Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/ENF7KpauidkKBlCUOJuh4l5WWEw.roa
File: ENF7KpauidkKBlCUOJuh4l5WWEw.roa (raw, json)
Hash identifier: 6j6DCJtb7cbFMskuZniFc9Q9XZ63fzDdHCAd0kTIRPk=
Subject key identifier: 10:D1:7B:2A:96:AE:89:D9:0A:06:50:94:38:9B:A1:E2:5E:56:58:4C
Certificate issuer: /CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Certificate serial: 01A0F7702CB9955DF6D5523E2A269253F686
Authority key identifier: FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/ENF7KpauidkKBlCUOJuh4l5WWEw.roa
Signing time: Thu 01 Oct 2026 12:28:38 +0000
ROA not before: Thu 01 Oct 2026 12:28:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218661
IP address blocks: 87.232.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 23:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f7:70:2c:b9:95:5d:f6:d5:52:3e:2a:26:92:53:f6:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Validity
Not Before: Oct 1 12:28:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=10d17b2a96ae89d90a065094389ba1e25e56584c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:63:8c:98:44:2e:9b:b6:35:b2:0b:07:7d:b6:
8b:c7:32:c7:49:65:26:2c:1f:4e:5c:33:fc:38:a9:
33:09:21:aa:e1:fc:70:82:f1:32:38:4e:58:24:f1:
25:43:1f:99:ef:8f:6f:9a:f2:1a:47:60:83:79:38:
ef:9f:96:73:60:87:c0:d6:96:13:e0:05:82:fd:50:
6c:fb:63:32:3c:72:55:cc:1f:cb:4a:92:30:25:f4:
23:ac:9f:33:e4:23:22:80:80:51:17:75:8a:e7:60:
ab:03:d2:7c:cd:37:19:03:67:08:1a:27:96:ac:ca:
91:0f:f8:48:1c:b4:af:88:88:56:39:1f:37:49:8a:
99:72:0f:9b:f5:55:9f:6a:04:b0:12:9d:77:ba:60:
2b:36:14:3d:df:8c:b1:f2:4a:0b:69:03:fa:4f:b3:
ea:60:33:7f:17:20:3d:83:8e:f5:8e:94:24:cd:90:
ef:05:e6:f9:99:92:6c:66:2f:6d:29:c6:f8:8a:57:
16:7a:e2:75:6d:ad:8a:1a:a9:43:ed:b1:75:8c:29:
f5:e4:1f:6b:7a:cb:e5:f6:77:94:f0:f0:c4:fe:26:
9f:b5:d3:2d:77:31:f3:42:28:cd:31:cd:80:9c:e6:
d9:26:58:29:32:3f:ab:69:31:1d:12:94:93:eb:09:
18:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:D1:7B:2A:96:AE:89:D9:0A:06:50:94:38:9B:A1:E2:5E:56:58:4C
X509v3 Authority Key Identifier:
keyid:FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/ENF7KpauidkKBlCUOJuh4l5WWEw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.232.99.0/24
Signature Algorithm: sha256WithRSAEncryption
80:c9:f3:6a:53:9c:5a:7d:7e:23:b6:ca:cc:d9:9e:6f:73:f0:
5a:92:21:f2:99:e1:1c:45:40:f1:90:d0:6d:15:0c:7a:ef:0c:
62:81:90:b3:39:60:e5:1d:29:09:df:c3:b1:bc:0b:58:57:78:
14:4b:0e:88:6f:cd:02:8f:95:c2:d2:15:be:13:25:7a:12:4e:
75:b9:23:15:d1:64:65:06:53:3e:b2:3b:32:ec:50:bb:cc:1e:
75:1b:8d:78:a1:d8:8b:f9:db:0a:91:4f:f6:e9:91:c2:86:91:
de:d5:6e:a3:dd:91:e4:07:e4:a9:89:22:a4:b1:31:8f:23:a9:
32:de:64:82:53:c8:65:a1:ac:a7:71:6b:fb:59:eb:80:ac:73:
7a:ed:6c:85:87:02:8c:12:22:a1:a6:2e:d8:f3:45:10:71:ff:
37:90:de:cc:35:94:4c:db:c8:b1:44:cc:82:0e:b3:df:c9:c2:
59:71:6e:34:63:8c:d8:e7:05:d7:56:a5:30:d5:b8:1d:00:02:
e7:ae:a3:74:9b:65:ea:80:b9:6f:41:68:72:73:cb:90:8f:9e:
11:4b:a7:0d:2e:27:c4:3d:81:67:7c:f4:e7:39:22:e0:1f:51:
ca:d7:25:cd:69:e0:1f:b8:ae:f1:47:b2:c8:c5:6f:13:f8:68:
9f:19:f6:ca
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaD3cCy5lV321VI+KiaSU/aGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmYTNlNTUxNDFjMWExZjlmMmUyODgxMWVkN2U3N2ZhZDM3
OGE1NzkwHhcNMjYxMDAxMTIyODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMGQxN2IyYTk2YWU4OWQ5MGEwNjUwOTQzODliYTFlMjVlNTY1ODRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2OMmEQum7Y1sgsHfbaLxzLHSWUm
LB9OXDP8OKkzCSGq4fxwgvEyOE5YJPElQx+Z749vmvIaR2CDeTjvn5ZzYIfA1pYT
4AWC/VBs+2MyPHJVzB/LSpIwJfQjrJ8z5CMigIBRF3WK52CrA9J8zTcZA2cIGieW
rMqRD/hIHLSviIhWOR83SYqZcg+b9VWfagSwEp13umArNhQ934yx8koLaQP6T7Pq
YDN/FyA9g471jpQkzZDvBeb5mZJsZi9tKcb4ilcWeuJ1ba2KGqlD7bF1jCn15B9r
esvl9neU8PDE/iaftdMtdzHzQijNMc2AnObZJlgpMj+raTEdEpST6wkYNQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBDReyqWronZCgZQlDiboeJeVlhMMB8GA1UdIwQY
MBaAFP+j5VFBwaH58uKIEe1+d/rTeKV5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzZQbFVVSEJvZm55NG9nUjdYNTMtdE40cFhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9iMjYzYTItMGY2Zi00ZjVkLWFmOWUt
YTM5YWMyNTM5ZmM1LzEvRU5GN0twYXVpZGtLQmxDVU9KdWg0bDVXV0V3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9iMjYzYTItMGY2Zi00ZjVkLWFmOWUtYTM5YWMyNTM5ZmM1
LzEvXzZQbFVVSEJvZm55NG9nUjdYNTMtdE40cFhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV+hjMA0G
CSqGSIb3DQEBCwUAA4IBAQCAyfNqU5xafX4jtsrM2Z5vc/BakiHymeEcRUDxkNBt
FQx67wxigZCzOWDlHSkJ38OxvAtYV3gUSw6Ib80Cj5XC0hW+EyV6Ek51uSMV0WRl
BlM+sjsy7FC7zB51G414odiL+dsKkU/26ZHChpHe1W6j3ZHkB+SpiSKksTGPI6ky
3mSCU8hloayncWv7WeuArHN67WyFhwKMEiKhpi7Y80UQcf83kN7MNZRM28ixRMyC
DrPfycJZcW40Y4zY5wXXVqUw1bgdAALnrqN0m2XqgLlvQWhyc8uQj54RS6cNLifE
PYFnfPTnOSLgH1HK1yXNaeAfuK7xR7LIxW8T+GifGfbK
-----END CERTIFICATE-----
Generated at Tue Oct 13 08:50:42 2026 by rpki-client