Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/856Wd3UDjWdImatsm6KtufCCh6U.roa
File: 856Wd3UDjWdImatsm6KtufCCh6U.roa (raw, json)
Hash identifier: lYX9QA0aBoi+LQ8u1LYP+knS2sFw59AQvEi46d4FVTo=
Subject key identifier: F3:9E:96:77:75:03:8D:67:48:99:AB:6C:9B:A2:AD:B9:F0:82:87:A5
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 01A0E35F6359B0E2BAC065A64CD837C12BC6
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/856Wd3UDjWdImatsm6KtufCCh6U.roa
Signing time: Sun 27 Sep 2026 14:57:54 +0000
ROA not before: Sun 27 Sep 2026 14:57:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214078
IP address blocks: 87.107.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e3:5f:63:59:b0:e2:ba:c0:65:a6:4c:d8:37:c1:2b:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Sep 27 14:57:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f39e967775038d674899ab6c9ba2adb9f08287a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:f6:9e:d2:6a:6a:0d:44:e0:24:5b:83:df:82:
ad:1d:b4:3a:17:41:46:da:d8:c7:36:0c:5b:99:db:
6e:6e:bd:0b:c9:e3:c9:63:a6:03:dd:c9:d4:f2:f9:
69:3a:9d:ec:72:97:4d:95:75:8a:b5:50:2d:37:8c:
0f:ec:2d:6a:38:11:1e:89:ba:00:00:9b:2b:fe:a8:
85:78:e1:d8:aa:93:ee:f4:5d:7e:51:04:9c:68:07:
62:aa:8f:ed:70:80:64:9f:05:41:55:36:9e:8f:ad:
ef:5d:14:40:c0:83:03:cf:09:02:bf:9b:34:6a:e3:
d0:58:20:74:43:68:9e:4d:65:ad:4f:bb:5f:fd:6d:
32:93:63:2a:ac:d6:b7:7b:17:f7:ea:e4:36:16:a1:
3e:95:f0:33:bf:22:ba:2d:d1:45:79:06:02:21:6b:
63:ec:9d:4e:04:08:c4:85:2c:f8:ef:7f:4f:8f:cc:
bb:e0:be:b4:d0:bd:7d:42:40:45:3b:ec:55:1a:94:
f1:c4:96:ef:08:04:41:19:dc:33:4d:17:f0:32:29:
a4:f6:ee:8e:33:85:3c:1e:8f:c2:c6:85:d9:9d:4a:
bf:d9:46:72:cf:b8:39:65:83:60:d8:20:d8:fe:54:
0c:e8:a8:aa:32:77:78:0f:5b:99:ce:eb:03:8f:f4:
f3:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:9E:96:77:75:03:8D:67:48:99:AB:6C:9B:A2:AD:B9:F0:82:87:A5
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/856Wd3UDjWdImatsm6KtufCCh6U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.107.168.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:e4:08:4e:80:ff:55:1e:bf:bd:4b:3c:cf:67:c4:01:2e:c1:
cf:16:17:e5:de:60:a1:5f:e6:ad:16:44:b2:7c:1c:75:4a:7e:
f9:18:28:02:cf:dc:e7:0c:bb:6f:0c:af:f8:c5:1a:56:3b:5c:
98:50:df:36:e9:c4:9d:c3:30:1a:cb:d9:0b:15:4a:13:fe:89:
d6:28:c1:5c:a1:15:ba:72:dc:5b:a1:d4:fb:7a:a3:79:e7:bb:
f7:28:a5:62:6f:a3:15:cf:6b:b4:13:a0:e0:1a:e9:9b:c5:c0:
b0:54:2c:22:f8:42:bf:d3:7c:c3:e4:f2:f9:ee:0a:01:d9:0d:
34:e0:3f:a9:1a:43:4a:eb:e7:42:ef:40:ba:8e:8f:b8:81:9d:
3c:af:91:12:a5:3d:b6:b0:59:89:47:e2:cd:36:6a:dd:d5:45:
89:32:53:cc:2e:0d:95:b5:24:73:f4:8c:40:4d:fb:85:1b:6a:
de:89:db:47:5d:f5:90:79:48:62:a8:a3:67:55:90:a1:7e:5d:
01:c9:a4:8d:76:dc:ba:3f:b3:a5:c1:fc:41:e0:bb:23:fe:b4:
d9:b6:68:f9:85:f1:96:49:b5:82:84:5b:08:80:1f:17:b9:92:
a2:4b:c7:a3:45:4d:76:c5:82:92:6b:ff:20:4e:89:6a:ad:04:
0d:89:5b:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:50:02 2026 by rpki-client