Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/IBKxpAx_rOA4t3NpMOaaZmll4o0.roa
File: IBKxpAx_rOA4t3NpMOaaZmll4o0.roa (raw, json)
Hash identifier: ES8RVkhmypP6REC97QcFPigX79fugMh/oabdVtlVO5c=
Subject key identifier: 20:12:B1:A4:0C:7F:AC:E0:38:B7:73:69:30:E6:9A:66:69:65:E2:8D
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 019C37A51B7E5908B5E81FCD0E897FA0F3B9
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/IBKxpAx_rOA4t3NpMOaaZmll4o0.roa
Signing time: Sat 07 Feb 2026 10:28:13 +0000
ROA not before: Sat 07 Feb 2026 10:28:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214922
IP address blocks: 81.12.54.0/24 maxlen: 24
87.107.81.0/24 maxlen: 24
87.107.82.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:37:a5:1b:7e:59:08:b5:e8:1f:cd:0e:89:7f:a0:f3:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Feb 7 10:28:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2012b1a40c7face038b7736930e69a666965e28d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:95:32:d2:2a:3b:6f:51:b1:86:88:a5:b3:67:
a3:b0:40:15:bd:d1:3f:bb:ad:d4:9d:7d:f0:62:81:
65:c7:1c:e9:3d:ef:44:18:75:1e:7a:51:81:04:f8:
89:b0:7b:f8:8e:2e:63:a3:5a:5e:1a:13:68:51:81:
8a:ce:e5:70:16:64:1f:a2:52:a6:39:15:33:51:ee:
71:68:1f:5d:d7:a2:0a:bd:49:e1:b4:29:08:4a:0b:
9f:1d:bb:81:08:b2:e3:88:06:65:5a:6d:2f:04:a2:
03:e8:bb:ea:3a:8a:7c:30:1e:31:a9:ba:70:66:16:
30:92:f4:07:90:12:9c:65:ed:78:a9:f2:67:22:91:
3d:0a:53:8b:45:79:d4:d6:f6:21:bf:f7:d5:bf:f2:
d0:28:5e:4d:c9:b6:d9:9d:d6:01:8d:91:28:0c:51:
69:ec:e0:f2:7b:d4:de:db:57:9c:f8:89:0f:53:99:
7a:12:fb:09:57:9a:20:73:1d:ab:70:fa:bd:7f:0c:
86:2a:1d:e9:21:89:28:b7:8d:9b:33:61:fc:2b:51:
ab:a2:4e:90:49:75:34:96:ed:6c:81:bc:aa:45:b4:
07:89:8b:5c:82:cc:50:b2:79:43:fa:d3:96:04:62:
7b:58:90:43:e9:25:73:a7:5f:2b:81:c4:5a:0d:22:
be:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:12:B1:A4:0C:7F:AC:E0:38:B7:73:69:30:E6:9A:66:69:65:E2:8D
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/IBKxpAx_rOA4t3NpMOaaZmll4o0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.12.54.0/24
87.107.81.0-87.107.83.255
Signature Algorithm: sha256WithRSAEncryption
c0:e3:3d:5a:4d:f5:66:06:bc:8c:c9:16:5a:cc:16:2c:b5:65:
4e:0f:98:5d:d9:e6:48:39:4d:f9:7b:d3:e8:8f:e0:b3:a5:fa:
3c:e7:2e:52:94:3e:ad:fa:02:aa:9b:a6:0a:af:3a:5e:b7:be:
95:12:0e:6b:ea:ea:5f:ca:27:74:22:e9:fb:87:30:87:a1:19:
87:f2:c5:99:18:51:d9:ae:04:cf:25:a6:15:a9:57:b4:49:ec:
53:a1:0b:3d:94:aa:6c:39:90:36:17:14:9b:7a:57:d5:b1:fc:
1d:92:7f:de:e1:7e:00:ff:6b:44:9e:c8:d2:0a:c7:47:ef:ae:
f1:26:e1:0e:99:c4:bd:4e:48:43:01:3b:c2:c7:d8:04:5e:ed:
4f:7a:86:30:fb:60:b8:60:5e:f2:df:9c:1e:e0:36:0e:45:50:
02:11:a7:74:70:05:9d:d6:5a:56:be:a3:c7:7d:e5:33:93:4e:
c7:91:8e:ae:69:3f:e3:26:92:2b:89:84:86:b0:7f:f0:1e:0a:
d3:32:4b:4b:4b:f9:bd:64:39:e1:6a:40:5b:c0:db:03:89:14:
3f:a1:ad:40:4a:95:ab:ca:a0:07:19:48:bb:9e:79:64:d4:7f:
11:32:1f:ad:03:c0:8f:c9:e9:c5:9e:b2:d8:e8:52:d8:7d:5b:
2e:3d:a3:0b
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAZw3pRt+WQi16B/NDol/oPO5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwNzc1ZDk0NzFiODVkOTYzZmVmNmQyODM1OTBlMmQ5NDJk
ZDVjMjEwHhcNMjYwMjA3MTAyODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMDEyYjFhNDBjN2ZhY2UwMzhiNzczNjkzMGU2OWE2NjY5NjVlMjhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5Uy0io7b1Gxhoils2ejsEAVvdE/
u63UnX3wYoFlxxzpPe9EGHUeelGBBPiJsHv4ji5jo1peGhNoUYGKzuVwFmQfolKm
ORUzUe5xaB9d16IKvUnhtCkISgufHbuBCLLjiAZlWm0vBKID6LvqOop8MB4xqbpw
ZhYwkvQHkBKcZe14qfJnIpE9ClOLRXnU1vYhv/fVv/LQKF5NybbZndYBjZEoDFFp
7ODye9Te21ec+IkPU5l6EvsJV5ogcx2rcPq9fwyGKh3pIYkot42bM2H8K1Grok6Q
SXU0lu1sgbyqRbQHiYtcgsxQsnlD+tOWBGJ7WJBD6SVzp18rgcRaDSK+VwIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFCASsaQMf6zgOLdzaTDmmmZpZeKNMB8GA1UdIwQY
MBaAFAB3XZRxuF2WP+9tKDWQ4tlC3VwhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQt
NzZiMzNlNGNlODIxLzEvSUJLeHBBeF9yT0E0dDNOcE1PYWFabWxsNG8wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQtNzZiMzNlNGNlODIx
LzEvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAUQw2MAwD
BABXa1EDBAJXa1AwDQYJKoZIhvcNAQELBQADggEBAMDjPVpN9WYGvIzJFlrMFiy1
ZU4PmF3Z5kg5Tfl70+iP4LOl+jznLlKUPq36AqqbpgqvOl63vpUSDmvq6l/KJ3Qi
6fuHMIehGYfyxZkYUdmuBM8lphWpV7RJ7FOhCz2Uqmw5kDYXFJt6V9Wx/B2Sf97h
fgD/a0SeyNIKx0fvrvEm4Q6ZxL1OSEMBO8LH2ARe7U96hjD7YLhgXvLfnB7gNg5F
UAIRp3RwBZ3WWla+o8d95TOTTseRjq5pP+MmkiuJhIawf/AeCtMyS0tL+b1kOeFq
QFvA2wOJFD+hrUBKlavKoAcZSLueeWTUfxEyH60DwI/J6cWestjoUth9Wy49ows=
-----END CERTIFICATE-----
Generated at Mon Mar 2 22:29:49 2026 by rpki-client