Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/jW7ScYwv0_6HQN7LXS2xT72g8TU.roa
File: jW7ScYwv0_6HQN7LXS2xT72g8TU.roa (raw, json)
Hash identifier: GSl4KxdMeNIRmId+yvlTSDtDEHouOkM83zzvgF3qwAI=
Subject key identifier: 8D:6E:D2:71:8C:2F:D3:FE:87:40:DE:CB:5D:2D:B1:4F:BD:A0:F1:35
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 01A16DCC44904094DD557840A9DEEBEEAC7F
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/jW7ScYwv0_6HQN7LXS2xT72g8TU.roa
Signing time: Sat 24 Oct 2026 12:04:25 +0000
ROA not before: Sat 24 Oct 2026 12:04:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218302
IP address blocks: 87.107.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6d:cc:44:90:40:94:dd:55:78:40:a9:de:eb:ee:ac:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Oct 24 12:04:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8d6ed2718c2fd3fe8740decb5d2db14fbda0f135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9e:18:51:ca:2d:46:af:76:9b:b8:e1:ba:a5:
e1:14:19:a1:3c:e7:22:85:e4:76:37:4d:93:71:52:
89:77:90:65:11:ce:5c:fa:ea:51:69:71:6b:60:0d:
0a:0d:87:ce:f1:9c:48:0c:c0:60:59:0b:f2:fa:6d:
27:73:fd:94:33:3d:3d:e8:0f:9d:17:a0:fb:ef:6c:
a7:35:2b:f5:43:1b:94:72:60:19:0f:2e:a5:2a:72:
a1:c8:6b:5d:bf:ad:79:be:44:8b:c2:bf:03:3e:93:
2a:97:be:41:62:21:69:47:85:bc:f3:d2:66:87:d5:
b2:02:18:c7:87:e6:8c:66:64:5d:13:d0:50:82:4b:
14:7b:dd:b0:c7:84:7c:f3:d2:48:f9:92:6d:97:e8:
ae:6e:a1:31:c4:15:02:ed:76:65:6a:99:69:cb:d2:
c0:ac:a2:ca:1a:e0:78:3e:c6:d4:61:14:6b:e2:a0:
92:26:5d:c2:d3:c7:bd:ba:27:6b:42:b3:20:ce:74:
71:c9:5b:8e:59:c3:77:45:ff:de:fe:c4:f0:17:32:
af:5d:32:39:6a:d8:21:6e:56:d3:95:14:bc:dd:6d:
e9:d5:a4:b1:e0:81:3e:a5:5f:b2:42:b3:ea:6d:84:
0b:d3:ed:1d:92:f2:50:83:5a:f9:c5:2a:fb:18:0a:
a0:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:6E:D2:71:8C:2F:D3:FE:87:40:DE:CB:5D:2D:B1:4F:BD:A0:F1:35
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/jW7ScYwv0_6HQN7LXS2xT72g8TU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.107.163.0/24
Signature Algorithm: sha256WithRSAEncryption
94:96:78:af:7f:17:c7:1b:d4:48:77:84:97:b3:aa:0e:72:87:
d1:5f:01:22:15:8c:ba:6f:ff:7c:90:fa:96:9b:ef:25:e4:23:
6d:fa:e2:01:8a:22:00:38:c5:30:60:d3:65:7a:2c:19:55:1b:
a2:cf:eb:d2:c6:5a:cc:80:5e:3b:2b:9d:44:c9:ff:38:3c:5a:
9b:6a:d7:a6:44:56:96:b7:1c:4a:bc:47:3f:03:94:d4:69:c6:
94:74:5a:fa:eb:04:14:58:e9:40:b4:25:16:75:2d:a8:f2:9c:
87:1c:63:12:03:54:d0:5c:80:d8:69:2e:9b:d3:28:88:8a:0e:
1f:38:dd:d8:b5:02:34:a7:80:8b:6a:b0:2f:d5:01:89:77:86:
4f:e2:aa:36:ae:56:55:af:f1:fa:b6:34:07:c8:72:7d:83:2c:
c5:f4:87:1c:db:48:e6:13:b8:95:e4:27:e6:2b:03:4a:37:53:
0b:2d:a3:10:1a:4b:3b:01:ae:cb:f0:5a:9e:ac:47:65:80:24:
9f:4f:3e:90:1d:62:5e:8c:83:e4:3b:73:5f:ad:b2:3e:5b:67:
66:c2:ae:a1:a8:1f:60:bd:c5:17:ed:d1:93:7c:66:a2:89:2f:
03:d8:e2:ac:b3:be:cf:66:3f:b3:bc:7d:53:54:e7:3a:26:af:
ac:27:a3:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 09:47:58 2026 by rpki-client