Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/d6eWFXUNKhuhUBI5n9jr46RdIyE.roa
File: d6eWFXUNKhuhUBI5n9jr46RdIyE.roa (raw, json)
Hash identifier: OqUlEH91xHaOrAXvLHbnarDEhWKSDbrc8ksOYymfmUg=
Subject key identifier: 77:A7:96:15:75:0D:2A:1B:A1:50:12:39:9F:D8:EB:E3:A4:5D:23:21
Certificate issuer: /CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e
Certificate serial: 01A1C437F3E40769002F97E63D97FA2A926C
Authority key identifier: 8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/d6eWFXUNKhuhUBI5n9jr46RdIyE.roa
Signing time: Tue 10 Nov 2026 06:49:23 +0000
ROA not before: Tue 10 Nov 2026 06:49:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5511
IP address blocks: 5.253.226.0/24 maxlen: 24
146.19.26.0/24 maxlen: 24
217.119.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.mft
rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 10:37:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c4:37:f3:e4:07:69:00:2f:97:e6:3d:97:fa:2a:92:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e
Validity
Not Before: Nov 10 06:49:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=77a79615750d2a1ba15012399fd8ebe3a45d2321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:bf:1e:89:c7:bf:9a:1b:b1:65:26:55:0f:d8:
44:c7:54:3f:45:5e:36:3b:37:4f:47:a0:98:59:ff:
7f:e4:72:7f:5b:eb:ee:64:e6:f3:d6:27:93:1d:fd:
bc:47:d5:8e:bd:d9:e4:53:10:ee:15:91:95:b3:bd:
1a:32:0d:72:d1:31:1d:f8:0f:0a:68:5a:8f:96:d7:
48:0c:5e:8b:57:77:18:ad:b2:07:55:51:eb:b9:f7:
4c:8a:76:3b:be:25:4e:93:fe:96:27:97:20:9d:4d:
2d:ee:b7:79:37:a0:fa:02:b0:ac:ad:25:62:31:e1:
cd:12:24:45:f1:b7:bc:a6:ac:de:a2:ae:3e:c2:b1:
fd:38:9f:3f:f3:bf:26:a9:3c:94:4b:11:c7:3a:43:
c4:80:ff:43:a8:b9:df:c1:f5:70:b7:cf:ca:d9:7b:
44:41:75:f6:3c:e8:f0:9e:8e:f8:ac:85:da:9a:82:
44:fa:f8:f8:59:bc:58:c7:14:de:f3:6d:e0:20:b5:
5e:43:58:83:5f:de:ed:b6:86:9b:47:66:fc:ab:db:
13:30:1b:d8:8c:a8:7c:07:60:cd:0d:c6:12:9f:8f:
1e:90:49:cf:1d:52:27:a6:78:ca:66:ab:ca:90:7b:
b5:89:5c:dd:89:9e:09:35:71:63:a4:97:53:d1:4d:
46:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:A7:96:15:75:0D:2A:1B:A1:50:12:39:9F:D8:EB:E3:A4:5D:23:21
X509v3 Authority Key Identifier:
keyid:8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/d6eWFXUNKhuhUBI5n9jr46RdIyE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.226.0/24
146.19.26.0/24
217.119.142.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:06:eb:3e:32:c9:c5:de:b8:12:2d:70:34:e3:97:24:c9:6a:
