Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/n3EZzYI7Xhj8q1aC9BkHve7uyU0.roa
File: n3EZzYI7Xhj8q1aC9BkHve7uyU0.roa (raw, json)
Hash identifier: BPhJLUdzgu78dDE+vRQg2OyDPMEpyEHV49uqrYFwn10=
Subject key identifier: 9F:71:19:CD:82:3B:5E:18:FC:AB:56:82:F4:19:07:BD:EE:EE:C9:4D
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 01A177511801266AF1E21D5B47FD59D0FA9C
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/n3EZzYI7Xhj8q1aC9BkHve7uyU0.roa
Signing time: Mon 26 Oct 2026 08:26:05 +0000
ROA not before: Mon 26 Oct 2026 08:26:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216169
IP address blocks: 87.107.40.0/24 maxlen: 24
87.107.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 05:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:77:51:18:01:26:6a:f1:e2:1d:5b:47:fd:59:d0:fa:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Oct 26 08:26:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9f7119cd823b5e18fcab5682f41907bdeeeec94d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:36:f7:09:5e:b6:7b:80:db:e9:7f:72:a7:06:
8f:f3:ce:95:2f:20:4c:1e:f9:e4:c7:11:ff:e6:78:
ee:2b:b1:5b:5d:67:7e:09:a6:08:0e:54:8d:65:d8:
c1:a8:35:5f:90:73:6a:ed:20:29:b3:bc:0c:43:2b:
c7:5d:ee:12:59:4b:87:0b:67:ad:0f:0e:32:91:a4:
17:77:47:f9:c7:2a:03:50:1f:14:b3:97:35:af:67:
e5:65:da:65:89:a4:24:64:4a:b3:fc:07:19:83:74:
db:78:64:3e:a8:17:1a:79:3b:ab:d0:f3:94:37:b7:
d3:8c:6e:15:a2:cf:46:df:6c:c9:33:f3:6b:7f:1c:
9a:c3:41:07:c8:9e:41:76:79:48:32:35:19:3e:c0:
09:2b:65:21:a3:55:b3:3a:86:83:7e:ac:24:28:c5:
67:af:50:c9:16:86:5c:48:7d:d5:be:fd:17:8b:95:
0f:aa:52:b3:bf:7c:99:02:89:12:ad:6f:9f:e3:76:
21:5f:74:74:a4:d6:bc:20:d3:a9:bc:68:c9:59:bc:
85:c4:eb:ab:34:25:91:47:2d:46:78:67:81:9c:2b:
c1:38:ff:c9:ab:ac:62:f7:1e:14:eb:bf:dd:d2:6a:
e2:d3:f4:0a:64:1b:ec:ac:35:b3:26:5f:f5:fa:8c:
49:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:71:19:CD:82:3B:5E:18:FC:AB:56:82:F4:19:07:BD:EE:EE:C9:4D
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/n3EZzYI7Xhj8q1aC9BkHve7uyU0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.107.40.0/24
87.107.171.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:16:22:ff:89:3f:38:7b:9e:40:2e:75:ef:8a:a9:8a:47:bc:
00:78:fd:fc:ea:da:16:e0:31:6c:c3:15:1a:88:20:7d:e0:60:
0e:8e:35:9f:7e:82:78:13:9c:ae:95:67:aa:e0:4a:35:1d:2a:
5e:bc:0e:df:44:0d:0f:d4:f1:14:90:54:47:cb:4c:f1:35:2e:
bc:39:c6:b3:a3:b8:24:d3:54:a2:de:74:2e:b5:58:12:ff:1f:
41:35:7d:e7:88:d8:bb:64:4a:b1:99:e7:20:82:50:56:95:0a:
65:a7:d7:64:4e:05:20:f7:f9:db:3c:0e:d3:20:25:4b:8e:56:
5d:e8:c9:c3:ef:ef:da:40:4a:d3:48:1e:b0:f6:d7:ed:f1:62:
ae:3b:43:fe:ee:5d:04:4c:e0:e6:1c:93:fd:bd:4a:68:e3:25:
ae:07:ec:e2:ea:95:25:c2:c9:03:b6:82:3d:fd:21:48:05:99:
cc:83:b9:50:1d:6e:1f:eb:57:07:2e:a8:99:92:fa:9b:7c:0f:
6b:28:1e:27:61:e9:f7:d7:c8:ce:bb:12:83:14:40:e8:83:e7:
f3:ff:58:da:3a:00:d9:f6:6e:aa:cd:52:19:e6:dd:3d:a9:41:
23:46:cf:7e:36:23:40:f1:d2:27:e4:a5:0f:5c:3c:02:ab:26:
9a:a2:b7:72
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaF3URgBJmrx4h1bR/1Z0PqcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwNzc1ZDk0NzFiODVkOTYzZmVmNmQyODM1OTBlMmQ5NDJk
ZDVjMjEwHhcNMjYxMDI2MDgyNjA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZjcxMTljZDgyM2I1ZTE4ZmNhYjU2ODJmNDE5MDdiZGVlZWVjOTRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Tb3CV62e4Db6X9ypwaP886VLyBM
HvnkxxH/5njuK7FbXWd+CaYIDlSNZdjBqDVfkHNq7SAps7wMQyvHXe4SWUuHC2et
Dw4ykaQXd0f5xyoDUB8Us5c1r2flZdpliaQkZEqz/AcZg3TbeGQ+qBcaeTur0POU
N7fTjG4Vos9G32zJM/Nrfxyaw0EHyJ5BdnlIMjUZPsAJK2Uho1WzOoaDfqwkKMVn
r1DJFoZcSH3Vvv0Xi5UPqlKzv3yZAokSrW+f43YhX3R0pNa8INOpvGjJWbyFxOur
NCWRRy1GeGeBnCvBOP/Jq6xi9x4U67/d0mri0/QKZBvsrDWzJl/1+oxJkQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFJ9xGc2CO14Y/KtWgvQZB73u7slNMB8GA1UdIwQY
MBaAFAB3XZRxuF2WP+9tKDWQ4tlC3VwhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQt
NzZiMzNlNGNlODIxLzEvbjNFWnpZSTdYaGo4cTFhQzlCa0h2ZTd1eVUwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQtNzZiMzNlNGNlODIx
LzEvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAV2soAwQA
V2urMA0GCSqGSIb3DQEBCwUAA4IBAQCpFiL/iT84e55ALnXviqmKR7wAeP386toW
4DFswxUaiCB94GAOjjWffoJ4E5yulWeq4Eo1HSpevA7fRA0P1PEUkFRHy0zxNS68
Ocazo7gk01Si3nQutVgS/x9BNX3niNi7ZEqxmecgglBWlQplp9dkTgUg9/nbPA7T
ICVLjlZd6MnD7+/aQErTSB6w9tft8WKuO0P+7l0ETODmHJP9vUpo4yWuB+zi6pUl
wskDtoI9/SFIBZnMg7lQHW4f61cHLqiZkvqbfA9rKB4nYen318jOuxKDFEDog+fz
/1jaOgDZ9m6qzVIZ5t09qUEjRs9+NiNA8dIn5KUPXDwCqyaaordy
-----END CERTIFICATE-----
Generated at Wed Oct 28 13:02:52 2026 by rpki-client