Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/tX8g4ysst6UayyhKxWn9caeZ6q8.roa
File: tX8g4ysst6UayyhKxWn9caeZ6q8.roa (raw, json)
Hash identifier: qur0XBVBl5kmixRG1CpBlc3VfyHSfeNNM+Fvm2r43zc=
Subject key identifier: B5:7F:20:E3:2B:2C:B7:A5:1A:CB:28:4A:C5:69:FD:71:A7:99:EA:AF
Certificate issuer: /CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c
Certificate serial: 01A060E5FCB8711B7544A8A9105E8CB0411C
Authority key identifier: D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/tX8g4ysst6UayyhKxWn9caeZ6q8.roa
Signing time: Wed 02 Sep 2026 06:54:40 +0000
ROA not before: Wed 02 Sep 2026 06:54:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35629
IP address blocks: 77.110.67.0/24 maxlen: 24
77.110.69.0/24 maxlen: 24
77.110.73.0/24 maxlen: 24
77.110.78.0/24 maxlen: 24
77.110.86.0/24 maxlen: 24
77.110.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:60:e5:fc:b8:71:1b:75:44:a8:a9:10:5e:8c:b0:41:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c
Validity
Not Before: Sep 2 06:54:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b57f20e32b2cb7a51acb284ac569fd71a799eaaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:79:03:ee:d2:df:46:f2:c7:5b:43:93:32:8b:
c5:cf:aa:b6:a9:0d:5e:34:fe:8e:ee:bc:4a:b0:a1:
f0:16:bc:42:a0:d0:5d:31:9b:be:72:7c:9a:21:04:
3a:bb:3a:31:d3:c3:39:e2:b1:e5:af:80:e7:64:fc:
a2:89:cb:cd:e8:01:c2:3d:bd:a1:68:8e:06:15:2c:
89:b4:85:6f:22:c9:e9:e4:f0:c0:d2:82:37:38:20:
5d:65:78:5f:2b:14:72:59:b2:f9:97:d8:52:9d:94:
85:9a:fc:20:f7:f4:b2:f0:93:ee:73:11:35:28:ba:
f7:2c:d5:b0:a5:d8:f9:af:2e:35:76:c9:7f:ed:f4:
c3:ae:3b:c4:6a:e9:d3:f0:75:a0:05:17:8b:a5:ee:
0e:59:4b:7c:e9:9a:3d:60:78:1a:c1:e0:5b:74:40:
d1:a5:60:d6:5d:2d:7a:26:45:4f:99:45:3e:50:4c:
a4:d8:98:c6:36:07:26:29:2f:60:75:dc:76:1c:dd:
26:81:4e:b3:f5:f8:dd:cd:ec:ed:14:be:64:6b:bb:
f2:df:20:9c:23:9e:c4:53:12:58:1c:2a:e6:d2:9b:
b1:cf:a4:9d:6f:41:ee:d1:6d:42:10:49:2d:85:33:
bc:dd:f0:24:02:cd:44:36:2a:d2:b9:d5:a6:95:75:
4d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:7F:20:E3:2B:2C:B7:A5:1A:CB:28:4A:C5:69:FD:71:A7:99:EA:AF
X509v3 Authority Key Identifier:
keyid:D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/tX8g4ysst6UayyhKxWn9caeZ6q8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.110.67.0/24
77.110.69.0/24
77.110.73.0/24
77.110.78.0/24
77.110.86.0/24
77.110.92.0/24
Signature Algorithm: sha256WithRSAEncryption
04:2b:b6:d4:26:4d:c9:7e:ef:be:5e:2e:72:49:1b:49:d6:f8:
42:a2:38:75:3b:cb:47:31:e8:de:f8:7f:17:23:fc:0a:79:c5:
e2:a8:e8:29:1d:0c:bc:ba:15:d4:ba:dd:ca:dd:bd:9c:3e:e8:
c6:f7:33:88:c9:90:e7:e9:0f:01:58:27:0b:26:b9:b5:ee:e4:
6f:2d:54:68:69:27:f9:ef:7d:cc:38:72:03:66:1b:3f:7c:2f:
50:62:d0:e4:aa:e3:9f:e7:63:91:d7:dc:ea:69:09:76:93:de:
13:24:73:8c:54:0d:81:a3:d8:ca:8e:37:23:3a:cd:6f:4e:81:
b4:30:54:6e:39:49:95:d5:8d:7b:32:04:84:17:0e:4c:c3:be:
66:b7:46:cf:e8:65:94:6a:64:c2:c9:4f:26:64:c9:b5:f4:8c:
65:0b:e0:42:40:97:2e:9c:7f:99:43:fb:58:a4:55:27:7e:64:
16:74:bf:aa:bb:f5:f0:2c:09:01:39:fe:b3:69:96:6b:46:64:
17:68:15:d8:ce:d9:45:d4:f2:29:57:42:53:9e:d5:c1:64:d5:
21:a4:f1:c8:6a:03:fc:26:00:a1:f9:d7:f1:8e:5b:e4:7d:a4:
14:74:e5:3d:95:e8:72:34:92:b9:3a:2c:c8:9b:71:0f:5b:c9:
12:77:7f:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 13:14:24 2026 by rpki-client