Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/2wNIxLrErEwaiaQ_0tMu-nR6mZM.roa
File: 2wNIxLrErEwaiaQ_0tMu-nR6mZM.roa (raw, json)
Hash identifier: x/yVim4tlid8AC13PD5BkCiF+3JiZG4z11fTL6yMwoE=
Subject key identifier: DB:03:48:C4:BA:C4:AC:4C:1A:89:A4:3F:D2:D3:2E:FA:74:7A:99:93
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 01A02F01465DBDA7DBFEB4D83476C0A3DAD3
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/2wNIxLrErEwaiaQ_0tMu-nR6mZM.roa
Signing time: Sun 23 Aug 2026 14:23:27 +0000
ROA not before: Sun 23 Aug 2026 14:23:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214475
IP address blocks: 87.107.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 05:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:2f:01:46:5d:bd:a7:db:fe:b4:d8:34:76:c0:a3:da:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Aug 23 14:23:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=db0348c4bac4ac4c1a89a43fd2d32efa747a9993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:fa:c6:07:51:df:96:43:90:1f:95:8c:c7:bb:
79:a5:3e:ea:1d:b5:6d:21:cc:5e:8d:b1:31:20:8c:
a7:3d:21:f7:ae:c4:f3:a3:d4:23:ff:3f:e5:48:b2:
a6:b0:c1:4f:21:aa:d3:58:93:b7:5b:3e:89:c1:5c:
e5:7a:87:5d:9d:4f:a1:28:bd:cf:ab:c8:7e:56:9d:
ed:20:83:bd:ad:58:9a:15:3f:41:6a:3c:e8:28:9c:
65:0c:9a:50:95:20:05:38:39:d7:66:52:06:ba:66:
0f:bb:5a:08:12:c8:36:ad:30:28:73:17:7c:b7:78:
df:e4:3a:90:5c:e9:88:be:8b:95:3d:db:61:22:9a:
d4:ac:a0:59:7c:f1:0b:d0:f7:98:81:f2:63:59:4f:
3a:d2:8d:fa:19:fd:b2:37:8f:b9:b8:c8:12:dc:0e:
c8:18:d8:35:ec:98:7f:23:3a:1b:0f:5d:85:c1:7c:
98:73:11:a9:4b:0d:a9:59:97:6b:76:21:bc:9d:19:
f0:f9:24:32:86:ae:21:87:77:05:03:69:e3:d5:4e:
2a:61:8c:f3:47:23:0f:b6:b1:b6:95:35:66:db:ad:
58:70:54:3e:28:ea:bc:0a:5e:92:13:27:5a:cd:63:
e1:c1:50:28:68:06:d9:b6:c8:61:b2:eb:18:1f:1f:
81:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:03:48:C4:BA:C4:AC:4C:1A:89:A4:3F:D2:D3:2E:FA:74:7A:99:93
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/2wNIxLrErEwaiaQ_0tMu-nR6mZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.107.151.0/24
Signature Algorithm: sha256WithRSAEncryption
18:39:fd:5d:96:e0:79:45:0c:e2:83:30:f1:0b:f6:ca:d0:66:
cf:a1:de:d1:12:7d:6d:05:bf:ec:6c:d2:fa:7e:49:96:f3:0a:
fc:d8:f8:41:5c:fc:3f:18:79:55:38:9a:70:1c:05:f0:5f:6a:
7f:b0:9f:10:9a:7e:06:2a:82:48:64:41:f7:f3:cd:01:68:dd:
39:e1:f7:1a:5d:05:4f:f3:ab:2f:8f:39:d9:c7:07:da:8b:e3:
fd:ce:7a:d8:b2:04:87:a6:62:f2:b0:bd:c7:d0:11:ed:79:a6:
d4:00:b8:1f:04:96:fe:45:2e:c3:a9:04:4c:f2:f0:6e:d6:4f:
ca:50:81:c2:68:8e:d0:22:c7:41:61:ea:22:f0:09:88:48:ab:
83:94:08:bd:6c:f6:d7:e0:50:50:43:a4:eb:6a:ba:4d:c9:08:
47:82:a3:96:ad:de:c2:fd:5a:be:37:70:34:a4:4e:53:df:46:
1d:c5:79:96:c2:f1:7e:04:82:c3:4b:c8:89:76:23:c7:00:35:
b2:7e:af:52:3b:02:e9:88:10:83:a3:ba:15:da:f4:e7:1a:ed:
49:e4:56:73:95:4c:9a:a2:82:d0:1f:b9:8f:98:f0:2d:91:8c:
ec:d7:74:e7:cd:88:11:3d:56:d7:ea:b4:7b:f8:ab:e4:ab:76:
28:57:9c:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:27:55 2026 by rpki-client