Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/w-7f84CVH1CqSPvajvh9O_rkOy0.roa
File: w-7f84CVH1CqSPvajvh9O_rkOy0.roa (raw, json)
Hash identifier: zdO+nLGlXzJYSX5N1llFn6RAW9U6QZMFQC2NuNxcfsE=
Subject key identifier: C3:EE:DF:F3:80:95:1F:50:AA:48:FB:DA:8E:F8:7D:3B:FA:E4:3B:2D
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 01A0333246872186C03C50CEA877E628EC7C
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/w-7f84CVH1CqSPvajvh9O_rkOy0.roa
Signing time: Mon 24 Aug 2026 09:55:27 +0000
ROA not before: Mon 24 Aug 2026 09:55:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51431
IP address blocks: 87.107.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 05:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:33:32:46:87:21:86:c0:3c:50:ce:a8:77:e6:28:ec:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Aug 24 09:55:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c3eedff380951f50aa48fbda8ef87d3bfae43b2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:46:7d:f9:03:53:ae:c6:f7:a5:50:78:9e:21:
68:80:45:31:22:c6:73:3d:3c:38:a4:08:b0:78:b6:
d3:eb:3b:7a:3f:3b:56:5d:1e:9e:82:32:46:32:e1:
bf:f9:9d:a7:a7:4d:21:69:06:e8:5f:47:57:e1:84:
f4:c3:4c:34:87:92:95:d0:8c:52:ac:9f:e7:6d:35:
86:e4:05:99:d7:72:ad:01:3b:ab:1f:e0:9c:09:25:
a6:03:f4:04:04:75:3a:2d:3a:f8:c5:12:54:17:e8:
1c:e6:05:88:c0:c2:91:e7:d6:e0:6a:45:04:8a:f3:
48:fc:35:da:05:04:80:13:a5:3a:de:50:8e:8f:9a:
16:1f:1c:c9:8b:14:62:e2:ee:44:17:6c:63:9a:18:
c5:3b:d2:81:ce:a6:35:0b:f1:37:60:4e:88:3c:f5:
8e:04:66:4a:25:11:55:1b:aa:48:9f:11:21:c9:19:
38:b5:bf:37:50:c9:48:ec:52:c3:10:bd:6a:ed:dc:
b5:02:5a:2a:5c:22:64:3a:7d:d4:2e:8c:12:e8:8f:
60:b5:6f:2c:ec:e8:c2:15:7a:ba:f6:75:e4:fc:fc:
c7:2a:d3:f3:06:fa:85:5f:e4:5c:d9:c9:f9:4e:53:
4f:b1:f8:5a:4c:97:38:47:89:b3:22:00:0e:44:60:
d6:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:EE:DF:F3:80:95:1F:50:AA:48:FB:DA:8E:F8:7D:3B:FA:E4:3B:2D
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/w-7f84CVH1CqSPvajvh9O_rkOy0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.107.102.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:08:1b:5a:a4:8e:f7:a3:9b:96:6a:4e:44:db:b4:dc:47:4c:
cb:e1:8a:b5:dd:83:6d:dc:8c:39:59:76:db:a5:be:3c:60:15:
6a:ad:b6:75:90:20:ad:a4:24:3f:dc:5e:5a:ac:da:df:50:d9:
14:3a:76:16:4f:f6:c7:29:1a:c0:8e:63:ac:f6:00:c2:22:59:
34:5f:6b:17:6f:72:91:af:f8:f0:77:6f:a9:5d:ca:65:4e:4c:
b3:32:94:e3:cf:37:6d:6a:cb:57:e0:b3:a8:87:fa:09:5f:fc:
9b:43:e6:41:4f:de:5c:36:5d:fe:d3:26:d9:e0:88:e7:fb:39:
bc:19:c0:63:95:fc:3d:06:dc:b8:55:97:07:10:73:68:92:f0:
da:b6:29:a7:5f:9b:31:8e:27:47:d5:00:a7:71:b0:54:3b:17:
da:7e:3e:44:86:0b:d5:47:c3:25:01:29:cd:c2:78:99:f7:75:
d6:2c:5c:b6:ba:a2:0e:4a:43:1b:ba:8f:8e:8c:14:ac:7d:52:
1b:5f:2b:6e:3c:3e:c7:5b:00:d7:e8:00:ae:6e:27:d3:02:a0:
b8:83:f8:f1:f0:a5:a7:b0:66:1a:5b:57:97:e3:ce:82:73:a5:
55:99:50:b5:e5:9e:cc:d5:4d:26:45:1a:db:70:2a:ce:65:92:
56:e7:4a:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:27:50 2026 by rpki-client