Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/RaPgSTgaMzdumgF1ZalITil6Ct0.roa
File: RaPgSTgaMzdumgF1ZalITil6Ct0.roa (raw, json)
Hash identifier: UVI+ialadM7cWgEEl57TKt2j4tlPQBaNq4jtIAIsJhk=
Subject key identifier: 45:A3:E0:49:38:1A:33:37:6E:9A:01:75:65:A9:48:4E:29:7A:0A:DD
Certificate issuer: /CN=d703642076d27e252fa90bf1a4296f8bcd9d0cf1
Certificate serial: 01A1970DCAB6993A8941EBAB7AED80F679C4
Authority key identifier: D7:03:64:20:76:D2:7E:25:2F:A9:0B:F1:A4:29:6F:8B:CD:9D:0C:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/RaPgSTgaMzdumgF1ZalITil6Ct0.roa
Signing time: Sun 01 Nov 2026 12:20:25 +0000
ROA not before: Sun 01 Nov 2026 12:20:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197889
IP address blocks: 77.221.32.0/20 maxlen: 20
77.221.32.0/22 maxlen: 22
77.221.32.0/23 maxlen: 23
77.221.32.0/24 maxlen: 24
77.221.33.0/24 maxlen: 24
77.221.34.0/23 maxlen: 23
77.221.34.0/24 maxlen: 24
77.221.35.0/24 maxlen: 24
77.221.43.0/24 maxlen: 24
77.221.44.0/23 maxlen: 23
77.221.46.0/23 maxlen: 23
77.221.49.0/24 maxlen: 24
77.221.52.0/23 maxlen: 23
77.221.56.0/23 maxlen: 23
77.221.57.0/24 maxlen: 24
77.221.58.0/23 maxlen: 23
77.221.60.0/24 maxlen: 24
77.221.61.0/24 maxlen: 24
77.221.62.0/24 maxlen: 24
2a10:4940::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:97:0d:ca:b6:99:3a:89:41:eb:ab:7a:ed:80:f6:79:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d703642076d27e252fa90bf1a4296f8bcd9d0cf1
Validity
Not Before: Nov 1 12:20:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=45a3e049381a33376e9a017565a9484e297a0add
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fe:a0:77:5c:33:52:b5:28:cf:de:b5:f8:87:
07:2f:22:13:43:c5:d7:b8:2e:a9:e7:7c:b6:cb:94:
bd:cc:c7:45:93:ce:54:bf:63:e9:1c:6e:d0:da:3c:
53:be:7a:8f:7c:48:35:59:5e:06:34:ab:21:74:6a:
6b:d1:87:81:41:aa:a7:67:bf:d8:7b:fd:6d:eb:68:
84:42:6e:02:c0:c8:d7:7e:77:dc:ae:6f:c1:ee:c0:
97:a8:e0:28:70:4d:ea:b0:26:4c:d4:e1:f9:75:8d:
e4:12:43:30:d8:19:51:92:e9:85:cc:78:78:69:62:
76:e3:2f:01:5f:58:d7:1c:a7:41:53:5b:34:75:6d:
65:0e:d6:ac:b8:9f:18:38:05:4d:0e:8a:b7:73:65:
83:8f:19:d6:3d:ae:0b:2b:d9:ef:b5:a6:c2:46:ea:
84:72:cc:a8:55:5b:9c:b7:de:ec:69:a7:6e:a8:85:
d1:f8:85:4a:92:21:36:dc:43:0b:cb:03:9b:28:34:
e3:b7:c6:64:bc:bb:f0:11:37:3b:b5:99:1c:27:78:
d2:89:f9:d4:09:0e:ae:a3:13:dc:02:c2:76:13:da:
c3:7e:35:95:33:83:8f:17:33:62:64:7d:f1:58:2c:
27:95:db:43:ef:31:eb:09:17:17:c4:9d:3e:a3:21:
6e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:A3:E0:49:38:1A:33:37:6E:9A:01:75:65:A9:48:4E:29:7A:0A:DD
X509v3 Authority Key Identifier:
keyid:D7:03:64:20:76:D2:7E:25:2F:A9:0B:F1:A4:29:6F:8B:CD:9D:0C:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/RaPgSTgaMzdumgF1ZalITil6Ct0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.221.32.0/20
77.221.49.0/24
77.221.52.0/23
77.221.56.0-77.221.62.255
IPv6:
2a10:4940::/32
Signature Algorithm: sha256WithRSAEncryption
08:81:72:5e:69:91:ac:d8:89:78:e6:89:46:7d:b0:03:09:fd:
28:5a:7e:52:70:8b:35:a1:c3:65:5c:33:90:13:9a:a7:a8:30:
a0:fe:9d:20:22:96:d7:3b:6e:3e:a2:49:e9:bc:f7:4a:61:39:
1a:04:96:1e:20:64:ac:70:b8:29:1c:77:d0:d6:c0:2d:91:cc:
dc:97:28:98:6a:25:e9:35:c5:33:bc:1b:c7:01:7d:c8:5d:4d:
b4:c9:24:fe:8c:13:a0:3f:65:ff:07:6b:06:96:5b:e2:af:41:
d3:6e:29:a5:65:53:3f:61:f1:d0:81:e1:78:eb:8e:ec:9e:22:
d6:9c:11:5a:e0:cd:06:54:ca:87:68:b5:c4:e0:6b:12:73:56:
88:34:ea:6b:fd:90:49:b5:da:60:8c:32:73:a8:d0:61:9e:dd:
a0:8a:15:8c:38:11:80:ee:39:c3:8f:d8:a6:bf:79:a3:70:80:
44:32:aa:36:fa:61:5a:74:a3:37:96:6b:37:2b:84:4a:e8:d8:
1e:d1:83:8e:80:90:04:61:c3:0e:62:10:af:ee:58:1e:03:a7:
d8:6e:66:ce:f8:15:c8:ea:64:37:82:3f:1e:9b:26:4c:f6:92:
94:6c:65:62:5f:1c:72:4e:6e:5f:4d:8e:8f:f3:bc:19:03:5c:
47:0e:37:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:21:14 2026 by rpki-client