Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/PUjKVuvXyy_Bmuww0cD28b0h0YU.roa
File: PUjKVuvXyy_Bmuww0cD28b0h0YU.roa (raw, json)
Hash identifier: 2Hrc6A2H1DaOZgvfa2sIx+XtUdZTXzHJ1TKysCf+RYU=
Subject key identifier: 3D:48:CA:56:EB:D7:CB:2F:C1:9A:EC:30:D1:C0:F6:F1:BD:21:D1:85
Certificate issuer: /CN=458fbc2bec00990e5cc3b421747c0557a8edbbff
Certificate serial: 019F2369210646D0F57F4013E67C63FA4D1E
Authority key identifier: 45:8F:BC:2B:EC:00:99:0E:5C:C3:B4:21:74:7C:05:57:A8:ED:BB:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RY-8K-wAmQ5cw7QhdHwFV6jtu_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/PUjKVuvXyy_Bmuww0cD28b0h0YU.roa
Signing time: Thu 02 Jul 2026 15:18:40 +0000
ROA not before: Thu 02 Jul 2026 15:18:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43578
IP address blocks: 77.246.176.0/24 maxlen: 24
77.246.177.0/24 maxlen: 24
77.246.178.0/24 maxlen: 24
77.246.179.0/24 maxlen: 24
77.246.180.0/24 maxlen: 24
77.246.181.0/24 maxlen: 24
77.246.182.0/24 maxlen: 24
77.246.182.128/29 maxlen: 29
77.246.183.0/24 maxlen: 24
77.246.184.0/24 maxlen: 24
77.246.185.0/24 maxlen: 24
77.246.186.0/24 maxlen: 24
77.246.186.96/27 maxlen: 27
77.246.187.0/24 maxlen: 24
77.246.188.0/24 maxlen: 24
77.246.190.0/24 maxlen: 24
77.246.190.160/27 maxlen: 27
77.246.191.0/24 maxlen: 24
185.74.80.0/24 maxlen: 24
185.74.81.0/24 maxlen: 24
2a05:4700:b::/48 maxlen: 48
2a05:4700:50::/48 maxlen: 48
2a05:4700:53::/48 maxlen: 48
2a05:4700:100::/48 maxlen: 48
2a05:4700:101::/48 maxlen: 48
2a05:4700:200::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/RY-8K-wAmQ5cw7QhdHwFV6jtu_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/RY-8K-wAmQ5cw7QhdHwFV6jtu_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RY-8K-wAmQ5cw7QhdHwFV6jtu_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:21:06:46:d0:f5:7f:40:13:e6:7c:63:fa:4d:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=458fbc2bec00990e5cc3b421747c0557a8edbbff
Validity
Not Before: Jul 2 15:18:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3d48ca56ebd7cb2fc19aec30d1c0f6f1bd21d185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d9:c2:0c:f6:4d:68:80:2a:5f:1f:e0:15:85:
5c:f4:94:89:17:bc:e0:6a:6d:14:72:94:3b:9e:8b:
c1:cd:95:e5:20:4f:11:7d:72:b2:b4:bc:be:a2:1f:
cc:ff:c6:e1:28:7d:b1:a3:b7:15:3e:59:17:5a:b0:
78:a7:17:43:af:d5:42:d3:5a:bc:1b:58:58:5c:06:
57:57:fb:a6:8c:41:69:cc:32:e1:6c:de:f4:73:7f:
e0:c4:93:c4:71:d7:30:b2:53:4f:08:cb:d5:c1:36:
34:8c:4f:d9:dc:cc:7d:59:37:94:1c:c2:93:ce:3f:
ee:ef:bc:49:57:29:cb:60:98:b6:1c:77:0b:c8:b8:
a5:ce:bd:ed:4a:74:bd:b7:53:84:7a:20:d8:5c:62:
29:58:53:7f:65:37:27:63:b0:27:1b:b9:b7:11:ae:
10:bb:f6:e3:42:89:5b:6c:94:db:68:9b:41:43:d7:
d5:ee:bf:6d:dc:b7:35:b4:b5:a1:3d:66:03:f6:6f:
f8:dd:c1:f4:cd:51:b4:58:e4:ac:97:23:c8:c9:85:
17:1e:63:42:e8:be:e3:01:a1:dc:fc:10:f0:31:46:
e8:6d:ef:69:80:f2:d6:b4:9a:19:15:12:28:ca:96:
09:db:ae:91:e2:2d:f0:a6:4e:40:a1:2e:75:17:95:
c5:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:48:CA:56:EB:D7:CB:2F:C1:9A:EC:30:D1:C0:F6:F1:BD:21:D1:85
X509v3 Authority Key Identifier:
keyid:45:8F:BC:2B:EC:00:99:0E:5C:C3:B4:21:74:7C:05:57:A8:ED:BB:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RY-8K-wAmQ5cw7QhdHwFV6jtu_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/PUjKVuvXyy_Bmuww0cD28b0h0YU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/RY-8K-wAmQ5cw7QhdHwFV6jtu_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.246.176.0-77.246.188.255
77.246.190.0/23
185.74.80.0/23
IPv6:
2a05:4700:b::/48
2a05:4700:50::/48
2a05:4700:53::/48
2a05:4700:100::/47
2a05:4700:200::/48
Signature Algorithm: sha256WithRSAEncryption
74:1b:e2:45:d5:2a:3d:9a:d8:9f:79:f8:b6:01:ca:e3:5b:bb:
40:4d:e7:c4:f3:13:60:4b:ec:1e:a4:0c:1c:77:52:61:01:fd:
96:d8:2d:c7:ce:76:33:1f:c8:76:74:00:84:a2:4e:40:fc:43:
1b:c3:1f:15:30:4b:14:dd:7f:25:58:a8:13:8d:82:b4:67:63:
f9:18:75:91:c3:a7:d0:a9:85:f7:c2:2c:a3:d8:a8:88:38:83:
f9:f8:a6:1f:3a:b6:25:a7:a5:34:68:9b:91:08:6f:ad:44:8b:
36:3c:08:03:f7:a0:de:00:18:b6:6e:b6:31:cd:12:8d:7d:8c:
b9:cb:5f:fb:4e:c3:ef:fd:4c:69:85:1c:ad:a1:e8:a9:d7:35:
b2:3f:98:25:00:c6:7b:35:1c:34:8b:06:94:97:66:d1:e2:0f:
c8:39:3f:4c:c0:16:f1:4e:f2:e5:e0:52:8f:de:e7:1b:96:fa:
3b:6b:6a:d4:ee:3e:a4:fb:fa:f5:d6:77:f3:f2:25:a5:cf:f1:
08:a6:dd:a3:f1:a9:08:69:49:8e:30:68:24:56:ba:a1:f8:6a:
93:e5:3e:c9:ef:db:89:a1:f0:b6:93:62:5d:a2:5c:19:ef:79:
18:47:5b:37:73:55:76:4e:a3:43:11:b4:10:2d:55:0c:70:42:
5a:a9:b1:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:23:14 2026 by rpki-client