af:54:f0:d6:94:7f:96:94:05:94:77:56:ea:6e:11:aa:2c:a3:
4f:8f:2f:23:95:74:a5:e5:63:9a:8b:f2:ec:c4:08:c3:4d:81:
2a:1f:06:9e:aa:61:9f:e8:04:09:ef:a7:8d:79:dd:2a:2f:80:
ae:36:df:cd:45:93:a0:5c:c1:ae:65:a5:ab:af:c6:4d:3d:74:
c2:cc:c1:12:fc:7d:6a:69:07:02:f0:f1:0d:fc:8b:3e:97:9c:
76:f6:3d:8b:33:28:61:ae:d4:40:28:26:19:a7:d6:24:dd:f3:
1d:24:ae:72:8d:81:ee:25:0f:54:96:4f:52:f8:43:c6:24:35:
6c:5c:d4:5a:65:96:45:94:3a:78:e7:e0:c5:d6:84:ca:50:14:
f3:2a:09:10:bb:50:f8:81:77:45:53:08:0f:07:be:53:73:28:
96:8b:16:f5:f7:ba:b5:76:08:d4:ff:12:89:c9:06:19:8b:96:
ab:de:ca:80:0c:90:4c:35:a9:38:ee:24:3b:8d:de:15:a9:04:
d7:18:32:e8:23:cb:9f:35:88:93:98:cd:61:9f:9c:19:b1:f5:
2e:79:6d:b7:56:52:26:d9:1a:d9:09:f8:13:10:ae:38:ce:6f:
c7:2b:e6:06
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAaHEN/PkB2kAL5fmPZf6KpJsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmYzY5NjQ2NDU3YThiZjhlZjk1NjliOWI0MjdlOWYyYzQ2
MmU1NmUwHhcNMjYxMTEwMDY0OTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3N2E3OTYxNTc1MGQyYTFiYTE1MDEyMzk5ZmQ4ZWJlM2E0NWQyMzIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtr8eice/mhuxZSZVD9hEx1Q/RV42
OzdPR6CYWf9/5HJ/W+vuZObz1ieTHf28R9WOvdnkUxDuFZGVs70aMg1y0TEd+A8K
aFqPltdIDF6LV3cYrbIHVVHrufdMinY7viVOk/6WJ5cgnU0t7rd5N6D6ArCsrSVi
MeHNEiRF8be8pqzeoq4+wrH9OJ8/878mqTyUSxHHOkPEgP9DqLnfwfVwt8/K2XtE
QXX2POjwno74rIXamoJE+vj4WbxYxxTe823gILVeQ1iDX97ttoabR2b8q9sTMBvY
jKh8B2DNDcYSn48ekEnPHVInpnjKZqvKkHu1iVzdiZ4JNXFjpJdT0U1GmwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFHenlhV1DSoboVASOZ/Y6+OkXSMhMB8GA1UdIwQY
MBaAFI/GlkZFeov475VpubQn6fLEYuVuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajhhV1JrVjZpX2p2bFdtNXRDZnA4c1JpNVc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny85ZmFiNWMtZTEzOC00ZWY2LTg3OTkt
YjBiMzVhMzRlMzg4LzEvZDZlV0ZYVU5LaHVoVUJJNW45anI0NlJkSXlFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny85ZmFiNWMtZTEzOC00ZWY2LTg3OTktYjBiMzVhMzRlMzg4
LzEvajhhV1JrVjZpX2p2bFdtNXRDZnA4c1JpNVc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQABf3iAwQA
khMaAwQA2XeOMA0GCSqGSIb3DQEBCwUAA4IBAQCKBus+MsnF3rgSLXA045ckyWqv
VPDWlH+WlAWUd1bqbhGqLKNPjy8jlXSl5WOai/LsxAjDTYEqHwaeqmGf6AQJ76eN
ed0qL4CuNt/NRZOgXMGuZaWrr8ZNPXTCzMES/H1qaQcC8PEN/Is+l5x29j2LMyhh
rtRAKCYZp9Yk3fMdJK5yjYHuJQ9Ulk9S+EPGJDVsXNRaZZZFlDp45+DF1oTKUBTz
KgkQu1D4gXdFUwgPB75TcyiWixb197q1dgjU/xKJyQYZi5ar3sqADJBMNak47iQ7
jd4VqQTXGDLoI8ufNYiTmM1hn5wZsfUueW23VlIm2RrZCfgTEK44zm/HK+YG
-----END CERTIFICATE-----
Generated at Sat Nov 14 20:49:07 2026 by rpki-client