Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/8yBsAmvcp7MBHKbw3Xh2hY7QY9c.roa
File: 8yBsAmvcp7MBHKbw3Xh2hY7QY9c.roa (raw, json)
Hash identifier: 2gV9CBthLZoGipB+VCz2AMjev6gv/KCt//M1rl+RkXk=
Subject key identifier: F3:20:6C:02:6B:DC:A7:B3:01:1C:A6:F0:DD:78:76:85:8E:D0:63:D7
Certificate issuer: /CN=22c7cda75f4e15e486dee5a6501cbe2018bc0e0f
Certificate serial: 019F7F591C2D39EEE1C2A708348235FA79E2
Authority key identifier: 22:C7:CD:A7:5F:4E:15:E4:86:DE:E5:A6:50:1C:BE:20:18:BC:0E:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsfNp19OFeSG3uWmUBy-IBi8Dg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/8yBsAmvcp7MBHKbw3Xh2hY7QY9c.roa
Signing time: Mon 20 Jul 2026 11:46:14 +0000
ROA not before: Mon 20 Jul 2026 11:46:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16030
IP address blocks: 77.75.176.0/21 maxlen: 24
77.75.176.0/24 maxlen: 24
77.75.177.0/24 maxlen: 24
77.75.178.0/24 maxlen: 24
77.75.179.0/24 maxlen: 24
77.75.181.0/24 maxlen: 24
77.75.182.0/24 maxlen: 24
77.75.183.0/24 maxlen: 24
185.184.148.0/22 maxlen: 24
185.184.149.0/24 maxlen: 24
185.184.150.0/24 maxlen: 24
185.184.151.0/24 maxlen: 24
212.121.224.0/19 maxlen: 24
212.121.225.0/24 maxlen: 24
212.121.226.0/24 maxlen: 24
212.121.227.0/24 maxlen: 24
212.121.228.0/24 maxlen: 24
212.121.229.0/24 maxlen: 24
212.121.230.0/24 maxlen: 24
212.121.231.0/24 maxlen: 24
212.121.232.0/24 maxlen: 24
212.121.233.0/24 maxlen: 24
212.121.235.0/24 maxlen: 24
212.121.236.0/24 maxlen: 24
212.121.237.0/24 maxlen: 24
212.121.238.0/24 maxlen: 24
212.121.239.0/24 maxlen: 24
212.121.240.0/24 maxlen: 24
212.121.241.0/24 maxlen: 24
212.121.242.0/24 maxlen: 24
212.121.243.0/24 maxlen: 24
212.121.244.0/24 maxlen: 24
212.121.245.0/24 maxlen: 24
212.121.246.0/24 maxlen: 24
212.121.247.0/24 maxlen: 24
212.121.248.0/24 maxlen: 24
212.121.249.0/24 maxlen: 24
212.121.250.0/24 maxlen: 24
212.121.251.0/24 maxlen: 24
212.121.252.0/24 maxlen: 24
212.121.253.0/24 maxlen: 24
212.121.254.0/24 maxlen: 24
212.121.255.0/24 maxlen: 24
213.148.192.0/19 maxlen: 24
213.148.192.0/24 maxlen: 24
213.148.193.0/24 maxlen: 24
213.148.194.0/24 maxlen: 24
213.148.195.0/24 maxlen: 24
213.148.196.0/24 maxlen: 24
213.148.197.0/24 maxlen: 24
213.148.198.0/24 maxlen: 24
213.148.199.0/24 maxlen: 24
213.148.200.0/24 maxlen: 24
213.148.201.0/24 maxlen: 24
213.148.202.0/24 maxlen: 24
213.148.203.0/24 maxlen: 24
213.148.204.0/24 maxlen: 24
213.148.205.0/24 maxlen: 24
213.148.206.0/24 maxlen: 24
213.148.207.0/24 maxlen: 24
213.148.208.0/24 maxlen: 24
