Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/_qB3VkQ6cU92XYYlUj93VsU1p6A.roa
File: _qB3VkQ6cU92XYYlUj93VsU1p6A.roa (raw, json)
Hash identifier: je+EiVoSRGQg2iS3wIPs7RA3a0y33H4gyvAvo2GXgc8=
Subject key identifier: FE:A0:77:56:44:3A:71:4F:76:5D:86:25:52:3F:77:56:C5:35:A7:A0
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A0D8568B901A244A29D107D2D48C2F6EAE
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/_qB3VkQ6cU92XYYlUj93VsU1p6A.roa
Signing time: Fri 25 Sep 2026 11:32:25 +0000
ROA not before: Fri 25 Sep 2026 11:32:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 395954
IP address blocks: 77.67.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:56:8b:90:1a:24:4a:29:d1:07:d2:d4:8c:2f:6e:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Sep 25 11:32:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fea07756443a714f765d8625523f7756c535a7a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:1b:96:b0:72:cb:fa:d0:19:32:ed:11:22:c2:
8a:2c:51:27:5e:e9:52:24:f5:86:34:74:7c:aa:3b:
d9:2d:b2:ba:b7:9f:6a:3b:27:ad:39:7c:fd:33:1a:
28:06:f7:b2:1d:f0:45:42:12:7b:c7:4d:b7:33:dc:
fd:de:d1:47:c5:fd:58:a0:21:b3:55:32:c8:bd:3c:
cc:df:a8:84:7c:c5:73:9a:4d:86:97:8c:af:99:55:
04:42:fb:fb:72:54:39:e9:17:46:f2:fe:16:3f:4b:
c4:25:aa:11:bc:e6:1f:79:97:bf:66:eb:aa:36:93:
75:e2:20:a6:de:c8:51:a1:60:97:96:89:69:17:dd:
a6:bf:70:41:54:69:b0:a3:5d:e4:31:de:46:27:56:
d6:74:5a:b0:2b:db:08:52:35:66:18:6b:9c:7b:e5:
89:3b:5b:f9:25:17:fb:cc:88:ef:ca:58:ba:6b:76:
96:ee:ac:89:84:41:f9:54:1f:b9:43:9b:22:7f:49:
a1:6b:4f:eb:c6:16:b2:38:da:79:df:2e:fe:85:36:
ee:41:81:b5:59:5a:85:0d:de:37:d6:bd:5d:93:62:
a3:05:61:11:df:65:3d:83:80:32:be:b6:c1:bf:b4:
c1:31:54:ac:71:2b:30:e8:60:9a:30:6f:cc:59:0a:
71:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:A0:77:56:44:3A:71:4F:76:5D:86:25:52:3F:77:56:C5:35:A7:A0
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/_qB3VkQ6cU92XYYlUj93VsU1p6A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.67.58.0/24
Signature Algorithm: sha256WithRSAEncryption
d9:65:71:e6:db:3a:98:b0:fc:e8:f6:d6:01:07:16:4c:09:dd:
e2:98:f7:69:7c:5e:96:f2:3c:a3:d6:bd:80:a8:02:75:66:6b:
eb:ce:27:f4:51:8a:28:22:9b:87:d6:f9:3a:8f:f4:fd:cc:8f:
97:b2:74:9f:d6:10:28:4c:00:eb:20:0f:94:78:bb:c1:7d:bc:
e7:90:80:0f:93:40:58:20:19:c0:c7:30:d3:76:ec:42:ef:77:
6c:56:06:e6:cb:ad:fa:03:34:3e:95:a9:83:76:fa:ad:ee:01:
83:ff:f9:bf:64:ef:8f:14:80:88:34:89:59:c1:1c:91:8b:c0:
9a:bc:d5:33:88:72:2d:08:7b:d2:c6:66:6a:45:0c:90:c9:b4:
2b:7d:6e:e7:ef:fe:ac:fa:88:f5:57:ac:09:f7:61:88:fe:24:
d6:39:44:18:75:90:63:e6:f5:26:d3:44:df:e0:28:a8:15:27:
3b:f5:9e:e9:cc:a3:3e:25:13:e3:37:b4:7f:22:55:84:d3:5d:
ce:ac:2b:8a:b8:b8:0d:db:5c:a2:05:37:6b:2b:66:28:44:92:
f1:2e:22:41:a6:60:67:80:20:90:0d:45:8c:d8:0f:1f:5a:44:
04:f8:f2:4a:2b:a9:c0:7a:d4:98:5a:1b:35:1f:40:56:73:8d:
d9:62:d4:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 06:19:44 2026 by rpki-client