Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/nU05wjCCjQdvD0N5GwShQguLcMg.roa
File: nU05wjCCjQdvD0N5GwShQguLcMg.roa (raw, json)
Hash identifier: j/VwIGsTlBAaDg3IJsHet13mXvJWrVOZiHUgffdX7c4=
Subject key identifier: 9D:4D:39:C2:30:82:8D:07:6F:0F:43:79:1B:04:A1:42:0B:8B:70:C8
Certificate issuer: /CN=d504e641e55a48aee0141e2c0d26227102caa6d4
Certificate serial: 019CE1D92220DAF3A88ABF85B6658CF7A4E9
Authority key identifier: D5:04:E6:41:E5:5A:48:AE:E0:14:1E:2C:0D:26:22:71:02:CA:A6:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/nU05wjCCjQdvD0N5GwShQguLcMg.roa
Signing time: Thu 12 Mar 2026 11:40:29 +0000
ROA not before: Thu 12 Mar 2026 11:40:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209242
IP address blocks: 77.232.140.0/24 maxlen: 24
77.232.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 14:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e1:d9:22:20:da:f3:a8:8a:bf:85:b6:65:8c:f7:a4:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d504e641e55a48aee0141e2c0d26227102caa6d4
Validity
Not Before: Mar 12 11:40:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9d4d39c230828d076f0f43791b04a1420b8b70c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c2:92:22:7c:29:71:ec:32:0c:4b:f7:5c:be:
10:f3:fe:00:d9:83:85:1d:fc:4c:cb:73:e5:ca:b3:
0a:61:b5:a5:fb:b9:82:23:63:33:8f:eb:f3:e0:d6:
23:eb:70:57:2f:76:2e:a2:e6:7d:bc:5c:32:ab:3b:
0c:f9:7e:3e:59:9d:3c:00:14:b6:82:20:b0:79:74:
83:76:47:15:dc:da:03:33:56:b3:cd:cb:e7:96:48:
46:0b:ef:00:81:ff:79:c0:09:45:ac:1c:08:60:5f:
f0:94:2b:ea:fb:03:c1:5c:42:8c:30:8e:23:36:85:
8b:42:48:54:b1:b6:a4:b2:ff:c0:7d:10:0b:6d:d5:
06:59:ca:61:73:33:ab:35:25:f7:e2:8a:df:a4:39:
ec:f6:12:6b:2e:72:75:ea:bc:b8:de:64:af:79:76:
d9:0c:41:d4:4c:5d:66:c6:bf:2d:6f:bf:dd:44:5f:
a8:8a:cb:e1:25:e9:19:03:b6:61:72:0e:bb:cd:2a:
b1:73:10:88:ba:3f:41:bc:0c:ad:36:f0:2a:18:8a:
2f:5d:8b:69:d5:44:5a:fe:7e:34:0e:44:cb:26:48:
ca:14:d3:aa:58:f6:db:9e:06:da:58:f1:74:b8:8d:
b4:18:c3:d7:38:eb:3d:ce:c3:de:a5:4d:49:f6:a1:
e9:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:4D:39:C2:30:82:8D:07:6F:0F:43:79:1B:04:A1:42:0B:8B:70:C8
X509v3 Authority Key Identifier:
keyid:D5:04:E6:41:E5:5A:48:AE:E0:14:1E:2C:0D:26:22:71:02:CA:A6:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/nU05wjCCjQdvD0N5GwShQguLcMg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.232.140.0/23
Signature Algorithm: sha256WithRSAEncryption
39:ed:d5:91:98:f1:82:b0:6f:08:bd:d5:9e:cc:c6:d4:a3:70:
f7:62:6d:b3:b5:23:34:67:35:92:43:92:5f:25:41:2c:a0:0a:
3d:57:d9:0c:b5:88:b7:cd:0d:92:dd:c1:54:87:86:9f:60:09:
62:bc:0e:cc:f6:af:62:79:17:94:ff:5e:66:4b:bf:b1:f9:66:
95:98:10:09:34:f4:1e:ec:94:73:a3:35:2d:79:7d:37:0e:3e:
50:b8:11:ab:06:e7:37:3a:40:15:78:5b:e3:c6:ac:ca:c7:32:
db:05:7c:23:b7:46:d5:31:f7:1d:a4:2b:69:cb:07:a0:1b:d6:
53:be:db:3a:ff:bb:ef:bf:bb:97:30:79:93:8b:71:9b:0b:3c:
71:8f:88:4d:23:4a:ad:69:ac:51:6d:4c:67:eb:aa:4f:5e:59:
81:f5:56:94:cd:d0:9d:f8:18:d3:f7:6f:27:2c:4a:d0:d9:2c:
54:78:7f:c5:9d:d9:24:7f:fb:d0:54:17:01:20:97:ad:11:f2:
cd:4f:0c:20:a2:e4:19:20:1c:cb:be:e9:49:27:f3:e5:8e:48:
d9:3a:d2:f7:b1:18:6a:85:e0:14:f9:4b:a1:ac:2c:5f:9b:59:
9e:43:0e:df:79:5f:71:50:19:2a:57:41:ad:ea:65:e2:1f:dd:
56:f3:77:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:01:48 2026 by rpki-client