Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/F7uRhSlqy7fPmfaGZI7iAqXKOSk.roa
File: F7uRhSlqy7fPmfaGZI7iAqXKOSk.roa (raw, json)
Hash identifier: 2KnRjY7BVdCygIDALRE26FyflJk6002kBZ5M/Kecpnw=
Subject key identifier: 17:BB:91:85:29:6A:CB:B7:CF:99:F6:86:64:8E:E2:02:A5:CA:39:29
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A0C283BA99CC8EAC676C0F5A21FAC77701
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/F7uRhSlqy7fPmfaGZI7iAqXKOSk.roa
Signing time: Mon 21 Sep 2026 05:50:07 +0000
ROA not before: Mon 21 Sep 2026 05:50:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401362
IP address blocks: 77.67.11.0/24 maxlen: 24
194.231.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 13:29:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:83:ba:99:cc:8e:ac:67:6c:0f:5a:21:fa:c7:77:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Sep 21 05:50:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=17bb9185296acbb7cf99f686648ee202a5ca3929
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:36:01:cf:49:e2:20:80:ea:fa:fb:4c:ba:53:
53:d2:48:aa:42:b3:34:cd:6c:46:c5:f4:07:68:6a:
2f:12:2b:4c:99:f8:a4:e9:05:65:8d:b4:3a:47:9a:
49:bd:d4:aa:7f:5a:13:ce:23:d9:e5:ab:ed:38:e1:
fd:81:16:6c:9b:b4:09:a2:87:3d:c9:1d:0e:ce:72:
c9:d3:3d:ec:da:1f:d0:45:28:b6:bd:93:23:d4:3c:
60:c0:7d:61:a4:12:6e:b4:95:5d:5e:30:53:a3:19:
ec:aa:2c:9b:d3:c1:6e:e3:ac:83:25:93:38:3e:68:
ec:bb:13:bf:2d:26:46:2e:d7:c9:45:69:f4:8e:fa:
2f:ee:11:25:2a:a4:cc:a1:a2:5c:9d:27:c4:78:38:
e9:a1:d1:82:60:c9:e0:36:10:cd:2e:a1:fd:87:b6:
9c:92:37:36:8e:fa:7c:c4:51:95:6a:e2:3e:c4:ab:
c4:28:17:6c:c4:53:41:27:63:d5:64:db:36:c1:f9:
d1:dc:a2:5a:99:f2:b3:9b:28:d6:d0:f8:4a:c5:d2:
fa:c8:6e:13:dd:3f:bc:cd:4b:4b:fb:3d:7d:69:7c:
ea:a9:6c:96:82:f1:06:c7:e1:d2:dc:79:34:9b:de:
7c:4f:2b:62:70:20:0b:65:2d:8b:75:a8:af:b6:08:
9a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:BB:91:85:29:6A:CB:B7:CF:99:F6:86:64:8E:E2:02:A5:CA:39:29
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/F7uRhSlqy7fPmfaGZI7iAqXKOSk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.67.11.0/24
194.231.219.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:fa:d2:0b:80:d1:c6:b6:dd:d8:00:1d:14:9c:62:23:c3:96:
3f:d5:5d:5f:7a:1b:ac:dc:7d:72:18:f4:42:62:73:aa:2e:af:
8a:26:04:c2:33:eb:cb:85:78:7d:e2:0f:ed:0a:9a:d0:c5:64:
16:9e:7d:73:7a:a6:81:d0:13:73:90:23:b8:c4:1c:3e:f1:f8:
0d:e2:91:ec:e4:77:65:5b:85:0e:1e:43:12:47:af:bb:0e:3b:
36:3f:6b:69:66:84:6f:c8:7b:56:5c:d4:4d:55:1d:91:68:1e:
01:ab:b5:01:c7:41:5a:ce:af:1b:5b:38:64:97:57:68:17:3f:
4d:fd:70:67:34:9a:f1:65:7b:c5:b1:85:45:c0:35:ef:0c:98:
e0:96:e0:7c:30:28:05:65:62:18:42:38:34:f3:4f:96:b6:0c:
7a:cd:df:65:72:73:8c:6d:4e:3a:80:35:47:3d:a2:bd:6c:66:
a4:da:58:1d:a1:8b:2b:35:5f:f1:f3:bc:63:a5:2f:e3:ec:7f:
4e:9a:23:dd:1e:3e:7a:bd:e9:c5:51:78:fb:59:28:d3:7e:9e:
61:b8:13:8e:2a:e4:5d:12:c9:1d:0c:47:c1:06:97:fd:71:4d:
3b:37:9a:cd:ad:77:ab:4a:39:19:da:70:d7:9a:fa:63:56:fb:
20:d6:81:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:08:26 2026 by rpki-client