Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/wyJnYAo4v5aJeo2ENs3_TjPKgHA.roa
File: wyJnYAo4v5aJeo2ENs3_TjPKgHA.roa (raw, json)
Hash identifier: X+pAkKRiG8g3igaRNcz7Q/YNN/9YpuFoac01eC4oAyk=
Subject key identifier: C3:22:67:60:0A:38:BF:96:89:7A:8D:84:36:CD:FF:4E:33:CA:80:70
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 019FF6B9FB06B4719D0BC7AD80E16390421F
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/wyJnYAo4v5aJeo2ENs3_TjPKgHA.roa
Signing time: Wed 12 Aug 2026 16:06:51 +0000
ROA not before: Wed 12 Aug 2026 16:06:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3257
IP address blocks: 153.76.24.0/21 maxlen: 24
2a0f:b242::/32 maxlen: 48
2a0f:b243::/32 maxlen: 48
2a0f:b247::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 21:38:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f6:b9:fb:06:b4:71:9d:0b:c7:ad:80:e1:63:90:42:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Aug 12 16:06:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c32267600a38bf96897a8d8436cdff4e33ca8070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5d:65:c2:c4:27:87:f6:fc:cb:68:b8:b2:ea:
4f:ef:12:23:76:07:b1:c9:d2:95:ae:ee:7d:5d:9d:
c1:71:08:be:ae:7a:3e:d5:c9:e8:d2:00:66:ab:dd:
7c:d9:e9:3f:55:36:0f:b1:81:dc:f9:42:39:73:d8:
9d:14:0e:4b:30:96:69:08:69:60:ee:2d:85:fe:8f:
53:0a:57:ee:44:91:d4:dc:59:6a:3c:a4:63:53:ac:
cf:b5:58:f7:75:36:96:8f:40:7c:8a:e5:2c:42:7d:
44:ea:9a:0d:22:1d:80:cc:37:ad:fc:d6:ae:5e:e6:
79:5b:6b:f4:ec:d3:51:e6:cf:b1:5d:6a:dc:43:63:
cd:a4:0f:29:aa:f7:2e:a8:25:96:a4:a0:da:e6:a4:
7f:6e:b5:66:d9:2b:fa:21:1e:78:5c:e8:82:18:b5:
2e:f1:c4:12:a1:45:03:71:d3:08:8e:a1:6d:9a:3c:
4a:d1:4a:9a:1f:ce:d7:b3:5d:a6:0d:3b:1b:2c:08:
92:a2:74:4b:bf:0a:51:78:d0:d8:f0:ee:c7:70:11:
06:1b:f6:56:b2:c0:be:39:33:98:bc:5a:0c:97:15:
52:38:73:68:94:30:ac:c0:15:08:00:d2:3e:ff:7a:
b4:f4:6a:c4:48:64:9f:d1:00:0b:82:e9:43:59:e1:
18:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:22:67:60:0A:38:BF:96:89:7A:8D:84:36:CD:FF:4E:33:CA:80:70
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/wyJnYAo4v5aJeo2ENs3_TjPKgHA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.76.24.0/21
IPv6:
2a0f:b242::/31
2a0f:b247::/32
Signature Algorithm: sha256WithRSAEncryption
56:8f:7f:85:8e:e7:4f:1a:bd:5d:01:5b:30:30:58:c0:98:9a:
5e:aa:2d:68:16:63:69:34:f6:ef:51:cd:cb:85:89:ee:55:5f:
bd:30:b0:a4:e2:42:2e:81:85:62:3c:9e:a0:f9:df:60:e6:33:
75:4e:f0:97:82:dc:c3:9a:81:70:24:61:d6:af:3c:02:71:a3:
a5:a3:9c:59:65:70:b1:73:fc:02:a5:5f:c9:37:c4:96:7a:88:
da:ac:04:d1:d1:51:9e:7e:89:56:11:8f:cb:84:24:ac:87:41:
b7:22:73:b4:d4:f5:45:5e:1c:7c:2a:ba:9b:82:87:54:45:ca:
6c:29:3c:c1:2e:67:9d:d5:0c:3b:19:00:af:53:13:e0:21:d5:
86:ae:24:3c:2c:c5:12:90:05:2a:b0:d2:25:e3:8b:07:b6:f2:
08:f5:19:b5:19:75:1a:84:c4:ef:24:40:aa:a2:16:7f:e7:90:
51:1a:1b:b4:4e:d5:d5:f8:9c:fe:a1:ff:09:71:6e:10:1d:e6:
9c:c5:77:40:93:e9:c1:bd:76:49:c0:7d:27:1f:f2:18:fe:7e:
ad:55:e1:ad:b1:72:51:d1:9a:49:98:00:d4:66:7c:65:e4:ac:
70:dd:16:18:e8:70:98:9f:fb:16:28:78:d5:da:49:b0:57:e8:
c4:7f:1c:cc
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgISAZ/2ufsGtHGdC8etgOFjkEIfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk
ZmUyMGYwHhcNMjYwODEyMTYwNjUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMzIyNjc2MDBhMzhiZjk2ODk3YThkODQzNmNkZmY0ZTMzY2E4MDcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuF1lwsQnh/b8y2i4supP7xIjdgex
ydKVru59XZ3BcQi+rno+1cno0gBmq9182ek/VTYPsYHc+UI5c9idFA5LMJZpCGlg
7i2F/o9TClfuRJHU3FlqPKRjU6zPtVj3dTaWj0B8iuUsQn1E6poNIh2AzDet/Nau
XuZ5W2v07NNR5s+xXWrcQ2PNpA8pqvcuqCWWpKDa5qR/brVm2Sv6IR54XOiCGLUu
8cQSoUUDcdMIjqFtmjxK0UqaH87Xs12mDTsbLAiSonRLvwpReNDY8O7HcBEGG/ZW
ssC+OTOYvFoMlxVSOHNolDCswBUIANI+/3q09GrESGSf0QALgulDWeEY3wIDAQAB
o4ICHzCCAhswHQYDVR0OBBYEFMMiZ2AKOL+WiXqNhDbN/04zyoBwMB8GA1UdIwQY
MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct
YjcxNzk4MGU0YWQ2LzEvd3lKbllBbzR2NWFKZW8yRU5zM19UalBLZ0hBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2
LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAMBAIAATAGAwQDmUwYMBQE
AgACMA4DBQEqD7JCAwUAKg+yRzANBgkqhkiG9w0BAQsFAAOCAQEAVo9/hY7nTxq9
XQFbMDBYwJiaXqotaBZjaTT271HNy4WJ7lVfvTCwpOJCLoGFYjyeoPnfYOYzdU7w
l4Lcw5qBcCRh1q88AnGjpaOcWWVwsXP8AqVfyTfElnqI2qwE0dFRnn6JVhGPy4Qk
rIdBtyJztNT1RV4cfCq6m4KHVEXKbCk8wS5nndUMOxkAr1MT4CHVhq4kPCzFEpAF
KrDSJeOLB7byCPUZtRl1GoTE7yRAqqIWf+eQURobtE7V1fic/qH/CXFuEB3mnMV3
QJPpwb12ScB9Jx/yGP5+rVXhrbFyUdGaSZgA1GZ8ZeSscN0WGOhwmJ/7Fih41dpJ
sFfoxH8czA==
-----END CERTIFICATE-----
Generated at Tue Sep 1 02:48:17 2026 by rpki-client