Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/9glAW5iAOoJfHUy-cG7x2ioquYI.roa
File: 9glAW5iAOoJfHUy-cG7x2ioquYI.roa (raw, json)
Hash identifier: 1zxEwTZC3c6dBb4g4U0EpOtMIXYAmuje5kxbhNrG4W4=
Subject key identifier: F6:09:40:5B:98:80:3A:82:5F:1D:4C:BE:70:6E:F1:DA:2A:2A:B9:82
Certificate issuer: /CN=6f5e0230be799e44829c8720ca38347045494e20
Certificate serial: 01A167A47A0FEDCA13A6877BFB7AA47B7C34
Authority key identifier: 6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/9glAW5iAOoJfHUy-cG7x2ioquYI.roa
Signing time: Fri 23 Oct 2026 07:23:14 +0000
ROA not before: Fri 23 Oct 2026 07:23:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 147281
IP address blocks: 77.216.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 05:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:67:a4:7a:0f:ed:ca:13:a6:87:7b:fb:7a:a4:7b:7c:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f5e0230be799e44829c8720ca38347045494e20
Validity
Not Before: Oct 23 07:23:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f609405b98803a825f1d4cbe706ef1da2a2ab982
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:13:ef:5c:0e:b7:a7:44:f2:b1:3c:48:cf:ff:
2b:c3:ad:71:4f:e2:9b:04:df:19:7c:2a:01:6d:df:
23:bd:10:6f:67:44:6d:26:b1:ee:69:91:9a:0b:80:
2b:de:e4:8f:72:bd:91:0d:eb:1a:82:35:d3:a4:68:
af:c6:96:63:b0:b4:5b:bd:81:c9:82:2b:5c:21:36:
21:ca:63:5f:71:90:51:81:d5:f0:f8:a9:42:d7:6b:
fa:33:eb:fe:13:5d:0b:5f:10:a7:87:7e:a4:b1:13:
f2:27:1f:5c:c1:5d:d0:98:0d:c2:26:20:49:88:ae:
ca:4c:a7:2c:1a:b3:bb:6e:b7:da:23:d4:a8:b0:5a:
36:6a:60:6a:e7:4d:6c:c4:78:9c:77:97:98:8f:ba:
54:7b:44:f4:3f:86:10:98:c7:53:8e:a3:70:3e:af:
16:5c:f2:fb:c5:79:7d:a8:d8:49:ca:c7:2a:a2:9d:
4a:3d:07:a8:5b:0d:e6:3a:ff:1d:55:ac:dd:b8:2c:
c5:f6:3e:33:6b:06:21:c4:9d:f8:52:bd:60:53:8a:
58:29:1c:13:02:b0:2e:30:d7:2a:17:c4:19:84:7a:
3c:8d:07:12:ce:31:29:89:e7:9b:99:e7:73:c4:86:
a2:04:ea:5d:0c:cd:8f:2b:bf:35:1d:2f:53:39:cc:
cc:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:09:40:5B:98:80:3A:82:5F:1D:4C:BE:70:6E:F1:DA:2A:2A:B9:82
X509v3 Authority Key Identifier:
keyid:6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/9glAW5iAOoJfHUy-cG7x2ioquYI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.216.28.0/24
Signature Algorithm: sha256WithRSAEncryption
68:79:5e:27:08:87:9a:ac:28:fd:e8:a3:62:95:1d:2d:cb:ee:
5b:86:d6:36:12:6c:24:ee:d1:4e:3e:5e:7c:32:72:de:40:e5:
e3:39:b9:24:86:a9:34:e1:dd:b4:50:40:d1:ba:33:8c:6b:37:
c8:9c:87:de:86:d3:63:2b:69:5b:78:17:b7:6b:22:ea:1a:eb:
93:06:2c:80:3c:e1:b5:69:0a:7f:af:a2:d2:ed:b5:49:5a:da:
db:08:18:47:a2:99:ab:9b:3d:45:c0:25:fe:aa:16:97:f2:3f:
e1:e6:87:30:9d:10:e2:b1:32:a9:b0:be:08:bb:c5:ee:9d:fb:
8a:a9:f1:44:58:72:8a:d8:71:38:79:03:8d:7b:a5:b5:7e:51:
9a:80:86:c3:af:ba:c7:95:29:30:67:c1:92:0c:4b:66:99:fe:
9c:8a:05:e9:e2:f3:ca:dd:dd:47:3d:89:65:e0:84:d0:2d:23:
84:41:91:0d:53:88:a9:db:51:40:0e:58:5f:50:99:42:d5:ad:
5a:f9:9b:9f:81:51:4d:1b:02:f9:d2:4a:47:ca:9e:96:d1:a8:
d5:15:a6:12:96:04:14:d4:9c:79:7d:65:7a:98:ec:ff:b5:a6:
f9:6f:9a:ea:63:c3:e2:f5:20:5d:06:05:ca:a2:47:c0:3f:99:
ae:1c:4c:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:14:56 2026 by rpki-client