Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/Y4mO4rNmuCWdbzPgUEXoCHlebZo.roa
File: Y4mO4rNmuCWdbzPgUEXoCHlebZo.roa (raw, json)
Hash identifier: nnbtkTZv5ZHguhQUY482M2L1gXi4XhRea4h7WV6kxLg=
Subject key identifier: 63:89:8E:E2:B3:66:B8:25:9D:6F:33:E0:50:45:E8:08:79:5E:6D:9A
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 01A11D0E1CB2BA16D9EC3FEC85DC066FB965
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/Y4mO4rNmuCWdbzPgUEXoCHlebZo.roa
Signing time: Thu 08 Oct 2026 19:47:06 +0000
ROA not before: Thu 08 Oct 2026 19:47:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218513
IP address blocks: 153.76.8.0/24 maxlen: 24
2a0f:b240:8::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 16:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1d:0e:1c:b2:ba:16:d9:ec:3f:ec:85:dc:06:6f:b9:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Oct 8 19:47:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=63898ee2b366b8259d6f33e05045e808795e6d9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8f:0c:ce:cf:a3:e4:74:4b:6b:97:d2:58:49:
0c:32:73:d5:ab:44:1a:d5:a6:4d:a3:a9:55:f6:94:
4e:75:ba:1b:9d:44:0d:29:a6:68:02:88:30:b9:44:
60:aa:36:c6:1b:38:a2:c8:ed:4d:ec:7e:60:e7:a3:
ee:e5:c6:65:b8:77:6a:02:eb:a5:53:50:16:8f:9a:
8b:f4:9d:eb:4c:be:0a:32:8b:ad:e8:a2:95:ab:87:
a7:8e:24:f8:b8:79:78:48:92:ed:c8:0d:8e:c1:64:
bf:0d:41:92:ff:87:87:72:9e:47:e7:79:0e:53:59:
ca:57:1e:bb:9b:bb:19:91:3e:86:89:37:f0:15:de:
0a:ce:93:d1:4c:f7:1b:4a:f2:30:ec:57:6d:9a:46:
ac:d8:f6:c8:46:be:0d:16:2f:17:4d:ee:28:d5:81:
61:64:44:d4:f0:ba:61:26:7d:14:53:8d:4f:87:cc:
94:b7:26:d7:69:ff:70:4b:08:f6:53:c4:fa:f0:b0:
80:a4:34:98:3c:74:d4:9c:5c:ec:8e:9c:86:e9:61:
ca:8c:28:be:b3:ab:6b:8a:87:cc:3c:ef:ce:e6:54:
10:b1:4b:31:41:f5:05:44:80:a1:78:de:95:87:5e:
9b:65:b5:00:e2:fe:ca:63:8d:82:19:fc:99:e2:25:
d2:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:89:8E:E2:B3:66:B8:25:9D:6F:33:E0:50:45:E8:08:79:5E:6D:9A
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/Y4mO4rNmuCWdbzPgUEXoCHlebZo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.76.8.0/24
IPv6:
2a0f:b240:8::/46
Signature Algorithm: sha256WithRSAEncryption
8e:09:02:05:07:56:9b:7e:f8:58:ed:b6:28:b9:9f:43:2a:c5:
09:a2:27:bd:1a:b5:fa:b0:74:18:90:6f:6c:f5:ac:c6:e7:89:
42:e1:a0:25:f1:8d:dc:5a:90:24:73:8b:3d:22:b4:94:6b:b7:
74:65:38:10:9b:7c:a1:ec:7a:5f:46:f8:26:cf:6b:43:8b:68:
d7:86:f4:f1:a3:3d:69:b2:49:72:f3:71:ac:9c:9a:5a:5d:30:
34:22:59:fc:8a:93:81:4f:ef:7a:08:7f:b0:ec:48:b8:aa:c9:
9e:ba:6f:d6:3c:6c:f4:b2:5c:99:85:35:06:b4:3f:c3:05:5b:
c7:31:48:54:03:5e:73:6e:b1:6e:85:48:42:7d:48:30:dd:98:
cf:fe:ad:e9:d3:19:74:96:3a:00:6e:11:a3:54:ac:5d:27:40:
b9:1c:06:6b:68:fb:58:df:a2:d1:a4:a8:86:ef:1e:f6:bf:ed:
6f:20:37:84:e2:b4:05:e9:f5:33:ec:a2:65:20:25:bd:d9:e9:
7a:54:84:6a:04:f1:39:ae:3a:e9:51:5b:d3:2c:db:6d:d7:c5:
a0:eb:02:6e:a6:23:c5:17:5b:bc:b1:c9:3f:af:a8:6f:90:28:
8a:9a:fc:53:3f:23:83:2d:96:e6:81:e2:08:7e:32:c4:c9:97:
95:af:94:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 01:51:30 2026 by rpki-client