Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/1WrL7ddOdkmUZg-EClISavuHXAo.roa
File: 1WrL7ddOdkmUZg-EClISavuHXAo.roa (raw, json)
Hash identifier: JxnK8P6n2M5L4xGA1tJ7yJ2O+z06QURFKhnZz7W5PI4=
Subject key identifier: D5:6A:CB:ED:D7:4E:76:49:94:66:0F:84:0A:52:12:6A:FB:87:5C:0A
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 01A0E4FF09FDD927848B6FC3B0C8BA213804
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/1WrL7ddOdkmUZg-EClISavuHXAo.roa
Signing time: Sun 27 Sep 2026 22:31:54 +0000
ROA not before: Sun 27 Sep 2026 22:31:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200819
IP address blocks: 153.76.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e4:ff:09:fd:d9:27:84:8b:6f:c3:b0:c8:ba:21:38:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Sep 27 22:31:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d56acbedd74e764994660f840a52126afb875c0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:55:69:d8:2b:7b:7f:4a:f0:1c:dd:f0:10:cf:
0a:11:c5:53:3d:ce:94:1d:30:27:48:73:67:ac:7a:
b0:a8:6f:ad:6a:2c:cb:fb:3f:4c:e0:6a:3e:01:50:
8a:07:1a:05:10:1e:e4:98:2b:a3:66:80:dc:88:e6:
05:d0:97:5f:8f:2d:0d:de:fa:ee:13:c4:dc:c7:fb:
f0:6d:02:4d:39:94:6a:51:03:ad:9b:89:1e:ea:68:
06:71:56:f3:e2:be:69:6a:88:88:13:09:bb:b4:82:
27:1a:92:15:8d:d2:a8:c8:70:61:f1:01:69:9e:cf:
70:0f:0a:86:2a:34:64:5d:55:ba:7c:e1:ea:39:e8:
04:19:05:c6:b3:d2:e2:19:07:57:4a:a5:6a:ee:ff:
30:60:db:9a:b5:08:ed:8b:e9:97:a7:ae:83:ad:26:
3d:10:90:8c:ef:ed:d4:60:9b:56:13:4a:ea:02:ab:
e4:56:7e:c5:42:62:1f:ec:4e:63:28:ee:86:54:bc:
9c:f5:f0:6a:a6:32:4d:01:8f:58:9b:ef:7f:c5:e5:
16:47:c4:f9:9a:75:66:c4:9d:52:07:65:dd:24:46:
86:f5:a5:35:ef:2f:97:5c:53:65:d1:f7:f7:df:67:
22:58:fe:ac:2f:c8:0c:db:04:ab:fe:f9:92:95:42:
93:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:6A:CB:ED:D7:4E:76:49:94:66:0F:84:0A:52:12:6A:FB:87:5C:0A
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/1WrL7ddOdkmUZg-EClISavuHXAo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.76.6.0/24
Signature Algorithm: sha256WithRSAEncryption
77:4b:d0:4f:d8:51:98:99:d7:e9:5b:fb:a7:5c:8c:b8:90:0b:
1a:d7:66:e1:65:52:30:1f:bb:4c:c0:da:e0:c1:c6:03:0a:53:
d3:c5:53:23:79:2c:62:0f:68:7c:6a:0e:87:2f:a5:f7:16:6a:
2f:be:4b:ab:cf:5b:5d:17:28:63:7c:75:30:f5:25:e1:5b:2b:
fb:8a:f8:82:aa:0e:ac:a0:4d:b8:cd:56:6e:1f:15:1a:17:e0:
7f:de:6b:66:51:60:62:ad:98:00:08:a1:10:3a:4b:bf:93:f1:
8b:5b:f7:bd:70:a2:8a:0e:11:ba:56:4e:d4:3e:49:2b:8c:1e:
0c:7e:46:60:3e:8d:e7:8e:18:d4:d6:00:f7:97:79:64:fb:eb:
fe:9f:b5:b8:95:b4:cd:5a:ce:9d:06:05:77:80:6b:b3:bf:be:
81:27:ac:ba:21:ba:1e:f2:73:a5:ec:f8:a1:ee:a3:9f:1f:7d:
ca:cf:66:09:5d:b6:27:fc:90:a3:de:32:2d:c9:d2:6f:86:0c:
a0:7a:c6:69:42:e5:e4:86:7d:52:a3:19:1c:5d:86:bb:42:d5:
66:1c:0a:1e:75:a3:7d:02:89:37:5f:54:62:27:86:2e:40:c9:
66:ff:df:07:0e:ed:81:c0:ce:ad:20:c4:89:22:6f:7b:b8:47:
5d:7f:6f:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 03:54:50 2026 by rpki-client