Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/71YncSJQlDMBv06M_6kOKUnfecc.roa
File: 71YncSJQlDMBv06M_6kOKUnfecc.roa (raw, json)
Hash identifier: TJHRTwGakbwGF7fBtVksI2N9K6RSzq34lOF8ESQFiNo=
Subject key identifier: EF:56:27:71:22:50:94:33:01:BF:4E:8C:FF:A9:0E:29:49:DF:79:C7
Certificate issuer: /CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Certificate serial: 019E54DCCC9876F9F7DF3257B789654FB412
Authority key identifier: FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/71YncSJQlDMBv06M_6kOKUnfecc.roa
Signing time: Sat 23 May 2026 12:43:36 +0000
ROA not before: Sat 23 May 2026 12:43:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2914
IP address blocks: 87.232.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 May 2026 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:54:dc:cc:98:76:f9:f7:df:32:57:b7:89:65:4f:b4:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Validity
Not Before: May 23 12:43:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ef5627712250943301bf4e8cffa90e2949df79c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:de:98:ef:0c:64:c2:11:d5:27:f4:e8:01:9b:
da:ea:15:e7:ea:cc:db:35:a4:f6:c0:1a:4e:17:9f:
6e:e9:d2:41:88:52:68:96:8f:dc:6e:bf:5a:f3:79:
df:11:9c:3a:61:41:15:9e:44:ec:e8:67:6e:a2:59:
83:42:a4:5b:a2:12:aa:88:f4:84:ef:55:76:f9:a9:
ff:68:45:04:2b:8a:96:a5:06:29:44:89:41:1d:0c:
d4:13:7c:60:c9:95:3e:05:df:88:56:53:02:3e:87:
51:a4:ae:ac:05:53:93:bc:ea:69:1e:33:09:55:19:
cd:f8:07:0c:5d:be:d7:0e:73:6f:3e:9e:04:09:93:
74:11:6e:52:84:24:7e:92:49:a3:df:ec:5c:87:50:
36:5b:41:de:68:5e:2d:92:83:cb:95:bf:7d:c2:26:
4b:0e:50:d6:d0:ea:b2:c2:cb:ad:04:62:8b:70:d7:
51:12:53:59:d0:91:9b:13:a4:d7:6d:11:ac:2c:2d:
48:a6:18:79:a5:39:a6:df:d2:64:18:fa:5d:3f:09:
54:29:ea:73:78:cd:23:61:ef:a7:93:28:4b:cc:38:
cd:86:d2:a6:df:3c:76:25:95:c8:79:3c:f3:36:f7:
d9:52:66:91:76:6f:14:fe:78:4d:15:09:ad:53:dc:
95:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:56:27:71:22:50:94:33:01:BF:4E:8C:FF:A9:0E:29:49:DF:79:C7
X509v3 Authority Key Identifier:
keyid:FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/71YncSJQlDMBv06M_6kOKUnfecc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.232.110.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:98:7e:85:f1:db:69:b1:36:7c:fb:0e:21:63:9b:eb:fd:81:
ed:4d:60:9b:36:3c:ff:a8:f4:63:1e:2e:23:cd:53:15:07:72:
f3:bd:ee:e8:9e:c8:f1:e1:53:01:37:bc:27:71:48:5a:13:06:
d1:cb:56:dc:0e:3a:2f:72:9b:fe:11:52:e6:84:88:9a:5f:a4:
dd:9f:d7:d8:72:36:17:8d:e0:62:86:c0:bf:f6:4f:f1:f0:2a:
11:59:5d:38:32:e1:3d:ba:45:6e:cf:49:85:40:d6:24:62:1d:
ae:ba:ea:e6:88:85:b3:f3:43:6f:08:fc:aa:33:8b:93:a0:0f:
dd:27:ff:60:70:c6:b7:ab:d7:19:68:2b:b4:99:21:32:4a:d0:
b7:05:4e:9c:1c:08:11:91:bc:d5:68:45:30:c7:ec:ae:82:68:
a2:75:92:dc:17:f7:a7:c1:ee:ed:a4:4d:d5:fc:f2:49:bc:a7:
d0:c6:de:6b:6b:a8:8f:f8:a0:28:1f:bb:a7:3e:74:d7:52:16:
9b:5b:bf:a8:7b:fb:a1:ca:e2:e7:15:70:98:29:e1:0e:ca:8d:
9e:77:7e:6d:1e:f6:1e:fb:60:5f:12:71:eb:e4:de:bf:04:38:
1e:ff:d7:4d:c5:cd:57:2c:8e:7a:b6:07:a3:26:be:f6:df:d0:
35:ca:9e:b1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ5U3MyYdvn33zJXt4llT7QSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmYTNlNTUxNDFjMWExZjlmMmUyODgxMWVkN2U3N2ZhZDM3
OGE1NzkwHhcNMjYwNTIzMTI0MzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZjU2Mjc3MTIyNTA5NDMzMDFiZjRlOGNmZmE5MGUyOTQ5ZGY3OWM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6d6Y7wxkwhHVJ/ToAZva6hXn6szb
NaT2wBpOF59u6dJBiFJolo/cbr9a83nfEZw6YUEVnkTs6GduolmDQqRbohKqiPSE
71V2+an/aEUEK4qWpQYpRIlBHQzUE3xgyZU+Bd+IVlMCPodRpK6sBVOTvOppHjMJ
VRnN+AcMXb7XDnNvPp4ECZN0EW5ShCR+kkmj3+xch1A2W0HeaF4tkoPLlb99wiZL
DlDW0OqywsutBGKLcNdRElNZ0JGbE6TXbRGsLC1Iphh5pTmm39JkGPpdPwlUKepz
eM0jYe+nkyhLzDjNhtKm3zx2JZXIeTzzNvfZUmaRdm8U/nhNFQmtU9yVRwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO9WJ3EiUJQzAb9OjP+pDilJ33nHMB8GA1UdIwQY
MBaAFP+j5VFBwaH58uKIEe1+d/rTeKV5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzZQbFVVSEJvZm55NG9nUjdYNTMtdE40cFhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9iMjYzYTItMGY2Zi00ZjVkLWFmOWUt
YTM5YWMyNTM5ZmM1LzEvNzFZbmNTSlFsRE1CdjA2TV82a09LVW5mZWNjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9iMjYzYTItMGY2Zi00ZjVkLWFmOWUtYTM5YWMyNTM5ZmM1
LzEvXzZQbFVVSEJvZm55NG9nUjdYNTMtdE40cFhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV+huMA0G
CSqGSIb3DQEBCwUAA4IBAQA8mH6F8dtpsTZ8+w4hY5vr/YHtTWCbNjz/qPRjHi4j
zVMVB3Lzve7onsjx4VMBN7wncUhaEwbRy1bcDjovcpv+EVLmhIiaX6Tdn9fYcjYX
jeBihsC/9k/x8CoRWV04MuE9ukVuz0mFQNYkYh2uuurmiIWz80NvCPyqM4uToA/d
J/9gcMa3q9cZaCu0mSEyStC3BU6cHAgRkbzVaEUwx+yugmiidZLcF/enwe7tpE3V
/PJJvKfQxt5ra6iP+KAoH7unPnTXUhabW7+oe/uhyuLnFXCYKeEOyo2ed35tHvYe
+2BfEnHr5N6/BDge/9dNxc1XLI56tgejJr7239A1yp6x
-----END CERTIFICATE-----
Generated at Sat May 23 17:46:24 2026 by rpki-client