213.148.209.0/24 maxlen: 24
213.148.210.0/24 maxlen: 24
213.148.211.0/24 maxlen: 24
213.148.212.0/24 maxlen: 24
213.148.213.0/24 maxlen: 24
213.148.214.0/24 maxlen: 24
213.148.215.0/24 maxlen: 24
213.148.216.0/24 maxlen: 24
213.148.217.0/24 maxlen: 24
213.148.218.0/24 maxlen: 24
213.148.219.0/24 maxlen: 24
213.148.220.0/24 maxlen: 24
213.148.221.0/24 maxlen: 24
213.148.222.0/24 maxlen: 24
213.148.223.0/24 maxlen: 24
2001:4d10::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/IsfNp19OFeSG3uWmUBy-IBi8Dg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/IsfNp19OFeSG3uWmUBy-IBi8Dg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsfNp19OFeSG3uWmUBy-IBi8Dg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:7f:59:1c:2d:39:ee:e1:c2:a7:08:34:82:35:fa:79:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c7cda75f4e15e486dee5a6501cbe2018bc0e0f
Validity
Not Before: Jul 20 11:46:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f3206c026bdca7b3011ca6f0dd7876858ed063d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:12:1f:2c:9e:c3:af:dc:f3:27:2c:c3:87:62:
88:57:db:a8:5e:47:90:91:3a:d5:de:84:6b:2b:4d:
47:40:98:72:c6:6c:d9:ef:b6:2e:70:20:07:4c:7a:
51:3a:e2:18:96:c2:e5:2e:3e:1b:14:8e:9e:b0:00:
14:c2:4d:38:09:50:e2:ca:8c:7d:f6:8d:35:a0:20:
31:94:93:a8:d5:97:75:cb:9e:4a:1d:85:0d:98:9a:
eb:9c:08:98:ab:3d:1f:f1:80:0c:72:31:88:0b:a6:
b9:7d:a9:03:8b:8d:fd:bd:23:70:f7:7c:d2:b7:30:
09:24:a6:7a:e9:6d:a0:da:ed:14:44:e6:d5:1d:32:
f8:d6:db:36:b8:00:08:d9:ac:f0:af:45:e2:2c:bf:
a2:68:62:c1:da:ca:ad:b9:2f:94:3c:99:b8:c7:55:
ed:4f:d2:6c:6c:cd:f6:d9:44:d3:83:3c:2e:de:59:
ab:85:de:fe:1e:74:92:f8:25:b6:7e:e1:44:48:13:
4a:52:6b:ae:4c:c3:96:18:89:f8:dd:d2:69:39:51:
19:9d:c2:ed:5c:69:40:7f:d4:61:09:25:d6:0b:c1:
a1:cb:77:e8:8c:a0:36:1f:b2:38:85:80:7f:ec:13:
50:5f:d5:43:36:35:4b:03:04:12:ff:52:9c:b6:95:
0f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:20:6C:02:6B:DC:A7:B3:01:1C:A6:F0:DD:78:76:85:8E:D0:63:D7
X509v3 Authority Key Identifier:
keyid:22:C7:CD:A7:5F:4E:15:E4:86:DE:E5:A6:50:1C:BE:20:18:BC:0E:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsfNp19OFeSG3uWmUBy-IBi8Dg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/8yBsAmvcp7MBHKbw3Xh2hY7QY9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/IsfNp19OFeSG3uWmUBy-IBi8Dg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.75.176.0/21
185.184.148.0/22
212.121.224.0/19
213.148.192.0/19
IPv6:
2001:4d10::/32
Signature Algorithm: sha256WithRSAEncryption
e1:45:83:bb:82:e7:f7:a3:81:45:87:ae:90:e2:f3:c9:9c:75:
