Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/T-NG5R7JCLZ1udFUvpRcxAP6-mc.roa
File: T-NG5R7JCLZ1udFUvpRcxAP6-mc.roa (raw, json)
Hash identifier: t2cClgTtMGPEoWL4WRsr2U6ELFEUqGe7+RHU/REwQsA=
Subject key identifier: 4F:E3:46:E5:1E:C9:08:B6:75:B9:D1:54:BE:94:5C:C4:03:FA:FA:67
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019F8FE45A54E4D82888A4453D1B15A01726
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/T-NG5R7JCLZ1udFUvpRcxAP6-mc.roa
Signing time: Thu 23 Jul 2026 16:52:14 +0000
ROA not before: Thu 23 Jul 2026 16:52:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402215
IP address blocks: 77.67.1.0/24 maxlen: 24
194.77.2.0/24 maxlen: 24
194.77.26.0/24 maxlen: 24
194.77.91.0/24 maxlen: 24
212.189.24.0/24 maxlen: 24
217.8.200.0/24 maxlen: 24
217.8.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:e4:5a:54:e4:d8:28:88:a4:45:3d:1b:15:a0:17:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jul 23 16:52:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4fe346e51ec908b675b9d154be945cc403fafa67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ee:24:8d:3c:87:38:ce:c6:67:7b:78:b5:ec:
39:24:bd:e8:a0:8c:77:18:e2:e3:c9:27:cb:27:d8:
02:7f:01:bb:df:5f:7a:c2:49:66:e9:fb:af:04:84:
19:af:eb:cc:5c:82:74:56:95:6d:dc:46:0b:ac:0f:
6b:6e:b6:31:ee:43:e5:c0:11:85:5a:be:22:3d:95:
68:3b:28:e5:87:d6:93:24:54:d0:fb:a7:d4:63:2c:
6a:7d:85:fc:a4:b5:48:b5:84:19:fa:dc:40:a0:05:
7a:17:8d:62:57:47:e1:78:e7:17:a0:74:8a:53:4d:
b5:96:73:5e:48:c3:5e:15:3c:73:ed:7c:88:56:d1:
0f:44:6b:14:f0:76:a8:c9:27:24:b5:1a:2a:e7:e5:
f1:c1:b5:e9:c7:27:56:23:7c:e1:e8:2f:5c:57:44:
b3:38:cc:15:78:5c:dc:0c:e1:70:f8:27:48:86:1b:
8d:70:16:ff:d7:22:3c:9a:a0:bd:54:de:af:cf:2e:
27:52:69:4b:c6:02:2c:38:6c:ab:fa:c9:1e:64:ef:
c3:93:41:5c:5f:19:b2:43:46:90:57:95:04:83:8d:
f3:99:fb:86:2b:59:ac:b2:91:52:90:e7:2c:15:f2:
83:fe:07:01:56:5b:66:6b:28:f9:9b:6b:62:77:ac:
bb:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:E3:46:E5:1E:C9:08:B6:75:B9:D1:54:BE:94:5C:C4:03:FA:FA:67
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/T-NG5R7JCLZ1udFUvpRcxAP6-mc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.67.1.0/24
194.77.2.0/24
194.77.26.0/24
194.77.91.0/24
212.189.24.0/24
217.8.200.0/24
217.8.203.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:e9:a1:d2:0b:b9:8e:42:d6:62:c6:cd:51:6b:de:bb:27:c1:
b8:79:5f:cf:0b:ae:38:6e:fc:b9:48:88:0e:fe:c3:5e:f3:3e:
3a:7d:ae:20:00:9f:15:aa:81:fe:7c:61:f0:11:f3:45:ea:f5:
3b:e4:40:02:3e:05:80:52:10:88:cd:5c:ff:06:53:ed:f9:ca:
46:ad:fc:2f:58:a1:d4:2d:aa:21:a9:8a:f9:93:1d:db:89:d7:
4f:79:57:07:a7:8d:73:8e:a7:6d:6f:3c:c5:19:b0:b1:39:9e:
d9:a7:60:d6:9f:78:1f:d8:2e:d1:c6:36:37:e5:8c:e9:b0:86:
94:6f:c5:36:88:f8:70:03:29:2f:ff:6c:6c:56:f4:bf:66:f4:
7b:75:d8:d7:71:28:ae:c0:f9:44:c5:98:41:32:0a:59:74:b1:
0a:82:b4:e4:78:03:56:44:54:ae:b0:98:27:eb:cc:af:de:32:
0e:98:9a:34:27:1b:53:f8:0d:6b:f9:cf:de:df:c0:7f:db:5b:
13:a7:cf:ff:92:4f:87:7e:9c:da:b3:59:a3:5d:a0:cd:ce:10:
30:9e:e8:fc:32:ac:da:9e:94:28:08:d1:0c:b8:3f:86:2e:43:
5e:14:27:bf:8f:34:50:cf:f0:48:7d:99:35:0f:5d:16:37:0a:
f4:7b:08:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:35:58 2026 by rpki-client