:62:03:0d:7a:4c:91:f9:64:
7f:2b:aa:b5:52:6f:0f:2a:2b:7c:5d:c7:88:d9:c8:
78:24:b0:33:38:bd:aa:e6:89:7d:02:73:a6:38:c2:
ee:47:95:8f:3f:23:d6:80:bc:74:b4:c2:56:b3:53:
eb:3d:74:98:9f:67:11:65:16:0c:5a:a3:9d:86:1f:
24:bc:2f:b2:c3:69:38:fd:11:9c:ed:cc:b9:f0:32:
f9:a2:93:59:89:2b:b5:08:1d:60:79:b1:b0:3f:60:
95:89:ba:a6:97:19:a0:88:bb:2d:6d:19:eb:46:12:
dc:c9:ef:ef:3b:55:96:dc:f6:07:ca:60:65:df:5d:
51:1f:8a:78:63:7c:c4:91:10:e4:d4:f6:23:fe:cc:
04:eb:6f:1f:28:ff:f6:a0:f6:8e:ce:d9:bd:05:5e:
25:8b:4b:0a:6b:e4:f1:25:ac:37:03:82:d2:6f:fa:
96:b1:38:8d:cb:36:b5:f7:ec:d9:90:5b:d4:61:34:
ac:a9:3a:66:ba:0e:2b:45:b3:2f:86:38:ae:ad:ef:
43:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:19:F4:47:B1:21:00:E1:39:9A:10:C9:98:CB:AA:B6:B3:91:64:23
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/Axn0R7EhAOE5mhDJmMuqtrORZCM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.76.11.0/24
IPv6:
2a0f:b240:7700::/40
Signature Algorithm: sha256WithRSAEncryption
88:f0:cb:ae:e7:f5:67:44:d5:03:ae:75:23:bd:d5:16:af:ab:
82:01:54:5c:5d:e4:8a:19:e9:5d:74:e6:de:b6:47:48:eb:b4:
ac:27:30:f0:ff:b7:87:d9:57:d3:75:c9:8d:6d:4e:46:d7:52:
74:ba:b4:85:e0:84:18:f4:25:34:71:db:5a:99:97:b8:9b:cb:
34:d4:eb:08:18:37:7c:ec:5b:87:a8:4b:72:1e:15:03:af:bb:
26:33:dd:30:b1:cf:7b:c1:8f:1f:43:05:5a:20:7d:69:69:d6:
87:0d:2c:12:d7:ad:fd:38:9a:be:2e:78:45:a8:08:b1:fe:3b:
06:63:a5:51:b4:38:6f:c4:61:d3:15:77:40:c4:b6:f1:b0:9e:
0f:15:3f:b7:53:76:14:ff:65:31:0f:eb:53:8d:63:2c:ab:34:
dd:67:0e:ea:04:19:b5:36:35:5d:41:70:fe:51:80:58:40:35:
5d:76:ca:37:54:0d:e5:28:6f:56:bd:10:64:cc:6a:bc:0d:f7:
c3:e6:b3:b4:22:48:b1:69:5a:a5:35:11:ea:15:be:52:46:d1:
74:de:d7:d2:99:d8:f6:9c:06:ed:59:13:b1:ed:8b:5c:ef:49:
56:4a:77:46:8e:57:a1:bb:8c:70:0a:05:c6:22:82:b8:10:c1:
bc:20:f7:75
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgISAaFsXSTGkp/1fyu+YWjOL1y0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk
ZmUyMGYwHhcNMjYxMDI0MDUyMzI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMzE5ZjQ0N2IxMjEwMGUxMzk5YTEwYzk5OGNiYWFiNmIzOTE2NDIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8eG2Z9d50UuseNVeKcVOsQ3yQkdO
u+3Ho5xVGxPnOuHIdK2aJu8H0NrNeK6wuNhMCFpQYgMNekyR+WR/K6q1Um8PKit8
XceI2ch4JLAzOL2q5ol9AnOmOMLuR5WPPyPWgLx0tMJWs1PrPXSYn2cRZRYMWqOd
hh8kvC+yw2k4/RGc7cy58DL5opNZiSu1CB1gebGwP2CVibqmlxmgiLstbRnrRhLc
ye/vO1WW3PYHymBl311RH4p4Y3zEkRDk1PYj/swE628fKP/2oPaOztm9BV4li0sK
a+TxJaw3A4LSb/qWsTiNyza19+zZkFvUYTSsqTpmug4rRbMvhjiure9DnwIDAQAB
o4ICGTCCAhUwHQYDVR0OBBYEFAMZ9EexIQDhOZoQyZjLqrazkWQjMB8GA1UdIwQY
MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct
YjcxNzk4MGU0YWQ2LzEvQXhuMFI3RWhBT0U1bWhESm1NdXF0ck9SWkNNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2
LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAmUwLMA4E
AgACMAgDBgAqD7JAdzANBgkqhkiG9w0BAQsFAAOCAQEAiPDLruf1Z0TVA651I73V
Fq+rggFUXF3kihnpXXTm3rZHSOu0rCcw8P+3h9lX03XJjW1ORtdSdLq0heCEGPQl
NHHbWpmXuJvLNNTrCBg3fOxbh6hLch4VA6+7JjPdMLHPe8GPH0MFWiB9aWnWhw0s
Etet/Tiavi54RagIsf47BmOlUbQ4b8Rh0xV3QMS28bCeDxU/t1N2FP9lMQ/rU41j
LKs03WcO6gQZtTY1XUFw/lGAWEA1XXbKN1QN5ShvVr0QZMxqvA33w+aztCJIsWla
pTUR6hW+UkbRdN7X0pnY9pwG7VkTse2LXO9JVkp3Ro5XobuMcAoFxiKCuBDBvCD3
dQ==
-----END CERTIFICATE-----
Generated at Wed Oct 28 14:52:00 2026 by rpki-client