Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Ym4cOXyzEvAmXpQDI9t2658J4SM.roa
File: Ym4cOXyzEvAmXpQDI9t2658J4SM.roa (raw, json)
Hash identifier: iCvmF0lSbUlhK2iIKMeYZWMaFBwI9t7AwA2wfjLI7IQ=
Subject key identifier: 62:6E:1C:39:7C:B3:12:F0:26:5E:94:03:23:DB:76:EB:9F:09:E1:23
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019F7C8E19026C064018A415B9966CF876FE
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Ym4cOXyzEvAmXpQDI9t2658J4SM.roa
Signing time: Sun 19 Jul 2026 22:45:15 +0000
ROA not before: Sun 19 Jul 2026 22:45:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214432
IP address blocks: 77.67.11.0/24 maxlen: 24
77.67.27.0/24 maxlen: 24
77.67.32.0/24 maxlen: 24
77.67.59.0/24 maxlen: 24
77.67.88.0/24 maxlen: 24
77.67.92.0/24 maxlen: 24
77.67.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:7c:8e:19:02:6c:06:40:18:a4:15:b9:96:6c:f8:76:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jul 19 22:45:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=626e1c397cb312f0265e940323db76eb9f09e123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:0c:9a:27:13:51:ff:66:d9:25:b7:6a:01:93:
33:37:05:96:60:3d:93:50:f4:16:61:88:79:4d:b3:
36:57:80:e9:70:92:f4:9b:25:b2:3e:4f:da:7c:e8:
8a:de:8f:48:17:5b:1b:a9:67:07:84:57:11:17:1e:
e7:fe:a9:9d:bb:5e:db:dc:8a:97:d0:c1:6b:86:f0:
76:2c:71:a7:26:20:7c:35:2f:47:8a:71:3c:b3:1e:
8d:4f:10:fc:be:0b:6f:4a:65:94:a6:d4:81:07:a0:
9a:b1:b5:46:59:ac:c1:90:2f:ba:4b:a2:fa:e3:5b:
2f:fe:7f:c7:41:d4:45:02:2d:f8:99:28:7f:b4:fa:
c0:99:0a:a0:5b:c0:90:ff:9d:21:f8:c9:a5:7c:cf:
b9:cb:38:b4:40:04:d9:54:50:b2:a3:e7:82:5a:31:
9d:63:df:7d:0f:e4:27:76:6c:e0:f7:9e:ec:24:58:
3c:08:42:95:3b:68:97:8f:36:93:78:c5:f8:27:a7:
00:82:36:22:84:29:d8:83:6c:69:ae:f6:89:8a:cf:
55:a9:cf:cc:bd:69:59:1a:48:b9:ef:98:92:b5:23:
2e:6c:96:45:9e:14:30:61:b9:03:d1:b7:d9:74:ad:
ee:91:72:60:fb:a0:d2:61:12:ce:6c:a2:b6:55:97:
ae:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:6E:1C:39:7C:B3:12:F0:26:5E:94:03:23:DB:76:EB:9F:09:E1:23
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Ym4cOXyzEvAmXpQDI9t2658J4SM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.67.11.0/24
77.67.27.0/24
77.67.32.0/24
77.67.59.0/24
77.67.88.0/24
77.67.92.0/24
77.67.125.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:f7:c0:4c:4f:29:5e:67:ad:10:e7:3a:0e:d2:ad:a9:99:4c:
80:65:2a:9a:03:62:ed:01:2b:c9:80:ce:b1:3c:4b:00:c6:04:
52:e7:3c:50:dd:a4:70:26:66:05:b7:5b:93:06:ea:a2:18:59:
56:4b:bf:10:b3:2a:0a:12:13:73:c3:05:c6:05:a6:1c:92:4f:
f5:00:0e:fa:94:62:e3:6d:3c:9a:c1:59:65:89:ba:a5:b0:d7:
01:72:9f:de:b1:9b:f6:ac:44:d0:9e:3f:12:63:03:30:ac:8b:
8d:cd:0c:5a:6a:09:74:05:ff:f5:91:df:77:20:a4:ab:eb:8a:
dd:af:66:4c:1d:5e:29:c5:e2:22:e5:01:dc:c8:c9:37:31:7a:
29:6b:8d:45:6b:4b:38:41:4e:75:d8:54:3f:58:e8:12:2c:02:
39:e7:5c:eb:6b:a0:7f:80:86:fc:69:8a:c3:59:e2:9e:a9:00:
46:da:46:ef:49:74:03:5b:7c:c2:34:dd:7f:20:d8:a0:44:96:
da:ea:f5:67:e4:dc:a7:e8:56:ed:e7:2c:27:2c:21:bd:c4:62:
48:c6:a1:9a:c0:90:5e:5a:9b:87:03:09:65:90:38:5e:5c:21:
36:27:d2:26:13:3e:8f:2a:7f:f4:0d:2f:b9:9d:e0:1c:7e:36:
f3:6d:f7:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:22:09 2026 by rpki-client