Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/PvcdpObefkzVah2If1vGVRM5pPw.roa
File: PvcdpObefkzVah2If1vGVRM5pPw.roa (raw, json)
Hash identifier: E2SK6HlEkywPIAxJejC343dtDicPwBaW8NfPI1M31po=
Subject key identifier: 3E:F7:1D:A4:E6:DE:7E:4C:D5:6A:1D:88:7F:5B:C6:55:13:39:A4:FC
Certificate issuer: /CN=458fbc2bec00990e5cc3b421747c0557a8edbbff
Certificate serial: 019F4B5270C395FA0351D2A1D316DB5C5D48
Authority key identifier: 45:8F:BC:2B:EC:00:99:0E:5C:C3:B4:21:74:7C:05:57:A8:ED:BB:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RY-8K-wAmQ5cw7QhdHwFV6jtu_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/PvcdpObefkzVah2If1vGVRM5pPw.roa
Signing time: Fri 10 Jul 2026 09:18:41 +0000
ROA not before: Fri 10 Jul 2026 09:18:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35699
IP address blocks: 77.246.177.0/24 maxlen: 24
77.246.188.0/24 maxlen: 24
77.246.189.0/24 maxlen: 24
185.74.82.0/23 maxlen: 23
185.74.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/RY-8K-wAmQ5cw7QhdHwFV6jtu_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/RY-8K-wAmQ5cw7QhdHwFV6jtu_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RY-8K-wAmQ5cw7QhdHwFV6jtu_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:4b:52:70:c3:95:fa:03:51:d2:a1:d3:16:db:5c:5d:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=458fbc2bec00990e5cc3b421747c0557a8edbbff
Validity
Not Before: Jul 10 09:18:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3ef71da4e6de7e4cd56a1d887f5bc6551339a4fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6e:a3:d2:0e:4b:ba:54:1d:8e:25:46:77:77:
94:ea:81:eb:d3:86:48:00:77:d5:04:50:70:84:da:
c8:c0:d9:85:8e:6d:f9:e7:be:6a:99:e7:b9:67:48:
d3:e5:dd:5d:b3:43:c7:4b:b4:20:64:f5:1e:12:cd:
ca:d9:ff:d5:c7:ec:a0:9f:1c:63:32:06:bc:58:ac:
36:40:24:09:96:58:66:a1:45:a6:40:cc:fa:dd:a6:
9e:3d:74:48:11:6f:e5:24:4b:1b:b4:9b:ab:e9:ce:
cb:1e:00:33:86:7a:93:9e:b3:0f:e8:ce:b8:cf:e1:
5e:d6:82:3a:27:11:4f:28:b6:47:c0:72:af:ac:d1:
a6:ac:f6:46:97:6f:4c:a1:84:c3:91:a2:ad:2a:e3:
63:c9:b0:97:aa:ca:b2:f5:b5:fd:39:d2:f9:9f:b9:
a3:71:0c:83:f2:03:c8:75:92:7f:c2:6b:3f:32:4f:
ec:a7:1b:87:bd:bc:7b:72:65:69:c8:25:18:cf:8e:
c3:95:54:fe:1c:c9:a1:e4:b6:65:39:33:e8:6f:ab:
a6:03:d6:3d:0e:03:e3:ec:a5:e2:bb:1f:54:71:7e:
f9:a7:72:99:58:0b:c6:8f:00:8c:80:30:bd:f4:15:
0a:8e:9b:05:5f:59:ce:38:26:c8:ef:27:d8:90:df:
7f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:F7:1D:A4:E6:DE:7E:4C:D5:6A:1D:88:7F:5B:C6:55:13:39:A4:FC
X509v3 Authority Key Identifier:
keyid:45:8F:BC:2B:EC:00:99:0E:5C:C3:B4:21:74:7C:05:57:A8:ED:BB:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RY-8K-wAmQ5cw7QhdHwFV6jtu_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/PvcdpObefkzVah2If1vGVRM5pPw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/RY-8K-wAmQ5cw7QhdHwFV6jtu_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.246.177.0/24
77.246.188.0/23
185.74.82.0/23
Signature Algorithm: sha256WithRSAEncryption
33:1f:c8:04:97:8d:c0:3b:90:05:4c:5a:45:bd:71:39:13:a2:
66:a4:01:1d:77:15:06:30:b7:da:76:bc:da:6e:9b:f5:21:5d:
70:03:71:45:05:3c:5b:ea:fd:bb:1b:ee:8e:d4:ad:7f:17:41:
f1:e6:30:19:a4:3f:74:5a:c3:1e:ca:55:e9:51:ac:27:5f:9c:
19:77:eb:44:82:71:e8:4a:74:f1:14:67:63:5d:42:ea:08:bb:
c8:1d:64:26:94:22:56:a1:d8:f4:9c:b8:98:ea:0d:ed:d2:37:
54:bc:8a:35:a8:6b:7f:64:95:44:5d:39:d7:23:91:35:a9:79:
12:4c:44:84:10:0e:26:a8:d8:2a:06:0b:c2:b6:cc:e1:45:40:
a1:fd:cc:6d:6d:aa:08:96:7f:72:5d:2d:86:f5:64:06:cd:aa:
36:5a:88:b9:8d:37:4b:15:c9:21:07:87:ae:7c:e6:1d:27:87:
72:6e:72:b2:87:4a:b6:88:89:17:d1:30:ee:51:16:ba:a6:ec:
1e:ea:f6:db:59:b0:86:ab:52:5e:1e:0f:8b:94:82:a0:dd:51:
53:0b:e6:74:d9:fc:a1:af:9e:1c:dc:67:2f:87:14:f4:aa:8d:
ea:d3:47:7c:cc:5a:79:3a:60:44:d2:06:45:13:2f:24:51:6f:
d9:9b:c9:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:02:55 2026 by rpki-client