Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/Pw7sMxXsU64CMi8U7G-0ZYpDa-c.roa
File: Pw7sMxXsU64CMi8U7G-0ZYpDa-c.roa (raw, json)
Hash identifier: 4gc6D7+Vt5MHyaezrzvEzSeVzHOEdQhELjlUl383Nhg=
Subject key identifier: 3F:0E:EC:33:15:EC:53:AE:02:32:2F:14:EC:6F:B4:65:8A:43:6B:E7
Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial: 01A0D4207F9A26A15D92D265EB4AD6005C15
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/Pw7sMxXsU64CMi8U7G-0ZYpDa-c.roa
Signing time: Thu 24 Sep 2026 15:54:54 +0000
ROA not before: Thu 24 Sep 2026 15:54:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 77.83.244.0/24 maxlen: 24
95.81.74.0/24 maxlen: 24
95.81.75.0/24 maxlen: 24
160.20.158.0/24 maxlen: 24
160.20.159.0/24 maxlen: 24
193.221.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:20:7f:9a:26:a1:5d:92:d2:65:eb:4a:d6:00:5c:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
Validity
Not Before: Sep 24 15:54:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3f0eec3315ec53ae02322f14ec6fb4658a436be7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7a:6c:f3:56:fa:71:1a:c5:f2:eb:1a:d2:38:
28:b5:84:2a:dc:08:ca:5d:50:1f:05:1f:c6:e5:a9:
b9:dc:81:9a:1e:53:53:d9:52:6f:08:d0:ea:b6:5f:
3d:d4:77:fc:cd:3f:40:da:d0:0a:45:ef:07:28:2d:
a5:5c:17:99:ae:c6:52:d4:63:6a:f9:36:2b:bd:96:
2e:f6:14:d6:b9:3d:74:a3:80:b0:f9:95:a4:28:6c:
9e:09:8b:9c:60:01:1a:e6:72:73:39:6b:cf:00:ee:
38:7a:af:ec:25:3d:f1:48:eb:4a:1c:33:e5:59:66:
9d:6c:ce:cb:3a:4e:9a:02:9e:cc:b4:28:70:81:21:
65:11:cb:20:3a:86:b6:c2:13:fb:c8:b7:e4:c6:0a:
f7:7f:70:ac:94:53:8a:ec:d1:64:8e:16:6f:cf:97:
50:1b:0b:39:f6:aa:09:c3:e2:8d:79:b4:6c:0c:87:
12:b8:51:45:60:20:be:d0:7c:69:86:1d:8a:d8:52:
ef:92:7e:31:f2:36:87:8a:b4:3e:2b:05:06:f4:31:
78:d0:8b:19:9c:62:d0:14:0c:d8:9f:c3:16:08:96:
9a:78:d1:0f:39:27:b5:03:8c:85:1b:0b:2f:2b:1a:
0f:4a:e3:9b:4a:f1:09:89:db:29:71:ec:34:47:8c:
d7:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:0E:EC:33:15:EC:53:AE:02:32:2F:14:EC:6F:B4:65:8A:43:6B:E7
X509v3 Authority Key Identifier:
keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/Pw7sMxXsU64CMi8U7G-0ZYpDa-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.244.0/24
95.81.74.0/23
160.20.158.0/23
193.221.202.0/24
Signature Algorithm: sha256WithRSAEncryption
84:cf:10:e8:6e:1d:a4:4e:23:30:17:f1:88:aa:4f:fc:8e:94:
c7:65:69:63:05:57:16:77:ea:25:3c:f9:13:9f:20:49:97:7e:
3d:31:da:5c:94:71:14:1b:ec:da:94:55:cf:c1:c1:aa:80:81:
37:d6:ed:f0:44:5f:54:9b:8f:71:89:c9:55:f5:52:5a:d4:62:
06:77:39:90:f0:0c:67:df:de:8b:8e:68:08:04:fc:58:28:42:
51:46:c9:c1:08:62:19:d4:3c:25:6f:4c:bd:1a:34:db:11:76:
9c:60:de:a9:11:af:25:35:0c:63:61:5b:52:6c:44:78:58:35:
90:fc:23:85:b8:9a:f6:4a:ce:dc:c1:4a:94:06:eb:54:7c:8a:
b8:d5:4e:73:34:13:2d:5b:ae:bf:0c:7e:ec:7f:60:7f:82:f1:
87:87:fa:7a:7c:ac:a2:8e:2c:94:62:77:fc:47:3d:31:35:e9:
7c:a9:25:f5:14:4a:94:9b:7c:bb:7b:08:ae:b4:dd:2e:96:52:
44:ee:0e:3b:cc:6f:9e:d0:03:80:db:1f:06:7f:90:b3:1b:3c:
fc:bd:d7:9d:63:23:15:02:18:23:66:58:9a:4d:fd:b8:bf:4d:
41:f2:68:c4:2f:7c:43:db:5f:5a:6a:74:9d:af:f9:68:9b:9c:
83:3e:8d:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 10:46:05 2026 by rpki-client