Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/wNRTB3A2q9f-yV1rTSijUO5gEB8.roa
File: wNRTB3A2q9f-yV1rTSijUO5gEB8.roa (raw, json)
Hash identifier: Mvkmn5/K4C/vX+W0bmirSKlojMyVfTuv4C+eRU2oTlU=
Subject key identifier: C0:D4:53:07:70:36:AB:D7:FE:C9:5D:6B:4D:28:A3:50:EE:60:10:1F
Certificate issuer: /CN=df895a3ee2211b6ee2df7202f09a426680d66269
Certificate serial: 019F617EBD17763BC4839BAEF9396BC0DDD8
Authority key identifier: DF:89:5A:3E:E2:21:1B:6E:E2:DF:72:02:F0:9A:42:66:80:D6:62:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/wNRTB3A2q9f-yV1rTSijUO5gEB8.roa
Signing time: Tue 14 Jul 2026 16:38:43 +0000
ROA not before: Tue 14 Jul 2026 16:38:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216334
IP address blocks: 77.105.131.0/24 maxlen: 24
77.105.133.0/24 maxlen: 24
77.105.144.0/24 maxlen: 24
77.105.162.0/24 maxlen: 24
91.193.43.0/24 maxlen: 24
185.80.91.0/24 maxlen: 24
194.117.80.0/24 maxlen: 24
2a00:f9a0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:61:7e:bd:17:76:3b:c4:83:9b:ae:f9:39:6b:c0:dd:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df895a3ee2211b6ee2df7202f09a426680d66269
Validity
Not Before: Jul 14 16:38:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c0d453077036abd7fec95d6b4d28a350ee60101f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e8:c6:99:2e:3a:12:36:cf:82:7e:bd:7d:30:
0d:f8:c7:2a:f8:80:aa:ad:ca:f6:8b:b7:5f:c6:4e:
87:ea:3a:51:f2:e2:59:0c:b6:d1:80:12:09:5d:d4:
c3:a7:7d:aa:ec:38:1d:90:f3:be:dc:50:ba:fb:4b:
ac:34:bf:23:73:c7:ad:f4:54:fa:54:48:46:22:93:
06:f9:a5:61:59:a1:7b:66:a4:36:83:54:06:5b:11:
79:43:5d:50:dd:5a:45:16:c4:7b:b6:fb:b2:85:27:
79:b7:30:55:ed:cb:d9:ca:9f:ec:e5:2e:6c:41:3f:
06:c4:44:0d:f0:97:0f:5f:56:dd:7b:c1:fb:f5:ee:
e9:2c:88:79:cb:c1:46:6f:ae:96:3f:b5:04:70:1d:
32:93:a5:9b:00:dd:ad:95:7b:48:4e:80:21:4b:9e:
0c:90:72:02:6e:9c:0c:19:24:66:7f:11:ad:65:0c:
c2:92:37:10:93:41:16:95:07:61:72:c2:48:62:f2:
28:97:1a:db:8d:2a:f8:c7:5f:89:ab:ca:d7:76:cb:
74:5d:95:93:68:9a:67:43:46:a9:35:8a:2a:c2:e5:
da:5b:f1:fe:af:51:a5:85:bc:e3:68:7e:3a:b3:f9:
eb:bd:7c:49:30:f5:a4:e4:ae:cf:62:b9:a3:1a:19:
ae:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:D4:53:07:70:36:AB:D7:FE:C9:5D:6B:4D:28:A3:50:EE:60:10:1F
X509v3 Authority Key Identifier:
keyid:DF:89:5A:3E:E2:21:1B:6E:E2:DF:72:02:F0:9A:42:66:80:D6:62:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/wNRTB3A2q9f-yV1rTSijUO5gEB8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.131.0/24
77.105.133.0/24
77.105.144.0/24
77.105.162.0/24
91.193.43.0/24
185.80.91.0/24
194.117.80.0/24
IPv6:
2a00:f9a0::/32
Signature Algorithm: sha256WithRSAEncryption
22:f6:ca:43:36:92:bb:d9:aa:02:c9:40:33:ca:3f:c6:ce:46:
42:77:0c:96:eb:3d:22:04:3c:cc:1c:ea:54:e5:50:37:6f:bc:
00:87:09:3b:0a:7a:5b:67:8d:45:76:43:e3:b6:9c:c2:19:88:
4e:97:2a:64:ba:da:f6:a1:a5:67:2a:88:8c:08:a4:7b:a5:c5:
0d:dd:91:7a:ab:28:66:ce:f4:4f:23:07:a7:b4:84:9a:7d:8e:
2f:99:bb:00:9e:20:2e:bc:da:50:14:5d:10:0c:6d:6d:a1:e3:
84:2b:14:03:b6:40:a9:60:ee:b9:6c:0d:4f:8b:55:5f:81:8d:
dd:18:16:ba:f6:98:fc:47:08:7d:49:46:02:d5:e5:cd:68:ad:
93:e2:83:fc:54:e0:9d:63:e8:c6:2d:bf:c3:4d:0d:e9:bc:9d:
4a:28:dd:cc:e4:2a:8f:0c:f5:88:39:b9:de:54:ca:3e:78:05:
28:ba:79:67:7a:0e:6b:97:a6:f5:7d:81:f8:61:3d:33:31:e6:
03:f8:f9:ff:79:33:ed:bd:64:48:b7:8c:3f:51:b7:1b:1b:cf:
3b:b1:af:c6:aa:2e:0f:33:d3:c0:ce:34:f6:45:e1:a9:62:b6:
bb:02:db:7f:ba:58:73:53:85:92:a6:aa:e5:96:c0:a9:a1:e3:
fb:5d:e0:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:25:26 2026 by rpki-client