Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/upeCvkKXcvdAUOj-kpe6nY4S_Bc.roa
File: upeCvkKXcvdAUOj-kpe6nY4S_Bc.roa (raw, json)
Hash identifier: 1MTh45A5yNyh5sL8Q8uOMobeoD25trI/lQaWk+8SFmI=
Subject key identifier: BA:97:82:BE:42:97:72:F7:40:50:E8:FE:92:97:BA:9D:8E:12:FC:17
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 01A11339EF274F0D989CE4592A7EA1B72BC9
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/upeCvkKXcvdAUOj-kpe6nY4S_Bc.roa
Signing time: Tue 06 Oct 2026 21:58:46 +0000
ROA not before: Tue 06 Oct 2026 21:58:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62513
IP address blocks: 153.76.3.0/24 maxlen: 24
153.76.5.0/24 maxlen: 24
2a0f:b240::/46 maxlen: 48
2a0f:b240:70::/44 maxlen: 48
2a0f:b240:80::/44 maxlen: 48
2a0f:b240:91::/48 maxlen: 48
2a0f:b240:a4::/48 maxlen: 48
2a0f:b245::/32 maxlen: 48
2a0f:b246::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 20:43:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:13:39:ef:27:4f:0d:98:9c:e4:59:2a:7e:a1:b7:2b:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Oct 6 21:58:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ba9782be429772f74050e8fe9297ba9d8e12fc17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:da:d4:44:e0:7b:cc:9c:af:df:d3:10:c1:39:
f1:de:13:ab:0c:91:5f:66:0a:52:78:1f:7d:d7:fe:
96:14:e3:2b:2e:68:f7:63:7c:28:e4:86:07:0f:0d:
00:4e:4c:db:01:54:2b:1d:f7:cb:02:c7:68:6d:ff:
19:e9:5e:8f:e9:f7:31:83:ea:b5:60:17:81:34:3e:
9d:4a:f2:d9:52:fd:0d:4b:8a:ba:44:cc:c4:d5:06:
68:32:4d:0f:e1:88:05:dc:a0:0a:a4:4c:e8:89:0a:
08:1e:9e:00:95:78:dd:bf:07:7a:2c:aa:ac:3e:d8:
99:d4:ff:50:f1:6a:8f:3b:67:78:49:64:6f:55:64:
bc:28:16:71:01:4b:df:b7:7a:6f:9e:3c:e2:fe:9b:
3d:3d:33:3f:33:21:69:c2:f2:b9:4b:13:cb:1c:cb:
6f:5c:e8:9c:1c:c8:76:f5:d4:94:0c:e8:99:81:05:
58:a9:e4:69:45:4c:a2:eb:27:f1:af:d1:04:bd:6a:
ca:de:14:8d:ff:38:95:32:cb:25:9f:93:a6:2a:48:
88:db:30:61:d1:1c:4c:f0:93:60:a9:ff:ad:8f:91:
3f:c9:b6:11:55:e9:9e:e8:70:2a:03:2b:68:09:76:
d8:18:93:e1:6c:d8:51:47:57:11:31:e1:10:c5:4b:
58:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:97:82:BE:42:97:72:F7:40:50:E8:FE:92:97:BA:9D:8E:12:FC:17
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/upeCvkKXcvdAUOj-kpe6nY4S_Bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.76.3.0/24
153.76.5.0/24
IPv6:
2a0f:b240::/46
2a0f:b240:70::-2a0f:b240:8f:ffff:ffff:ffff:ffff:ffff
2a0f:b240:91::/48
2a0f:b240:a4::/48
2a0f:b245::-2a0f:b246:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
0d:a5:b4:2c:9c:4c:48:02:a1:8e:45:5a:9c:91:7c:f2:e9:66:
fc:0c:c1:3b:3f:c1:0b:57:a8:12:4f:50:e0:7f:7b:a4:89:73:
b4:24:5f:94:e6:71:76:cd:09:9b:cf:72:fd:f2:04:27:a0:7a:
b8:c3:59:13:e5:e3:b0:29:2b:1d:f5:2f:8c:05:53:9f:8d:fa:
dd:b1:65:bb:c0:df:b6:98:12:03:3d:08:3c:9b:cc:98:66:12:
e2:8d:ff:45:b9:02:5e:43:80:2c:6d:4c:0f:ac:d6:1b:d5:f2:
93:ff:ce:4c:41:eb:3c:7a:c4:f2:94:c6:32:54:c7:88:28:ad:
97:34:c4:8b:a0:9e:00:1f:92:35:b2:f5:14:9c:04:a6:7e:9c:
b3:ee:48:a2:3a:0c:0c:b1:f8:1e:89:57:b9:55:da:c5:99:3d:
b2:5e:0d:f3:26:88:cb:c6:c3:10:30:12:b2:0b:d9:2f:b8:22:
60:e4:00:a6:32:a5:d9:be:6a:e9:69:c4:eb:94:94:79:0d:b5:
53:e1:aa:7c:28:34:44:13:ed:f5:c6:18:a8:a2:a0:e7:ac:46:
08:80:fb:d9:af:e2:95:bd:41:33:0e:4d:ca:f5:78:10:b6:a2:
e2:74:83:92:a2:3d:a4:30:3f:c0:38:6d:20:65:c3:01:9c:4e:
7c:66:e3:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 06:49:18 2026 by rpki-client