Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/52HU6I7Rm7tQULDjjC8W6FrtqtY.roa
File: 52HU6I7Rm7tQULDjjC8W6FrtqtY.roa (raw, json)
Hash identifier: /xYGFHSxQmbPQ9dOQ2hmSEFTCmDSbrytRNQZY7ZYEAw=
Subject key identifier: E7:61:D4:E8:8E:D1:9B:BB:50:50:B0:E3:8C:2F:16:E8:5A:ED:AA:D6
Certificate issuer: /CN=1b2c219f3c297b775880c3b651a2003f9be6de5e
Certificate serial: 019EDF4349F01AE036A00B9E902920C83F99
Authority key identifier: 1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/52HU6I7Rm7tQULDjjC8W6FrtqtY.roa
Signing time: Fri 19 Jun 2026 09:43:09 +0000
ROA not before: Fri 19 Jun 2026 09:43:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215376
IP address blocks: 77.221.134.0/24 maxlen: 24
77.221.146.0/24 maxlen: 24
109.120.136.0/24 maxlen: 24
176.98.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:df:43:49:f0:1a:e0:36:a0:0b:9e:90:29:20:c8:3f:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b2c219f3c297b775880c3b651a2003f9be6de5e
Validity
Not Before: Jun 19 09:43:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e761d4e88ed19bbb5050b0e38c2f16e85aedaad6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e3:69:10:fb:85:89:be:ee:40:62:23:87:54:
63:89:29:a7:7f:1c:b7:2e:55:7a:1a:20:8a:9a:54:
7f:86:65:22:98:8b:0a:00:04:7d:12:17:b0:71:20:
88:d8:1f:4a:94:a0:bf:d6:8c:0f:b7:ff:a8:f8:1c:
cd:7d:81:b3:83:de:a2:ef:e5:3c:cb:eb:2b:dd:a4:
2a:87:ef:d1:23:da:a1:b1:dd:62:d0:05:97:72:80:
65:c2:62:24:47:02:72:b8:8a:d9:a9:70:12:07:f5:
33:8f:b3:fe:99:61:d5:ac:d1:99:5a:9c:a9:81:21:
1e:6a:c2:ea:08:bb:94:7a:78:c6:be:f6:17:d8:e9:
2c:b8:44:ed:99:fc:ed:13:78:d4:ab:6d:f9:2b:c3:
9e:1f:e1:e7:b7:e9:34:fe:ce:45:06:c1:60:fe:ac:
cf:ea:16:6f:80:28:05:26:cf:6f:e9:b7:44:6e:2f:
c6:8d:5f:48:90:98:1a:6a:fa:8c:f6:eb:8a:3f:14:
94:91:0e:76:89:71:e1:37:d1:f5:b4:2c:c7:88:00:
d5:d7:43:bd:30:78:8d:3b:6d:ed:7f:e3:31:83:97:
cd:cc:e4:bc:f9:5b:b7:1d:90:d9:b2:d1:c8:eb:55:
1e:f7:9c:35:1a:52:a5:55:8d:25:d9:dd:7b:46:5d:
b8:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:61:D4:E8:8E:D1:9B:BB:50:50:B0:E3:8C:2F:16:E8:5A:ED:AA:D6
X509v3 Authority Key Identifier:
keyid:1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/52HU6I7Rm7tQULDjjC8W6FrtqtY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.221.134.0/24
77.221.146.0/24
109.120.136.0/24
176.98.187.0/24
Signature Algorithm: sha256WithRSAEncryption
21:e3:1d:2b:69:10:6c:3b:64:a7:fb:8a:34:bf:49:dc:b7:1a:
94:38:08:ba:8b:ca:b2:86:5c:24:4f:08:e5:b1:07:5c:e0:11:
8e:d0:9b:1d:d6:0a:77:88:93:a6:31:d0:d9:8f:50:4b:cf:69:
58:6b:11:84:d5:a8:c0:68:41:2e:ea:5a:d8:c2:6b:e1:65:e2:
b7:a5:5a:31:86:95:c3:ef:cc:29:8d:94:e2:7b:a1:94:60:a2:
d2:3b:23:83:b7:92:99:b0:f0:10:db:c2:fa:e3:02:d7:79:0d:
f3:d9:74:f7:ed:5a:11:ac:74:c9:fb:0f:44:43:ea:e2:f3:0d:
6f:67:89:f9:76:11:23:db:d0:1a:11:6d:0b:23:31:29:ae:57:
88:73:38:79:28:d8:cc:84:21:79:e3:a5:cd:e2:38:e4:36:90:
06:55:6c:fe:f3:04:c2:75:cd:ee:4a:c6:74:65:c1:dd:58:51:
f7:b0:b5:9f:ff:c4:77:2f:8b:58:0c:e7:11:c7:17:3c:b4:77:
13:b0:54:bd:47:68:00:60:be:cb:97:76:25:2a:92:d3:5c:a9:
fb:a5:da:58:1a:3c:5f:fa:8c:d7:a5:ca:55:18:2d:bf:1d:ad:
0f:6e:18:a0:f4:49:3a:39:ae:fa:e8:9c:7c:12:57:72:bb:7b:
4d:c6:30:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:30:29 2026 by rpki-client