Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/LDCQKxYu17PBfjGz3HsKJehPutU.roa
File: LDCQKxYu17PBfjGz3HsKJehPutU.roa (raw, json)
Hash identifier: NekO5uIiTvcwPvB0U7eorZFJgQSTt1Z9cGsuN/y6Zwk=
Subject key identifier: 2C:30:90:2B:16:2E:D7:B3:C1:7E:31:B3:DC:7B:0A:25:E8:4F:BA:D5
Certificate issuer: /CN=6107e2e2e8171d319da1bc64b36c3c985e646c2a
Certificate serial: 019F42E42B386384608F9ECC9FE24A3336B5
Authority key identifier: 61:07:E2:E2:E8:17:1D:31:9D:A1:BC:64:B3:6C:3C:98:5E:64:6C:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YQfi4ugXHTGdobxks2w8mF5kbCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/LDCQKxYu17PBfjGz3HsKJehPutU.roa
Signing time: Wed 08 Jul 2026 18:01:17 +0000
ROA not before: Wed 08 Jul 2026 18:01:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42868
IP address blocks: 77.245.144.0/24 maxlen: 24
77.245.145.0/24 maxlen: 24
77.245.146.0/24 maxlen: 24
77.245.147.0/24 maxlen: 24
77.245.148.0/24 maxlen: 24
77.245.149.0/24 maxlen: 24
77.245.150.0/24 maxlen: 24
77.245.151.0/24 maxlen: 24
77.245.152.0/24 maxlen: 24
77.245.153.0/24 maxlen: 24
77.245.154.0/24 maxlen: 24
77.245.155.0/24 maxlen: 24
77.245.156.0/24 maxlen: 24
77.245.158.0/24 maxlen: 24
77.245.159.0/24 maxlen: 24
178.210.161.0/24 maxlen: 24
178.210.165.0/24 maxlen: 24
178.210.168.0/24 maxlen: 24
185.87.252.0/24 maxlen: 24
185.87.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/YQfi4ugXHTGdobxks2w8mF5kbCo.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/YQfi4ugXHTGdobxks2w8mF5kbCo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YQfi4ugXHTGdobxks2w8mF5kbCo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:42:e4:2b:38:63:84:60:8f:9e:cc:9f:e2:4a:33:36:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6107e2e2e8171d319da1bc64b36c3c985e646c2a
Validity
Not Before: Jul 8 18:01:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2c30902b162ed7b3c17e31b3dc7b0a25e84fbad5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:10:28:a7:03:1d:fb:e5:d6:10:6b:64:91:6f:
8f:ad:0a:9e:a2:1f:54:31:2c:fd:47:1b:db:a1:1c:
03:cf:b7:78:6f:03:56:79:84:a7:73:b4:f2:46:d0:
4b:4a:41:4d:f8:ac:8c:f1:54:91:07:63:c0:1c:a0:
d6:6e:ac:a6:6f:75:15:2a:c0:d7:0d:08:68:29:e8:
c9:66:45:fd:3d:09:4a:6d:6d:1e:44:78:3e:28:52:
8b:9a:bb:f7:a8:41:ce:0b:e1:2c:ff:3f:b4:b0:ec:
7f:62:6b:43:a7:ca:8c:62:04:1e:73:c6:34:e9:7d:
de:c7:04:bf:ee:02:bf:13:39:34:db:b2:e2:5a:da:
3b:4b:b6:aa:05:a0:98:7a:66:f8:34:d5:cc:11:1e:
c5:40:6d:af:0a:cb:9e:45:99:37:bf:de:fe:26:ea:
bf:7f:3a:87:93:d5:c5:2b:e8:53:3b:07:85:59:f6:
7a:c6:ad:b5:e1:e2:b0:cb:c0:54:20:a0:62:f2:a9:
66:fa:53:b2:e6:f5:76:0c:60:e1:74:0c:c8:b6:27:
1c:11:20:6e:10:c2:d5:ad:09:45:8b:c5:2e:cd:a2:
ad:e4:f4:50:5b:dc:fd:d2:b8:58:f2:64:1a:59:69:
de:24:72:f8:c1:4e:8f:69:bd:81:8f:58:03:94:38:
72:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:30:90:2B:16:2E:D7:B3:C1:7E:31:B3:DC:7B:0A:25:E8:4F:BA:D5
X509v3 Authority Key Identifier:
