Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/S30Yx6aLKKlF5VzH1TQRTvHn7pg.roa
File: S30Yx6aLKKlF5VzH1TQRTvHn7pg.roa (raw, json)
Hash identifier: gZk9Og6lMa5+irnZJ9WVzi0BSJCyQ63rHBd02siG+qA=
Subject key identifier: 4B:7D:18:C7:A6:8B:28:A9:45:E5:5C:C7:D5:34:11:4E:F1:E7:EE:98
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 01A17242D8B5E8F92A5A90D8A2655B9115A8
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/S30Yx6aLKKlF5VzH1TQRTvHn7pg.roa
Signing time: Sun 25 Oct 2026 08:52:25 +0000
ROA not before: Sun 25 Oct 2026 08:52:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213807
IP address blocks: 87.107.172.0/23 maxlen: 24
87.107.188.0/23 maxlen: 24
87.107.196.0/22 maxlen: 24
87.107.200.0/23 maxlen: 24
87.107.202.0/24 maxlen: 24
87.107.203.0/24 maxlen: 24
87.107.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:72:42:d8:b5:e8:f9:2a:5a:90:d8:a2:65:5b:91:15:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Oct 25 08:52:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4b7d18c7a68b28a945e55cc7d534114ef1e7ee98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b9:5a:05:bd:ed:11:61:cb:51:76:65:47:52:
bc:2d:68:16:c4:22:50:17:7f:9d:f6:b4:f2:a0:06:
c9:d4:dc:09:b8:03:45:fd:b4:d1:4f:04:33:f4:8e:
01:ae:b3:93:21:5c:e0:79:80:c5:ac:53:ef:77:66:
14:28:88:26:76:ab:eb:b8:e1:a6:ad:22:0d:51:5a:
35:65:27:74:a3:9a:24:74:ae:bd:70:1c:68:a7:9b:
20:89:cf:11:df:fc:ec:67:17:86:77:23:ed:3d:5a:
f0:3a:cc:26:b8:a6:ef:84:a4:57:ec:a6:5d:0d:04:
37:6b:4f:9a:3a:a3:39:1d:d5:35:42:84:a9:fe:82:
39:81:2b:ac:af:63:70:38:8f:67:39:9e:ef:1b:b0:
82:c6:42:74:e3:fb:86:b0:3d:72:c8:a0:03:11:91:
bf:70:d3:72:45:7c:4b:f9:57:6e:d0:e4:75:c8:b0:
bf:bc:9d:07:98:06:20:57:75:68:a1:4d:76:b6:2b:
73:9f:a8:28:50:9b:06:48:f7:15:16:37:1c:4c:8d:
35:78:99:2f:c1:ba:c6:98:62:e0:f6:87:c5:56:5f:
d4:29:1e:12:b6:52:9c:e5:e5:eb:1b:f6:b9:68:34:
01:9d:70:28:f0:b6:f0:d8:0a:07:bf:08:e6:47:21:
93:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:7D:18:C7:A6:8B:28:A9:45:E5:5C:C7:D5:34:11:4E:F1:E7:EE:98
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/S30Yx6aLKKlF5VzH1TQRTvHn7pg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.107.172.0/23
87.107.188.0/23
87.107.196.0-87.107.204.255
Signature Algorithm: sha256WithRSAEncryption
9f:d6:b7:bd:97:c1:c1:8b:fd:2b:19:c1:68:6e:a0:90:6d:75:
d4:aa:f7:d5:92:bf:89:62:3a:3a:1d:44:78:9e:6e:cd:cd:28:
4f:d2:c7:71:0b:a2:b5:6e:d2:63:a0:42:4b:8c:bf:82:c4:a2:
71:f1:95:49:f9:75:61:c2:14:d4:84:f6:ae:42:e7:97:b1:f7:
32:f6:57:1a:ad:ec:c6:ba:ed:dd:60:a1:dd:40:fa:bd:f5:21:
82:86:d8:06:e2:bb:53:5f:3d:85:a5:fd:5b:89:e9:ed:e9:14:
ac:72:69:15:77:03:86:70:a0:fa:c4:08:26:37:22:20:86:c8:
79:18:a4:71:90:b7:4a:ac:1b:0f:c7:31:dc:43:1e:16:bb:de:
6f:6c:e1:33:ff:11:11:2c:35:9d:32:59:ad:74:d8:5b:4b:df:
54:18:4e:86:85:4b:83:dc:f2:8c:3c:73:87:d5:a9:5c:38:51:
1a:c8:ae:45:4e:e8:cd:43:70:0a:e8:c1:a4:c6:e2:6e:fd:d5:
e5:1d:04:34:55:88:c5:ab:6c:b6:63:41:06:ed:cf:15:65:54:
34:2d:32:e7:fb:ca:c8:f6:4d:93:83:1e:5e:0d:21:89:85:e9:
66:d9:e1:d2:2b:0d:88:53:49:55:10:33:16:e4:4d:8b:cc:89:
94:ed:5d:9c
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAaFyQti16PkqWpDYomVbkRWoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwNzc1ZDk0NzFiODVkOTYzZmVmNmQyODM1OTBlMmQ5NDJk
ZDVjMjEwHhcNMjYxMDI1MDg1MjI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YjdkMThjN2E2OGIyOGE5NDVlNTVjYzdkNTM0MTE0ZWYxZTdlZTk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrlaBb3tEWHLUXZlR1K8LWgWxCJQ
F3+d9rTyoAbJ1NwJuANF/bTRTwQz9I4BrrOTIVzgeYDFrFPvd2YUKIgmdqvruOGm
rSINUVo1ZSd0o5okdK69cBxop5sgic8R3/zsZxeGdyPtPVrwOswmuKbvhKRX7KZd
DQQ3a0+aOqM5HdU1QoSp/oI5gSusr2NwOI9nOZ7vG7CCxkJ04/uGsD1yyKADEZG/
cNNyRXxL+Vdu0OR1yLC/vJ0HmAYgV3VooU12titzn6goUJsGSPcVFjccTI01eJkv
wbrGmGLg9ofFVl/UKR4StlKc5eXrG/a5aDQBnXAo8Lbw2AoHvwjmRyGTzQIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFEt9GMemiyipReVcx9U0EU7x5+6YMB8GA1UdIwQY
MBaAFAB3XZRxuF2WP+9tKDWQ4tlC3VwhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQt
NzZiMzNlNGNlODIxLzEvUzMwWXg2YUxLS2xGNVZ6SDFUUVJUdkhuN3BnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQtNzZiMzNlNGNlODIx
LzEvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQBV2usAwQB
V2u8MAwDBAJXa8QDBABXa8wwDQYJKoZIhvcNAQELBQADggEBAJ/Wt72XwcGL/SsZ
wWhuoJBtddSq99WSv4liOjodRHiebs3NKE/Sx3ELorVu0mOgQkuMv4LEonHxlUn5
dWHCFNSE9q5C55ex9zL2Vxqt7Ma67d1god1A+r31IYKG2Abiu1NfPYWl/VuJ6e3p
FKxyaRV3A4ZwoPrECCY3IiCGyHkYpHGQt0qsGw/HMdxDHha73m9s4TP/EREsNZ0y
Wa102FtL31QYToaFS4Pc8ow8c4fVqVw4URrIrkVO6M1DcArowaTG4m791eUdBDRV
iMWrbLZjQQbtzxVlVDQtMuf7ysj2TZODHl4NIYmF6WbZ4dIrDYhTSVUQMxbkTYvM
iZTtXZw=
-----END CERTIFICATE-----
Generated at Mon Oct 26 09:47:49 2026 by rpki-client