Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/7c97cf-195c-4fc1-95a3-637fa14656de/1/1-fbqUSS1kPwLmHgUc948G9nLk74.roa
File: 1-fbqUSS1kPwLmHgUc948G9nLk74.roa (raw, json)
Hash identifier: 6NIeRWpjtcmAve+ttAm4K5c+uV1/s3aliAY3xDkkj3A=
Subject key identifier: F9:F6:EA:51:24:B5:90:FC:0B:98:78:14:73:DE:3C:1B:D9:CB:93:BE
Certificate issuer: /CN=968a17e16196bb7a86718e6b2bd6a07e37b40c65
Certificate serial: 019F4707F3AA58F87289CA7365B2E09A2D2B
Authority key identifier: 96:8A:17:E1:61:96:BB:7A:86:71:8E:6B:2B:D6:A0:7E:37:B4:0C:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/looX4WGWu3qGcY5rK9agfje0DGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/7c97cf-195c-4fc1-95a3-637fa14656de/1/1-fbqUSS1kPwLmHgUc948G9nLk74.roa
Signing time: Thu 09 Jul 2026 13:18:51 +0000
ROA not before: Thu 09 Jul 2026 13:18:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199499
IP address blocks: 212.77.8.0/24 maxlen: 24
2a01:b9::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/7c97cf-195c-4fc1-95a3-637fa14656de/1/looX4WGWu3qGcY5rK9agfje0DGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/7c97cf-195c-4fc1-95a3-637fa14656de/1/looX4WGWu3qGcY5rK9agfje0DGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/looX4WGWu3qGcY5rK9agfje0DGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 20:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:47:07:f3:aa:58:f8:72:89:ca:73:65:b2:e0:9a:2d:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=968a17e16196bb7a86718e6b2bd6a07e37b40c65
Validity
Not Before: Jul 9 13:18:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f9f6ea5124b590fc0b98781473de3c1bd9cb93be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e6:23:b7:1c:e6:c4:91:90:fd:9f:fa:ed:38:
4e:f9:dc:b6:ed:b8:1a:a2:08:8f:15:2d:d1:7b:b4:
0a:d7:e3:e4:aa:1f:42:08:df:d5:35:9c:ce:ec:c0:
ad:47:5b:40:07:c2:88:c6:00:be:8f:b7:2d:22:13:
73:f1:c1:8d:4c:fd:65:28:66:6b:86:54:f7:05:90:
d5:64:92:60:22:45:88:70:a0:73:a1:ea:e9:55:0d:
7b:90:de:d5:79:dd:e2:db:ef:a5:26:00:9b:3d:72:
52:1c:97:43:82:90:6c:a6:c2:85:52:35:53:50:67:
ba:c0:34:a9:82:57:1b:9e:60:0e:28:17:69:1b:78:
0a:db:67:11:2a:14:5d:df:2c:59:19:e7:f4:55:b5:
f6:75:a5:62:83:b9:a9:4f:ee:3d:98:56:f5:50:45:
71:51:d7:75:45:05:9a:05:d0:1b:d4:ba:73:d7:1f:
68:57:27:f9:b9:ce:9b:8c:17:2b:7a:a1:99:02:e8:
ec:98:dc:c2:4b:2c:e8:c5:f0:2d:44:c1:a3:a4:48:
bd:db:01:1f:f7:8a:5d:3b:cc:ad:f0:8a:dd:8c:8c:
75:5d:17:89:10:78:b4:9c:af:11:bb:fd:5a:37:f6:
12:59:dc:6f:f2:f2:21:89:6a:e8:0d:91:8b:9d:6f:
09:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:F6:EA:51:24:B5:90:FC:0B:98:78:14:73:DE:3C:1B:D9:CB:93:BE
X509v3 Authority Key Identifier:
keyid:96:8A:17:E1:61:96:BB:7A:86:71:8E:6B:2B:D6:A0:7E:37:B4:0C:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/looX4WGWu3qGcY5rK9agfje0DGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7c97cf-195c-4fc1-95a3-637fa14656de/1/1-fbqUSS1kPwLmHgUc948G9nLk74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7c97cf-195c-4fc1-95a3-637fa14656de/1/looX4WGWu3qGcY5rK9agfje0DGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.77.8.0/24
IPv6:
2a01:b9::/32
Signature Algorithm: sha256WithRSAEncryption
9c:67:1d:2f:ac:51:ad:f9:93:8b:c4:f3:61:67:be:e5:4f:be:
eb:b4:c6:d3:21:76:65:15:9c:70:bb:5d:84:a8:47:e5:35:bb:
da:a4:69:3f:bc:76:cb:21:de:2c:2f:2b:7f:19:6f:cf:c3:d4:
b9:fe:ba:ee:9b:77:9d:e2:ca:39:f6:98:e8:57:06:ad:c2:c6:
4a:70:ba:73:32:5f:99:9f:67:c3:57:f6:ce:a1:88:2d:93:49:
56:49:6e:14:af:35:66:e3:c3:72:5f:23:de:46:00:1b:14:56:
93:4f:ef:b6:88:d0:90:b0:7e:47:c8:66:dd:37:de:27:0b:5e:
e1:69:2d:a1:c5:93:c5:c0:70:49:b0:f2:f6:9e:ee:6b:11:5d:
fe:ed:34:71:96:3b:93:1d:62:f1:1f:60:bf:d5:1b:a2:db:ce:
c7:4d:58:27:16:e7:09:6c:d6:8d:eb:90:cd:9d:7e:56:2a:4c:
74:96:d1:86:b6:4e:a7:8a:3d:41:77:31:ca:56:16:1e:d4:8f:
8b:01:6a:c3:0e:29:09:49:8d:b4:8c:75:bd:82:21:78:d6:39:
55:78:5b:64:2a:37:e9:48:2e:c0:ed:9e:f1:1d:c0:e4:dc:9c:
7d:02:65:e2:de:d2:88:cf:86:8b:2b:67:8d:ab:b9:9c:af:0e:
f9:02:a1:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 05:10:44 2026 by rpki-client