Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/13PtEGHRyRBDwBxmbzxUvCo_-Po.roa
File: 13PtEGHRyRBDwBxmbzxUvCo_-Po.roa (raw, json)
Hash identifier: gmWm+/ogZzaGFj73O7WIfU5iXZ/0GrgM+acaPKm0AcA=
Subject key identifier: D7:73:ED:10:61:D1:C9:10:43:C0:1C:66:6F:3C:54:BC:2A:3F:F8:FA
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 01A099B493679DD5A869491EF3944BABFECD
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/13PtEGHRyRBDwBxmbzxUvCo_-Po.roa
Signing time: Sun 13 Sep 2026 07:39:03 +0000
ROA not before: Sun 13 Sep 2026 07:39:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62367
IP address blocks: 87.107.134.0/23 maxlen: 24
87.107.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 23:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:99:b4:93:67:9d:d5:a8:69:49:1e:f3:94:4b:ab:fe:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Sep 13 07:39:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d773ed1061d1c91043c01c666f3c54bc2a3ff8fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f3:04:4e:80:f5:e2:bd:1d:fe:9c:eb:c5:a7:
de:70:6d:1f:36:8b:3e:d5:ae:dd:31:1b:7a:5b:bf:
84:10:dd:49:3e:81:f4:28:e5:32:fa:8e:73:71:27:
77:ac:ff:7e:c9:9a:88:05:5e:94:96:7e:d2:d1:27:
4c:4e:26:77:19:74:0b:d0:89:54:38:b5:8a:de:da:
c4:c1:ad:ce:10:9f:b4:70:da:9b:e7:cc:93:37:8f:
7a:26:e3:7b:e8:45:db:92:63:7d:7f:14:0c:fc:ba:
78:bc:28:eb:4b:e1:17:60:f4:6d:4b:33:83:cd:e7:
a3:a4:66:fd:cd:33:ba:07:fe:51:cb:6e:4e:7d:40:
36:93:b5:7b:1e:2d:1a:57:5a:b7:d4:4f:70:30:d8:
20:cb:a0:66:75:ee:b3:da:82:ac:86:08:64:8b:f4:
d9:07:91:d0:ea:9c:ed:d4:96:8b:a2:00:6b:86:e8:
04:c1:a3:b7:ff:c1:35:47:81:d3:30:5d:5d:e0:b6:
d6:64:f4:34:a6:4a:db:3f:60:35:70:0c:2f:20:21:
36:a0:7c:0c:76:ca:03:16:ac:3b:65:c6:a9:24:ca:
56:0e:f1:be:ee:b0:8b:ff:a2:55:97:65:fd:3f:1b:
7d:1f:26:5d:65:fe:46:84:09:e0:18:16:f7:d8:5f:
e2:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:73:ED:10:61:D1:C9:10:43:C0:1C:66:6F:3C:54:BC:2A:3F:F8:FA
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/13PtEGHRyRBDwBxmbzxUvCo_-Po.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.107.134.0/23
87.107.145.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:c9:13:fd:88:5b:0f:05:d8:41:b8:01:68:41:02:ea:ce:5d:
f5:40:4c:93:43:f7:06:bc:05:8c:6b:89:16:7b:49:91:2f:8c:
a9:2a:bf:4a:e9:7f:de:93:94:ab:5d:b6:92:bb:1c:56:1a:44:
a6:8e:04:86:aa:d3:32:70:50:cd:06:09:47:86:9e:6f:93:a1:
75:63:16:f5:96:2e:e7:97:27:30:5e:4b:d8:fc:88:1d:82:fc:
be:69:26:0a:47:37:eb:d0:ec:14:50:a0:4c:39:f9:df:01:fd:
02:f1:d4:4b:56:1e:30:b7:80:2d:ef:87:72:d1:13:70:da:88:
27:14:af:24:19:53:69:40:3b:20:bf:de:c2:51:89:b1:d9:a8:
d8:be:31:6d:43:6c:5b:7c:33:64:95:b3:75:9a:bc:a1:cd:34:
82:82:f4:53:ce:62:1d:9c:a7:2c:fa:21:83:99:88:82:68:e5:
27:27:6f:e8:0c:9e:12:35:ca:dd:e2:e7:ec:18:5e:03:9b:34:
ec:32:9a:09:42:14:4c:93:5f:b1:b5:e3:9a:a7:45:03:2e:1a:
e1:68:77:f5:d2:2e:95:87:49:0a:e4:6c:1c:89:aa:55:9d:36:
11:76:0c:1b:63:4b:7e:2f:4b:94:60:d9:69:01:ce:b3:0c:26:
7e:2e:b5:93
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaCZtJNnndWoaUke85RLq/7NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwNzc1ZDk0NzFiODVkOTYzZmVmNmQyODM1OTBlMmQ5NDJk
ZDVjMjEwHhcNMjYwOTEzMDczOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNzczZWQxMDYxZDFjOTEwNDNjMDFjNjY2ZjNjNTRiYzJhM2ZmOGZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPMEToD14r0d/pzrxafecG0fNos+
1a7dMRt6W7+EEN1JPoH0KOUy+o5zcSd3rP9+yZqIBV6Uln7S0SdMTiZ3GXQL0IlU
OLWK3trEwa3OEJ+0cNqb58yTN496JuN76EXbkmN9fxQM/Lp4vCjrS+EXYPRtSzOD
zeejpGb9zTO6B/5Ry25OfUA2k7V7Hi0aV1q31E9wMNggy6Bmde6z2oKshghki/TZ
B5HQ6pzt1JaLogBrhugEwaO3/8E1R4HTMF1d4LbWZPQ0pkrbP2A1cAwvICE2oHwM
dsoDFqw7ZcapJMpWDvG+7rCL/6JVl2X9Pxt9HyZdZf5GhAngGBb32F/iFwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFNdz7RBh0ckQQ8AcZm88VLwqP/j6MB8GA1UdIwQY
MBaAFAB3XZRxuF2WP+9tKDWQ4tlC3VwhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQt
NzZiMzNlNGNlODIxLzEvMTNQdEVHSFJ5UkJEd0J4bWJ6eFV2Q29fLVBvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQtNzZiMzNlNGNlODIx
LzEvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBV2uGAwQA
V2uRMA0GCSqGSIb3DQEBCwUAA4IBAQDMyRP9iFsPBdhBuAFoQQLqzl31QEyTQ/cG
vAWMa4kWe0mRL4ypKr9K6X/ek5SrXbaSuxxWGkSmjgSGqtMycFDNBglHhp5vk6F1
Yxb1li7nlycwXkvY/Igdgvy+aSYKRzfr0OwUUKBMOfnfAf0C8dRLVh4wt4At74dy
0RNw2ognFK8kGVNpQDsgv97CUYmx2ajYvjFtQ2xbfDNklbN1mryhzTSCgvRTzmId
nKcs+iGDmYiCaOUnJ2/oDJ4SNcrd4ufsGF4DmzTsMpoJQhRMk1+xteOap0UDLhrh
aHf10i6Vh0kK5GwciapVnTYRdgwbY0t+L0uUYNlpAc6zDCZ+LrWT
-----END CERTIFICATE-----
Generated at Tue Sep 22 09:06:43 2026 by rpki-client