Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/IWcgx4tnQ5dGZV6agVnqd0MUWQk.roa
File: IWcgx4tnQ5dGZV6agVnqd0MUWQk.roa (raw, json)
Hash identifier: KiIDB0UyavLWM+Yaw/BKBqD55iv0or/p1A5dShLh8AI=
Subject key identifier: 21:67:20:C7:8B:67:43:97:46:65:5E:9A:81:59:EA:77:43:14:59:09
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019F5B78168F6B82B2B4E098C95EEEB22DAD
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/IWcgx4tnQ5dGZV6agVnqd0MUWQk.roa
Signing time: Mon 13 Jul 2026 12:33:44 +0000
ROA not before: Mon 13 Jul 2026 12:33:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 148982
IP address blocks: 77.67.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5b:78:16:8f:6b:82:b2:b4:e0:98:c9:5e:ee:b2:2d:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jul 13 12:33:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=216720c78b67439746655e9a8159ea7743145909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2f:b9:a0:e1:8f:85:f7:b4:03:72:aa:ae:1a:
ab:70:71:6e:a6:ac:57:f8:57:15:7b:55:58:7a:67:
a1:ae:ad:aa:de:5f:b0:ac:8b:68:a8:f8:83:90:94:
cc:5a:5d:74:43:43:a0:ca:f6:33:aa:e3:7a:56:af:
76:61:c4:57:72:19:e9:39:7a:cc:e4:7f:e1:f2:10:
10:f9:a5:f2:fc:3b:dc:f6:8c:6e:74:1c:0c:ec:59:
0f:03:ac:f9:34:20:3f:92:63:41:70:97:2f:4b:59:
e1:f7:a4:ed:94:73:21:d5:58:8c:c9:06:0f:39:2a:
aa:45:1a:eb:e6:3c:3f:51:31:53:75:6e:06:c7:b5:
30:b3:ea:ee:9a:ac:4f:f8:24:62:96:d2:47:3e:55:
f7:fa:85:0d:c7:46:7c:fd:f7:02:28:e0:ee:42:bc:
f4:a9:6c:83:dc:13:be:e5:f3:c2:5e:2d:3e:aa:6f:
a9:1d:06:b3:db:cf:82:d0:01:3d:51:8a:f4:6d:af:
09:84:13:7f:08:88:20:1b:38:0a:d9:a3:22:6f:a9:
e5:2e:20:54:d3:c6:c9:f0:c6:38:e2:ec:44:ce:a3:
61:07:3e:50:36:53:a4:55:78:64:c6:23:0e:c3:da:
8e:d3:6d:b0:d1:b3:5d:b2:4d:dc:7d:4c:b2:53:cf:
76:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:67:20:C7:8B:67:43:97:46:65:5E:9A:81:59:EA:77:43:14:59:09
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/IWcgx4tnQ5dGZV6agVnqd0MUWQk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.67.7.0/24
Signature Algorithm: sha256WithRSAEncryption
63:61:a7:27:01:64:82:1c:4a:6a:40:12:9d:16:4f:2f:1e:f5:
5c:21:fd:06:80:50:a1:84:92:4f:a2:1a:63:77:b0:f9:01:f8:
07:48:c3:76:21:41:93:e7:1a:80:2e:2e:f1:5f:e5:7d:96:38:
0c:69:c5:b5:47:80:7d:46:7f:91:f5:8c:f6:be:ef:17:b1:8a:
87:cb:b5:98:8b:00:c7:c7:03:b7:ce:db:db:0a:6d:49:50:54:
ff:a0:6d:8a:16:da:f5:8d:3c:dd:95:68:26:10:74:17:f5:d0:
e5:eb:e0:f1:ce:d9:7d:24:a4:3f:8b:91:9d:3f:64:fa:2c:96:
0d:0d:ed:01:03:14:b6:4e:1b:e9:24:13:88:17:90:4d:86:8b:
a2:47:4a:87:aa:52:8e:db:39:48:35:88:77:57:92:62:94:37:
63:71:e1:35:69:45:3f:b5:cb:f3:23:eb:41:0e:97:38:07:f9:
63:6a:72:e9:27:8c:8a:d2:65:ad:01:e4:52:72:b6:0d:f2:70:
7e:f6:07:eb:3f:e0:5a:8d:5e:10:96:9a:56:5e:9f:2b:c4:53:
90:91:55:63:ee:fc:a4:17:c6:df:67:69:d3:ce:80:f6:5e:46:
c6:b8:8b:8f:02:2d:f6:b8:1f:e4:5c:7d:ca:ea:1d:4f:3a:b8:
c7:63:f4:ec
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ9beBaPa4KytOCYyV7usi2tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0
NmQxNzEwHhcNMjYwNzEzMTIzMzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMTY3MjBjNzhiNjc0Mzk3NDY2NTVlOWE4MTU5ZWE3NzQzMTQ1OTA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAni+5oOGPhfe0A3KqrhqrcHFupqxX
+FcVe1VYemehrq2q3l+wrItoqPiDkJTMWl10Q0OgyvYzquN6Vq92YcRXchnpOXrM
5H/h8hAQ+aXy/Dvc9oxudBwM7FkPA6z5NCA/kmNBcJcvS1nh96TtlHMh1ViMyQYP
OSqqRRrr5jw/UTFTdW4Gx7Uws+rumqxP+CRiltJHPlX3+oUNx0Z8/fcCKODuQrz0
qWyD3BO+5fPCXi0+qm+pHQaz28+C0AE9UYr0ba8JhBN/CIggGzgK2aMib6nlLiBU
08bJ8MY44uxEzqNhBz5QNlOkVXhkxiMOw9qO022w0bNdsk3cfUyyU892dwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCFnIMeLZ0OXRmVemoFZ6ndDFFkJMB8GA1UdIwQY
MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt
MGNmMTA5M2Q0NTQ4LzEvSVdjZ3g0dG5RNWRHWlY2YWdWbnFkME1VV1FrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4
LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATUMHMA0G
CSqGSIb3DQEBCwUAA4IBAQBjYacnAWSCHEpqQBKdFk8vHvVcIf0GgFChhJJPohpj
d7D5AfgHSMN2IUGT5xqALi7xX+V9ljgMacW1R4B9Rn+R9Yz2vu8XsYqHy7WYiwDH
xwO3ztvbCm1JUFT/oG2KFtr1jTzdlWgmEHQX9dDl6+Dxztl9JKQ/i5GdP2T6LJYN
De0BAxS2ThvpJBOIF5BNhouiR0qHqlKO2zlINYh3V5JilDdjceE1aUU/tcvzI+tB
Dpc4B/ljanLpJ4yK0mWtAeRScrYN8nB+9gfrP+BajV4QlppWXp8rxFOQkVVj7vyk
F8bfZ2nTzoD2XkbGuIuPAi32uB/kXH3K6h1POrjHY/Ts
-----END CERTIFICATE-----
Generated at Fri Jul 24 15:41:44 2026 by rpki-client