Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/Pv4JQ5OW-AHXxg9wnEe61rmweuc.roa
File: Pv4JQ5OW-AHXxg9wnEe61rmweuc.roa (raw, json)
Hash identifier: Yp7JFwnADE1i0o19MSkG2gpRqneHVJoWnxCz87GRvKM=
Subject key identifier: 3E:FE:09:43:93:96:F8:01:D7:C6:0F:70:9C:47:BA:D6:B9:B0:7A:E7
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 019F20BF1F3E9D7F4278C48F54566C69BDE5
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/Pv4JQ5OW-AHXxg9wnEe61rmweuc.roa
Signing time: Thu 02 Jul 2026 02:53:43 +0000
ROA not before: Thu 02 Jul 2026 02:53:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62513
IP address blocks: 153.76.24.0/21 maxlen: 24
2a0f:b240::/46 maxlen: 48
2a0f:b240:60::/44 maxlen: 48
2a0f:b240:70::/44 maxlen: 48
2a0f:b240:80::/44 maxlen: 48
2a0f:b240:5800::/40 maxlen: 48
2a0f:b245::/32 maxlen: 48
2a0f:b246::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 Jul 2026 10:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:20:bf:1f:3e:9d:7f:42:78:c4:8f:54:56:6c:69:bd:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Jul 2 02:53:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3efe09439396f801d7c60f709c47bad6b9b07ae7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1f:29:af:f4:d3:3a:8f:0c:3c:cc:d8:c9:c9:
86:ba:31:46:72:c7:75:b6:ba:c6:6a:10:b1:f7:3a:
68:22:dc:41:ef:69:dc:45:38:35:d1:44:a9:24:61:
9f:0d:b0:61:4f:c6:53:cc:c0:81:0a:a7:e5:89:1b:
bf:47:2c:4f:da:e3:66:17:94:16:2a:64:60:b7:be:
21:0a:b8:4f:b0:47:09:6d:0a:0b:22:fa:a1:94:8a:
e9:9c:9a:0d:51:83:b6:b0:3d:64:85:e7:42:2c:ca:
b6:02:84:7f:ba:51:ef:2b:e2:64:f5:aa:20:59:ce:
3b:18:67:5c:aa:81:ee:0d:ec:ff:93:9a:7f:da:fd:
d1:73:7b:ea:89:03:c2:b8:51:00:9d:a7:8d:14:35:
af:97:4c:41:9c:18:1c:d3:62:0a:5a:47:dd:3e:42:
e7:57:50:dc:3b:9f:f3:e2:c5:d7:ab:3e:52:54:98:
6e:a1:a5:c4:81:e1:2a:e4:2c:f0:81:22:49:09:69:
b9:ef:ed:e6:9a:38:4a:dd:dc:cb:30:ee:ea:12:47:
2d:32:17:30:b3:18:34:f6:5b:60:d3:a7:7c:16:31:
01:6a:9d:55:d3:05:29:25:44:d6:e4:32:79:9f:f0:
f4:d8:d1:b2:eb:55:21:42:a4:fe:26:f0:c3:f9:14:
3c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:FE:09:43:93:96:F8:01:D7:C6:0F:70:9C:47:BA:D6:B9:B0:7A:E7
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/Pv4JQ5OW-AHXxg9wnEe61rmweuc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.76.24.0/21
IPv6:
2a0f:b240::/46
2a0f:b240:60::-2a0f:b240:8f:ffff:ffff:ffff:ffff:ffff
2a0f:b240:5800::/40
2a0f:b245::-2a0f:b246:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
29:02:b1:44:c4:08:71:36:90:d0:58:50:1d:17:7f:3e:76:3c:
b4:af:de:17:08:7d:b4:e1:99:cb:f0:b3:2a:9f:4e:f2:fb:42:
f8:2b:0f:22:1a:d0:c6:bf:3a:4b:c0:d4:d1:73:b0:86:58:ff:
ee:9e:0c:2d:8a:af:97:44:92:25:11:5b:ee:ee:56:d7:c3:4b:
aa:ad:92:b3:d1:51:4a:b3:08:e9:b1:3b:14:0c:e2:7c:dc:76:
48:97:50:22:53:fa:93:45:83:bf:d0:cc:c2:ee:d1:0c:2b:05:
44:2b:8f:db:80:17:e2:fb:21:35:63:5e:bd:cc:35:d4:df:76:
2b:e8:16:d1:be:48:b5:57:ce:32:b3:64:4f:6b:4e:31:f5:49:
91:30:a6:61:25:b6:d5:ee:f2:e0:7b:18:10:bb:3a:5b:bf:c1:
7e:d4:cc:32:ec:2a:f4:db:1a:12:22:dc:85:a1:8b:93:32:9f:
cb:ac:85:3c:b2:21:ba:e4:96:3a:c6:64:e8:bb:cc:55:01:eb:
79:1c:1a:03:f7:c3:03:f9:4b:75:05:bc:c6:96:14:1f:02:c0:
b3:0a:b9:7c:4d:a1:c4:57:88:65:db:cc:b5:bf:4e:76:7d:b8:
b0:ac:4b:3d:7d:6d:fa:93:ec:3c:43:14:9d:42:db:5a:30:37:
94:2d:a1:b2
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Jul 13 20:31:53 2026 by rpki-client