Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/4StyZ4pmkzkdpZsh42n_BCuadLo.roa
File: 4StyZ4pmkzkdpZsh42n_BCuadLo.roa (raw, json)
Hash identifier: gF3CLT9XeDF/gbMnEYqTp/o+k4+2PPTsI/bdiyKIz4A=
Subject key identifier: E1:2B:72:67:8A:66:93:39:1D:A5:9B:21:E3:69:FF:04:2B:9A:74:BA
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019F5ED68254B459B84D146715363C882989
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/4StyZ4pmkzkdpZsh42n_BCuadLo.roa
Signing time: Tue 14 Jul 2026 04:15:44 +0000
ROA not before: Tue 14 Jul 2026 04:15:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21859
IP address blocks: 77.67.17.0/24 maxlen: 24
77.67.100.0/24 maxlen: 24
77.67.101.0/24 maxlen: 24
212.168.4.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5e:d6:82:54:b4:59:b8:4d:14:67:15:36:3c:88:29:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jul 14 04:15:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e12b72678a6693391da59b21e369ff042b9a74ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:03:c5:4a:98:a6:d4:04:0d:ef:68:4e:0e:c2:
c4:ad:8f:bc:45:2b:9d:e8:d9:49:3b:ed:e9:a4:c2:
22:ac:a0:90:cc:ac:a5:eb:38:cb:dc:e8:1e:44:7d:
d7:1c:67:16:ce:88:43:8e:a6:4a:4e:45:41:a0:ab:
de:07:c9:6c:45:95:6b:89:5e:d0:a0:cb:24:49:e3:
92:1f:c6:01:84:86:19:ff:48:f4:0e:c1:82:d5:af:
c5:ab:08:4b:c2:aa:a8:8b:3d:62:fd:ee:0d:bd:e1:
7b:00:ef:e4:86:f6:0f:7b:13:02:7f:9f:d7:de:10:
34:0b:fc:36:02:08:2a:2b:14:5e:9b:31:3b:9b:4f:
72:1a:b5:da:8d:b6:84:cf:ea:fb:27:89:62:d5:81:
32:ef:ca:42:fa:3f:5f:ea:bf:41:9c:38:20:3f:3d:
ab:c2:41:01:65:88:51:64:cd:80:fe:03:98:d9:d2:
70:07:e3:df:79:39:51:ba:38:51:95:45:a0:9c:36:
c8:5c:96:39:30:d2:94:1e:54:6f:32:d7:87:27:61:
37:ab:e8:f2:80:a6:f5:93:3f:b2:6c:1c:e6:16:ff:
93:b2:63:3e:44:b4:7f:0d:d0:7a:75:06:76:2c:21:
c9:53:18:d8:bf:08:23:ad:2e:79:55:d3:0a:5f:7b:
4b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:2B:72:67:8A:66:93:39:1D:A5:9B:21:E3:69:FF:04:2B:9A:74:BA
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/4StyZ4pmkzkdpZsh42n_BCuadLo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.67.17.0/24
77.67.100.0/23
212.168.4.0/22
Signature Algorithm: sha256WithRSAEncryption
da:91:ea:fc:5b:7f:b0:16:ac:7c:ba:a9:a1:48:9a:3d:00:9d:
2a:cc:38:23:31:8e:96:ce:81:e3:19:e0:b7:af:5a:d9:e5:ab:
14:7a:80:b7:72:29:31:eb:73:79:50:5b:ce:61:8b:ff:c7:99:
df:f1:4d:8c:ef:76:26:3d:5e:f1:b5:d2:41:de:be:f7:d3:b3:
51:9d:f3:18:3b:c7:50:dc:87:23:12:ea:88:bc:6f:43:a3:5c:
89:ec:4f:f5:09:1a:0f:02:34:1b:b6:25:d3:a8:02:bf:a4:14:
d2:e8:2a:d4:c2:f4:d4:52:7f:e3:3d:c1:f1:1f:70:38:3e:a3:
23:f0:70:8f:3c:60:3a:16:43:57:38:67:67:d1:c3:b4:dc:ec:
d4:03:ea:c2:d5:bc:96:33:05:ca:04:41:a8:76:8f:61:8f:0e:
e0:d2:d0:f9:30:07:59:63:cd:a3:27:01:1e:91:36:f8:56:2a:
19:0e:2d:48:a8:e6:03:55:e0:ec:9e:5a:e0:41:f3:44:5d:43:
f4:d7:b5:9b:55:fa:93:27:83:ad:c8:db:3e:03:1c:ec:f7:ba:
53:cb:81:30:b4:0c:0a:e7:62:bf:26:e8:21:b7:ac:69:f8:1a:
4e:52:17:a4:2a:b3:01:21:dc:91:50:a9:9f:8e:85:10:a7:fb:
6f:75:87:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:35:26 2026 by rpki-client