Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/c0u6jGh2xkb87UzAqZnwgEEFMfg.roa
File: c0u6jGh2xkb87UzAqZnwgEEFMfg.roa (raw, json)
Hash identifier: E+2cOVEx8AfMMA6rO7/+7vNYrBRAT+ulmlrIcI8eDg4=
Subject key identifier: 73:4B:BA:8C:68:76:C6:46:FC:ED:4C:C0:A9:99:F0:80:41:05:31:F8
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019F66E3679BF1AC66D594297452BE3DA0F8
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/c0u6jGh2xkb87UzAqZnwgEEFMfg.roa
Signing time: Wed 15 Jul 2026 17:46:46 +0000
ROA not before: Wed 15 Jul 2026 17:46:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 77.67.28.0/24 maxlen: 24
194.77.220.0/24 maxlen: 24
194.231.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:66:e3:67:9b:f1:ac:66:d5:94:29:74:52:be:3d:a0:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jul 15 17:46:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=734bba8c6876c646fced4cc0a999f080410531f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b5:94:3a:56:05:19:e6:33:ae:5a:8c:ea:d0:
fe:a0:64:46:2e:de:14:f7:55:21:a7:28:6c:5d:e3:
7a:85:a2:a9:5a:ce:ca:fd:a5:ff:a2:0b:46:b2:60:
1f:e1:92:ad:70:bc:ed:b9:30:0c:4b:38:f6:2e:bf:
b8:14:82:a7:05:71:47:a1:8f:13:fc:cf:88:2e:9e:
27:54:be:72:33:b3:db:dc:c5:0a:80:ad:c9:73:cb:
90:c5:52:29:dd:b3:66:55:b9:97:22:9d:86:b7:e9:
c7:06:e7:fd:26:2b:c1:f5:07:cc:60:3a:17:3f:9a:
7c:1c:f2:32:5b:dc:80:cd:82:c2:15:09:ac:4c:f3:
0c:d8:70:0e:4d:28:57:f0:92:f2:44:78:37:34:99:
a0:7e:fb:9d:c3:68:91:ce:cd:0e:be:6b:5f:26:a3:
39:8b:da:02:bc:05:ba:a5:17:33:d1:f1:77:13:d4:
91:a8:89:01:01:5e:c9:1d:d7:47:f9:a2:d8:3e:5c:
d9:a0:9a:ed:db:ee:60:e7:1e:09:d9:7a:ad:8e:8e:
78:04:6f:d2:20:55:b6:86:4d:0c:24:b1:5b:d0:c3:
91:94:7c:db:25:a9:c1:98:f6:a6:db:41:8f:85:73:
97:1f:d7:a9:8c:a3:44:55:a4:ed:bd:d5:e3:1c:de:
af:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:4B:BA:8C:68:76:C6:46:FC:ED:4C:C0:A9:99:F0:80:41:05:31:F8
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/c0u6jGh2xkb87UzAqZnwgEEFMfg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.67.28.0/24
194.77.220.0/24
194.231.143.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:df:59:1c:64:bf:23:ad:92:ad:c7:e1:0a:d4:b5:ed:63:a8:
63:da:0e:39:cd:ee:48:17:45:19:84:dd:97:3d:50:a7:35:97:
b4:0a:dc:f1:89:82:c6:fa:33:b6:fa:3a:da:d9:81:3a:ad:5b:
74:4c:5e:5d:38:ab:4e:d5:2b:27:d3:e9:68:08:6a:f6:55:ab:
45:30:59:95:e0:53:aa:89:86:b6:f4:51:74:14:5d:c4:c5:5c:
d7:a9:1b:c7:55:39:d9:22:c3:49:ca:dc:de:38:42:d6:5e:12:
2e:ec:1d:cc:63:cd:33:2e:c0:0e:6f:55:9d:54:6a:56:a6:fa:
2d:dd:e8:c1:d1:71:93:ed:ea:9f:9a:9e:6b:86:d9:db:71:c0:
c5:9a:0a:23:6d:ab:72:f7:fd:da:c7:e9:17:14:0f:e1:22:75:
b6:6f:95:c2:4f:13:e8:ed:68:3c:83:c1:f4:9f:d6:fc:d0:fe:
54:9b:44:1c:cd:13:ba:81:fb:78:b7:a3:a2:8d:9d:a4:65:92:
70:fc:fd:28:40:f2:cb:6d:e5:bf:59:6b:49:98:b4:04:a9:dd:
b4:51:02:33:9d:40:4b:d5:df:3a:53:be:23:4d:03:c4:7a:e9:
0b:a9:cc:5e:96:7c:41:39:95:24:ad:ab:8a:4a:f3:95:ab:12:
c6:30:a7:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:40:55 2026 by rpki-client