ac:82:6c:2c:b2:fd:10:b3:45:5b:34:f7:53:05:b3:ae:dc:68:
7d:ab:0a:0b:dc:e9:d1:6d:1f:7c:57:f1:75:bd:65:76:89:be:
ab:9e:5c:be:45:7d:5e:32:98:3b:2f:fa:2b:58:de:be:e8:03:
e2:17:58:68:49:16:39:76:e8:55:15:6b:33:3d:fb:40:fc:d1:
d4:fe:f8:ac:38:b1:24:bc:e7:7e:84:03:15:f2:1a:66:66:f1:
88:ce:2e:74:3e:e3:12:e3:8a:eb:21:84:1b:cc:4b:69:13:a9:
79:37:f4:7a:93:9d:98:c9:9b:67:fd:1e:8c:32:de:2c:ac:cc:
f0:d0:41:e0:be:af:28:25:b1:a0:1e:6b:e6:89:69:c5:66:37:
18:18:01:4b:90:97:f1:a1:49:80:21:a9:cc:b7:2c:46:0f:aa:
14:af:a0:0d:69:be:b6:d1:2f:5d:2c:91:11:1a:6a:25:5b:e9:
97:82:a8:e3:18:a9:23:c3:e9:fe:78:a4:d2:cc:fd:b6:3b:c3:
af:b7:0a:27:7f:2c:ca:6f:e2:44:6d:21:c1:8f:21:34:28:ee:
3c:0e:7d:3d:c9:9d:85:f5:52:59:ed:40:45:17:a9:e8:d1:8b:
88:7b:c3:29
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAZ9/WRwtOe7hwqcINII1+nniMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzdjZGE3NWY0ZTE1ZTQ4NmRlZTVhNjUwMWNiZTIwMThi
YzBlMGYwHhcNMjYwNzIwMTE0NjE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMzIwNmMwMjZiZGNhN2IzMDExY2E2ZjBkZDc4NzY4NThlZDA2M2Q3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4RIfLJ7Dr9zzJyzDh2KIV9uoXkeQ
kTrV3oRrK01HQJhyxmzZ77YucCAHTHpROuIYlsLlLj4bFI6esAAUwk04CVDiyox9
9o01oCAxlJOo1Zd1y55KHYUNmJrrnAiYqz0f8YAMcjGIC6a5fakDi439vSNw93zS
tzAJJKZ66W2g2u0URObVHTL41ts2uAAI2azwr0XiLL+iaGLB2sqtuS+UPJm4x1Xt
T9JsbM322UTTgzwu3lmrhd7+HnSS+CW2fuFESBNKUmuuTMOWGIn43dJpOVEZncLt
XGlAf9RhCSXWC8Ghy3fojKA2H7I4hYB/7BNQX9VDNjVLAwQS/1KctpUPFwIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFPMgbAJr3KezARym8N14doWO0GPXMB8GA1UdIwQY
MBaAFCLHzadfThXkht7lplAcviAYvA4PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNmTnAxOU9GZVNHM3VXbVVCeS1JQmk4RGc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9iOTIzMzEtMmJiNC00YTU5LTk5Nzgt
NzUxYjE3ZDFjNDM3LzEvOHlCc0FtdmNwN01CSEtidzNYaDJoWTdRWTljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9iOTIzMzEtMmJiNC00YTU5LTk5NzgtNzUxYjE3ZDFjNDM3
LzEvSXNmTnAxOU9GZVNHM3VXbVVCeS1JQmk4RGc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQDTUuwAwQC
ubiUAwQF1HngAwQF1ZTAMA0EAgACMAcDBQAgAU0QMA0GCSqGSIb3DQEBCwUAA4IB
AQDhRYO7guf3o4FFh66Q4vPJnHWsgmwssv0Qs0VbNPdTBbOu3Gh9qwoL3OnRbR98
V/F1vWV2ib6rnly+RX1eMpg7L/orWN6+6APiF1hoSRY5duhVFWszPftA/NHU/vis
OLEkvOd+hAMV8hpmZvGIzi50PuMS44rrIYQbzEtpE6l5N/R6k52YyZtn/R6MMt4s
rMzw0EHgvq8oJbGgHmvmiWnFZjcYGAFLkJfxoUmAIanMtyxGD6oUr6ANab620S9d
LJERGmolW+mXgqjjGKkjw+n+eKTSzP22O8OvtwonfyzKb+JEbSHBjyE0KO48Dn09
yZ2F9VJZ7UBFF6no0YuIe8Mp
-----END CERTIFICATE-----
Generated at Fri Jul 24 09:37:52 2026 by rpki-client