Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/gytYzofNAGkaKcY5h_6ialAir9s.roa
File: gytYzofNAGkaKcY5h_6ialAir9s.roa (raw, json)
Hash identifier: YF9Yy+QMcwsvV6KVn9orAwopk4WIQrYFIdNpJDZ6g8I=
Subject key identifier: 83:2B:58:CE:87:CD:00:69:1A:29:C6:39:87:FE:A2:6A:50:22:AF:DB
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 01A0E3604DAA71F7360DBC93266F46ABC14F
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/gytYzofNAGkaKcY5h_6ialAir9s.roa
Signing time: Sun 27 Sep 2026 14:58:54 +0000
ROA not before: Sun 27 Sep 2026 14:58:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214957
IP address blocks: 87.107.112.0/24 maxlen: 24
87.107.115.0/24 maxlen: 24
87.107.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e3:60:4d:aa:71:f7:36:0d:bc:93:26:6f:46:ab:c1:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Sep 27 14:58:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=832b58ce87cd00691a29c63987fea26a5022afdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:93:7d:2d:8a:b7:1c:3d:19:ac:50:e2:17:70:
6e:de:72:b7:89:d9:20:8e:76:1b:9a:0a:79:e4:87:
f6:db:ee:bf:d3:0d:b7:ef:6d:2d:57:0d:b5:b4:e1:
24:7a:74:74:7f:b2:db:de:8e:13:4d:bc:91:33:e1:
40:52:e9:b4:0b:7a:25:4e:2a:50:b9:31:e3:d5:59:
d8:ab:fb:86:b6:16:e4:4f:df:36:05:80:9a:ed:5c:
ab:c7:fc:73:b7:a1:84:0b:7d:bb:29:20:97:91:e3:
c0:16:15:15:e2:ae:80:1d:ea:f5:c4:71:22:0c:bd:
81:52:3b:bd:80:67:d4:7b:6b:ff:c3:36:a7:41:f8:
d2:7b:83:61:d9:62:c2:9f:ca:d3:f7:dc:55:82:60:
83:6e:62:25:a0:c0:47:57:77:b9:da:10:a9:93:4c:
8a:5c:c2:be:d1:e0:17:da:15:49:95:eb:0f:44:7f:
94:e3:2f:7a:d7:d5:7b:02:41:7d:b5:a3:e9:f4:0c:
21:91:d5:d9:72:90:1e:16:48:d7:38:34:e3:20:24:
9c:9d:27:43:c7:8a:ce:45:a8:a2:80:ec:0d:ee:1b:
c6:20:dc:ae:1d:87:ce:bc:e1:79:91:9a:f9:13:9f:
7e:b7:51:e6:d7:e4:38:91:27:39:fb:55:d5:ec:58:
26:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:2B:58:CE:87:CD:00:69:1A:29:C6:39:87:FE:A2:6A:50:22:AF:DB
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/gytYzofNAGkaKcY5h_6ialAir9s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.107.112.0/24
87.107.115.0/24
87.107.170.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:8f:c2:3c:89:56:b8:e4:01:f5:71:23:dc:f7:88:33:80:74:
95:41:fe:bb:71:6e:e9:c5:ef:9c:b7:86:6c:98:d3:ac:26:0d:
94:fd:8a:f6:89:c6:ed:29:ed:0e:ab:ff:7c:c1:82:4d:a8:ba:
7f:09:a4:d0:4e:94:f8:f1:1a:03:95:3e:7d:6b:07:3f:6e:24:
b0:ee:1c:00:80:c4:0d:6b:90:d5:14:9f:a2:79:12:f6:a2:b1:
f3:af:3e:c4:91:e7:cf:4e:89:9e:09:28:93:16:6b:9a:06:ec:
81:55:2d:4b:8f:82:c4:1c:d1:64:a5:e8:3d:83:8d:b0:f9:6c:
29:80:f2:39:cb:35:35:c4:3c:4c:58:2a:c7:cd:92:46:e8:73:
50:d3:98:19:72:21:fa:54:27:2f:82:a4:4b:4b:a3:5d:73:4d:
24:cc:e5:db:d1:ba:5b:90:b0:6b:f7:73:60:9e:2c:67:38:d0:
66:31:d5:6f:85:92:25:ff:b6:e1:90:fd:1f:c7:2e:3c:4d:ed:
ee:c8:e2:ac:e8:29:d2:7e:71:f3:3d:5f:b3:eb:79:16:ac:3c:
1f:75:14:5d:49:c2:ec:b2:9e:a2:ce:c0:d1:85:13:1b:cd:c4:
8b:4f:a9:5d:e2:07:68:9a:7d:35:1a:c8:1e:a5:35:72:67:76:
6c:8f:7e:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 05:11:12 2026 by rpki-client