Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/i0m0APQnzZzJyvphl4KkBXW_Ryo.roa
File: i0m0APQnzZzJyvphl4KkBXW_Ryo.roa (raw, json)
Hash identifier: CjwHIj9Cl0AJLk1K/3uk0D4To9cvJODmOb3ct/kJmsM=
Subject key identifier: 8B:49:B4:00:F4:27:CD:9C:C9:CA:FA:61:97:82:A4:05:75:BF:47:2A
Certificate issuer: /CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c
Certificate serial: 019F60820DCA7234F08D5BB6F5B7D7C3B47D
Authority key identifier: D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/i0m0APQnzZzJyvphl4KkBXW_Ryo.roa
Signing time: Tue 14 Jul 2026 12:02:43 +0000
ROA not before: Tue 14 Jul 2026 12:02:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208185
IP address blocks: 77.110.72.0/24 maxlen: 24
77.110.76.0/24 maxlen: 24
77.110.89.0/24 maxlen: 24
77.110.94.0/24 maxlen: 24
80.71.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:60:82:0d:ca:72:34:f0:8d:5b:b6:f5:b7:d7:c3:b4:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c
Validity
Not Before: Jul 14 12:02:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8b49b400f427cd9cc9cafa619782a40575bf472a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:42:4e:ad:7c:53:0d:cf:2a:58:71:fa:f2:62:
2a:d7:72:db:8e:bb:f8:16:29:41:0f:31:0c:39:2f:
5e:fb:8c:4e:ce:3b:a7:32:a9:b6:8f:bf:46:54:a6:
5f:b7:66:be:f8:3e:bc:8e:a4:11:e5:36:c2:39:52:
71:97:db:ee:6a:ed:86:89:c2:35:93:8e:cb:c6:e1:
55:73:95:7f:cd:4e:04:5a:52:da:0d:56:57:bf:75:
29:8d:5a:8e:61:db:7b:90:5a:63:ea:9a:0c:e8:f4:
e7:84:25:e8:27:26:bb:7c:a7:34:de:ff:66:9c:37:
43:7a:b7:c1:1a:36:de:66:b2:36:9d:73:67:10:6b:
72:29:7b:ed:ff:2b:0f:d3:2a:e5:9a:9c:36:94:b5:
c4:8b:81:d4:14:4f:44:72:fd:29:7a:cf:4e:ea:02:
b5:fa:53:e9:9e:3e:25:3d:9d:a2:34:f3:1b:25:ad:
5c:7b:18:1b:83:2f:17:62:02:7e:62:33:35:d6:06:
2b:4c:45:02:4b:ec:bb:b6:11:f3:c5:1c:ed:e0:3e:
c1:be:41:3e:d2:1f:c3:22:51:ce:92:95:e9:05:7a:
57:fa:20:94:8a:1d:91:a5:15:d4:18:02:d5:45:63:
6d:f3:90:7f:1e:29:db:e7:90:6b:25:2e:ff:4a:96:
dc:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:49:B4:00:F4:27:CD:9C:C9:CA:FA:61:97:82:A4:05:75:BF:47:2A
X509v3 Authority Key Identifier:
keyid:D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/i0m0APQnzZzJyvphl4KkBXW_Ryo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.110.72.0/24
77.110.76.0/24
77.110.89.0/24
77.110.94.0/24
80.71.153.0/24
Signature Algorithm: sha256WithRSAEncryption
67:88:14:9c:06:29:a5:4c:07:14:a4:a7:02:14:3f:91:aa:c7:
11:36:0a:78:26:e5:5d:32:2d:eb:6e:1b:a8:95:97:57:e1:12:
61:a4:6b:f8:12:71:49:ec:7f:a6:50:39:52:f1:26:4e:7b:7e:
76:2e:9d:9c:22:a7:4d:c1:75:c4:b2:0c:5f:27:e8:c1:07:36:
c8:27:13:c5:66:a3:5a:a8:66:57:21:ca:d2:c3:ce:2e:91:82:
02:aa:33:e6:1c:c5:eb:4f:b7:48:12:f3:d9:35:09:82:4e:ec:
34:3d:20:ca:8f:7b:01:e8:57:d4:ab:aa:f0:fd:cf:58:97:0c:
8a:2c:ad:56:df:0d:a2:60:54:d7:03:d8:0b:71:b0:25:d7:90:
2f:8b:3f:47:39:39:cc:70:d9:ef:ee:19:50:41:b8:e5:35:ed:
fc:03:57:a7:d3:2f:36:42:71:64:37:5a:7a:ce:5e:2c:fd:48:
26:f5:60:f8:da:2f:3e:35:84:bf:63:06:26:00:72:31:50:8b:
d5:7a:d6:49:ed:bc:9f:28:c3:69:45:7a:b9:44:54:c4:9e:07:
f9:57:b9:c5:56:6a:5c:ab:4a:e6:4d:a8:f1:cc:56:ac:71:7b:
c2:15:8e:ec:98:4d:25:be:18:54:00:c9:db:fb:52:66:fe:fb:
0b:23:7f:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:46:52 2026 by rpki-client