Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/x8mGZEdn9EhHpd9rw9iRjDokh4M.roa
File: x8mGZEdn9EhHpd9rw9iRjDokh4M.roa (raw, json)
Hash identifier: 5PDo4ObkWtq/L/5EWyKtHUe4L2ZiT2Ls8ifhXVP3QQg=
Subject key identifier: C7:C9:86:64:47:67:F4:48:47:A5:DF:6B:C3:D8:91:8C:3A:24:87:83
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 01A1626B06A9E356A0DE88D4A844AD1D6AD2
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/x8mGZEdn9EhHpd9rw9iRjDokh4M.roa
Signing time: Thu 22 Oct 2026 07:02:23 +0000
ROA not before: Thu 22 Oct 2026 07:02:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218973
IP address blocks: 153.76.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 04:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:62:6b:06:a9:e3:56:a0:de:88:d4:a8:44:ad:1d:6a:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Oct 22 07:02:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c7c986644767f44847a5df6bc3d8918c3a248783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:38:c1:4d:ce:41:42:be:83:4a:e6:57:77:22:
44:f9:d6:80:f4:8b:0b:cb:68:3b:d2:98:3e:1f:7b:
5f:c7:f8:82:36:2d:2b:09:3c:cc:53:3a:ba:08:2b:
cb:93:8c:07:ac:3b:f4:e6:90:a5:62:41:bc:1b:e9:
52:30:25:a9:49:78:87:5f:d4:62:df:e1:b3:f5:10:
1c:7a:80:02:4e:4e:ed:2c:ce:26:56:bb:7c:6e:ec:
a4:a3:17:8d:05:46:22:de:d8:c6:be:47:27:ac:9f:
8c:d9:a5:d5:01:8a:31:2c:cb:70:73:d4:04:37:02:
f2:44:2d:f1:ac:c7:39:55:d5:ea:d8:9d:81:6f:84:
8a:7a:e9:04:19:9b:04:b0:11:d7:f8:98:6b:9c:4f:
ee:55:e9:1f:65:03:15:6b:c0:44:94:7d:c7:04:5c:
03:d9:d5:10:13:41:f2:f2:91:ad:98:45:20:d6:1b:
6f:a2:88:21:5a:15:4c:65:7d:e2:aa:9c:b9:6e:fe:
91:37:1b:7a:e8:e9:1e:a5:50:c1:9f:72:88:de:cd:
cb:42:45:ee:b5:ea:97:a7:fb:3e:22:1c:f4:a4:a3:
6b:a2:ca:21:a9:12:3b:26:17:fb:d0:8d:14:72:34:
c7:c6:bc:df:df:2a:4e:8b:cb:2d:38:99:f2:0a:94:
7e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:C9:86:64:47:67:F4:48:47:A5:DF:6B:C3:D8:91:8C:3A:24:87:83
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/x8mGZEdn9EhHpd9rw9iRjDokh4M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.76.10.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:17:8e:aa:32:c3:44:7b:8e:16:be:61:52:33:32:41:ff:1d:
cd:6f:3e:17:3a:75:5d:c5:5e:9c:f7:fa:de:6c:0c:a8:8c:8a:
ff:4e:ca:cd:88:50:ea:d4:47:e1:d0:03:17:59:b0:d8:aa:0b:
1e:3d:4e:a9:a1:b0:24:49:4b:1e:a5:68:89:56:60:96:55:0e:
51:8a:3f:59:45:2b:02:f2:c1:a2:74:d6:d5:3f:7d:46:28:ee:
c2:4f:ec:67:d6:3f:e9:c6:6e:1a:6e:67:d6:49:a1:3b:45:a2:
30:f3:33:c1:a0:04:76:7a:b7:fd:83:6b:23:04:bb:37:82:17:
50:c6:e0:95:b9:6b:cf:7e:06:35:fa:2e:bd:aa:70:38:39:7b:
ff:53:c8:61:b5:69:1f:d2:25:72:69:da:7e:d3:c3:3a:9f:40:
ff:87:36:f7:9c:11:ba:21:7f:b2:11:b7:6e:8e:3f:73:6a:d7:
c6:f7:f1:76:92:d9:2e:8e:ea:53:75:b8:6d:2d:33:ab:5d:5d:
91:4b:24:01:2a:0f:53:f5:f1:7f:1c:ac:84:2b:b7:7d:2a:79:
a6:9f:2d:2a:55:1b:0d:e5:47:03:9c:30:2d:4b:f3:e2:dc:01:
14:9f:26:29:0a:48:39:95:1b:f1:db:fe:09:f7:15:7d:31:90:
99:b1:49:40
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaFiawap41ag3ojUqEStHWrSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk
ZmUyMGYwHhcNMjYxMDIyMDcwMjIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjN2M5ODY2NDQ3NjdmNDQ4NDdhNWRmNmJjM2Q4OTE4YzNhMjQ4NzgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzjBTc5BQr6DSuZXdyJE+daA9IsL
y2g70pg+H3tfx/iCNi0rCTzMUzq6CCvLk4wHrDv05pClYkG8G+lSMCWpSXiHX9Ri
3+Gz9RAceoACTk7tLM4mVrt8buykoxeNBUYi3tjGvkcnrJ+M2aXVAYoxLMtwc9QE
NwLyRC3xrMc5VdXq2J2Bb4SKeukEGZsEsBHX+JhrnE/uVekfZQMVa8BElH3HBFwD
2dUQE0Hy8pGtmEUg1htvooghWhVMZX3iqpy5bv6RNxt66OkepVDBn3KI3s3LQkXu
teqXp/s+Ihz0pKNrosohqRI7Jhf70I0UcjTHxrzf3ypOi8stOJnyCpR+qQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMfJhmRHZ/RIR6Xfa8PYkYw6JIeDMB8GA1UdIwQY
MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct
YjcxNzk4MGU0YWQ2LzEveDhtR1pFZG45RWhIcGQ5cnc5aVJqRG9raDRNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2
LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmUwKMA0G
CSqGSIb3DQEBCwUAA4IBAQBMF46qMsNEe44WvmFSMzJB/x3Nbz4XOnVdxV6c9/re
bAyojIr/TsrNiFDq1Efh0AMXWbDYqgsePU6pobAkSUsepWiJVmCWVQ5Rij9ZRSsC
8sGidNbVP31GKO7CT+xn1j/pxm4abmfWSaE7RaIw8zPBoAR2erf9g2sjBLs3ghdQ
xuCVuWvPfgY1+i69qnA4OXv/U8hhtWkf0iVyadp+08M6n0D/hzb3nBG6IX+yEbdu
jj9zatfG9/F2ktkujupTdbhtLTOrXV2RSyQBKg9T9fF/HKyEK7d9Knmmny0qVRsN
5UcDnDAtS/Pi3AEUnyYpCkg5lRvx2/4J9xV9MZCZsUlA
-----END CERTIFICATE-----
Generated at Thu Oct 29 14:01:16 2026 by rpki-client