keyid:61:07:E2:E2:E8:17:1D:31:9D:A1:BC:64:B3:6C:3C:98:5E:64:6C:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YQfi4ugXHTGdobxks2w8mF5kbCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/LDCQKxYu17PBfjGz3HsKJehPutU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/YQfi4ugXHTGdobxks2w8mF5kbCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.245.144.0-77.245.156.255
77.245.158.0/23
178.210.161.0/24
178.210.165.0/24
178.210.168.0/24
185.87.252.0/23
Signature Algorithm: sha256WithRSAEncryption
83:13:81:90:50:71:a6:42:55:b5:9d:32:49:35:e5:fb:b2:44:
b5:4d:aa:f3:bd:84:1a:84:f0:e8:46:25:01:2f:98:48:b6:76:
6e:64:c1:77:2e:04:24:23:ec:3d:2e:70:34:bf:ba:7b:3b:a7:
2b:c4:7a:a7:a4:5f:af:09:9e:cc:34:1f:82:8d:4c:c4:57:06:
50:95:24:5c:61:07:47:bf:60:72:33:e5:c1:35:71:5a:a2:c0:
9a:56:fe:c4:61:ba:74:37:f8:c2:63:ed:11:64:3d:12:11:27:
73:b8:32:c5:cb:03:54:5a:ab:2c:0c:14:47:d3:45:43:92:c5:
ef:5d:a3:8d:88:c2:1c:d5:dd:f3:10:78:a7:c5:70:0a:82:5b:
0c:00:79:8e:ac:52:5c:bd:24:99:18:24:69:fe:47:7b:6b:06:
4c:b5:da:6e:88:54:01:a8:e8:48:92:25:34:66:a2:d5:c2:90:
f1:ec:93:be:80:58:9e:be:19:17:99:d5:e9:bc:31:0d:fc:40:
a7:c3:b2:41:f0:c9:c1:42:4e:5f:2b:00:fc:32:ae:71:65:ea:
59:4d:9b:7a:e2:a1:2d:2c:77:aa:ea:5a:2e:ce:f7:63:0a:43:
8e:53:8e:5b:f5:2a:d3:13:85:3e:e9:e0:26:0d:c9:da:7e:dc:
d3:08:fc:12
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgISAZ9C5Cs4Y4Rgj57Mn+JKMza1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxMDdlMmUyZTgxNzFkMzE5ZGExYmM2NGIzNmMzYzk4NWU2
NDZjMmEwHhcNMjYwNzA4MTgwMTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYzMwOTAyYjE2MmVkN2IzYzE3ZTMxYjNkYzdiMGEyNWU4NGZiYWQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2BAopwMd++XWEGtkkW+PrQqeoh9U
MSz9RxvboRwDz7d4bwNWeYSnc7TyRtBLSkFN+KyM8VSRB2PAHKDWbqymb3UVKsDX
DQhoKejJZkX9PQlKbW0eRHg+KFKLmrv3qEHOC+Es/z+0sOx/YmtDp8qMYgQec8Y0
6X3exwS/7gK/Ezk027LiWto7S7aqBaCYemb4NNXMER7FQG2vCsueRZk3v97+Juq/
fzqHk9XFK+hTOweFWfZ6xq214eKwy8BUIKBi8qlm+lOy5vV2DGDhdAzIticcESBu
EMLVrQlFi8UuzaKt5PRQW9z90rhY8mQaWWneJHL4wU6Pab2Bj1gDlDhyNwIDAQAB
o4ICLzCCAiswHQYDVR0OBBYEFCwwkCsWLtezwX4xs9x7CiXoT7rVMB8GA1UdIwQY
MBaAFGEH4uLoFx0xnaG8ZLNsPJheZGwqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVFmaTR1Z1hIVEdkb2J4a3MydzhtRjVrYkNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9iMDdlNTgtZjkzYS00ZDVmLWI5MmQt
NjAxNmQ1YzA1ZjMwLzEvTERDUUt4WXUxN1BCZmpHejNIc0tKZWhQdXRVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi9iMDdlNTgtZjkzYS00ZDVmLWI5MmQtNjAxNmQ1YzA1ZjMw
LzEvWVFmaTR1Z1hIVEdkb2J4a3MydzhtRjVrYkNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsMAwDBARN9ZAD
BABN9ZwDBAFN9Z4DBACy0qEDBACy0qUDBACy0qgDBAG5V/wwDQYJKoZIhvcNAQEL
BQADggEBAIMTgZBQcaZCVbWdMkk15fuyRLVNqvO9hBqE8OhGJQEvmEi2dm5kwXcu
BCQj7D0ucDS/uns7pyvEeqekX68Jnsw0H4KNTMRXBlCVJFxhB0e/YHIz5cE1cVqi
wJpW/sRhunQ3+MJj7RFkPRIRJ3O4MsXLA1RaqywMFEfTRUOSxe9do42IwhzV3fMQ
eKfFcAqCWwwAeY6sUly9JJkYJGn+R3trBky12m6IVAGo6EiSJTRmotXCkPHsk76A
WJ6+GReZ1em8MQ38QKfDskHwycFCTl8rAPwyrnFl6llNm3rioS0sd6rqWi7O92MK
Q45Tjlv1KtMThT7p4CYNydp+3NMI/BI=
-----END CERTIFICATE-----
Generated at Fri Jul 24 23:06:48 2026 by rpki-client