Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/v8lfLOKHVZnkrdD-G0CENmIoGFY.roa
File: v8lfLOKHVZnkrdD-G0CENmIoGFY.roa (raw, json)
Hash identifier: +aHQYF/Vd4+YgYybVszc6iY/MnmjqAxgJRPynynFvpE=
Subject key identifier: BF:C9:5F:2C:E2:87:55:99:E4:AD:D0:FE:1B:40:84:36:62:28:18:56
Certificate issuer: /CN=458fbc2bec00990e5cc3b421747c0557a8edbbff
Certificate serial: 019F236921A030CDEB4E6AEC74BA1261484C
Authority key identifier: 45:8F:BC:2B:EC:00:99:0E:5C:C3:B4:21:74:7C:05:57:A8:ED:BB:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RY-8K-wAmQ5cw7QhdHwFV6jtu_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/v8lfLOKHVZnkrdD-G0CENmIoGFY.roa
Signing time: Thu 02 Jul 2026 15:18:40 +0000
ROA not before: Thu 02 Jul 2026 15:18:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198149
IP address blocks: 77.246.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/RY-8K-wAmQ5cw7QhdHwFV6jtu_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/RY-8K-wAmQ5cw7QhdHwFV6jtu_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RY-8K-wAmQ5cw7QhdHwFV6jtu_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:21:a0:30:cd:eb:4e:6a:ec:74:ba:12:61:48:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=458fbc2bec00990e5cc3b421747c0557a8edbbff
Validity
Not Before: Jul 2 15:18:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bfc95f2ce2875599e4add0fe1b40843662281856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e8:70:08:6e:a4:ae:a5:9d:a0:87:9e:82:81:
e2:4e:76:e7:e8:ba:73:5c:ee:0d:d2:76:36:41:16:
24:80:c3:ef:cb:67:6c:2d:2a:bb:05:14:4f:87:9a:
17:5e:59:a2:b7:be:0a:18:c5:38:4e:0c:50:93:52:
04:6f:e1:f4:38:cb:1f:8e:c3:bd:1c:18:58:f0:35:
73:5a:97:8b:eb:87:ce:33:3b:74:a3:4d:bf:86:47:
4c:6b:3a:b2:92:f6:37:f1:bb:dd:ad:d5:67:c7:83:
aa:7c:fa:2d:48:a9:c6:c8:24:86:c5:f0:ba:48:a7:
f7:68:5b:b9:f9:e2:f7:1b:d3:15:34:80:91:76:d2:
35:82:ab:f7:52:d0:01:a6:fe:7d:98:7c:78:1a:08:
69:1b:7f:6c:08:cb:e4:81:9a:d3:73:55:82:bf:ab:
30:ec:af:2d:35:76:f6:51:41:33:af:f7:cd:27:fb:
dd:36:ac:7a:f3:7b:18:e4:3c:9d:72:3d:0b:27:01:
58:67:b5:ff:4d:a5:94:06:ad:eb:1e:04:9d:06:cc:
13:d8:85:59:27:a5:06:c7:5c:e3:c7:f0:f1:31:a5:
2d:7e:1a:73:15:0d:b8:72:65:c3:2e:42:f4:f1:df:
26:73:ba:5e:cb:da:10:f1:70:f7:18:50:62:5f:03:
80:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:C9:5F:2C:E2:87:55:99:E4:AD:D0:FE:1B:40:84:36:62:28:18:56
X509v3 Authority Key Identifier:
keyid:45:8F:BC:2B:EC:00:99:0E:5C:C3:B4:21:74:7C:05:57:A8:ED:BB:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RY-8K-wAmQ5cw7QhdHwFV6jtu_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/v8lfLOKHVZnkrdD-G0CENmIoGFY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/RY-8K-wAmQ5cw7QhdHwFV6jtu_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.246.177.0/24
Signature Algorithm: sha256WithRSAEncryption
65:07:aa:cd:e5:44:bb:72:4f:45:ff:b2:4b:17:39:00:4d:e5:
34:01:66:6a:ef:d6:db:97:76:3c:3c:88:ac:91:ed:94:17:70:
0c:5c:c0:af:ac:b2:ec:fc:86:25:d4:21:e0:46:f6:42:06:df:
1b:2e:e4:34:47:80:21:c6:9c:fb:d5:b2:b5:a2:0e:02:c2:b6:
82:89:49:63:bd:69:38:8f:6d:dd:a5:94:c9:90:a2:4d:ba:f7:
72:2d:bf:bd:be:ec:91:c1:6f:20:e8:23:22:6b:fe:da:13:23:
9b:b5:f2:ed:70:39:4f:bd:01:38:05:b4:09:be:f6:79:b3:fc:
6e:31:63:64:77:d4:7e:0d:9f:8f:95:68:c6:fd:9f:6e:78:6f:
e9:f7:22:27:ee:28:a3:02:95:8c:c9:c9:cd:c7:c8:f1:f0:da:
8d:35:c8:25:69:c2:f7:c1:85:c1:f5:d1:fd:49:da:80:43:f3:
7a:95:f4:90:55:6d:8a:4d:92:60:5b:40:8b:c2:8d:0a:46:d2:
c0:33:d0:1e:ce:dd:f5:53:3d:48:ed:ca:18:67:06:1c:ad:16:
e7:e8:a0:3a:9a:9b:e8:84:b9:fb:f0:e8:d0:b9:4d:34:be:73:
4a:1c:37:4e:30:a9:7a:a3:46:21:5a:bb:6f:78:da:4f:3a:79:
e8:99:5d:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:41:26 2026 by rpki-client