Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/000d6b-0ffc-46de-a2a6-fac16ed10a4a/1/VCrM0Foqmr99Ur7PepmGUgC1Ts0.roa
File: VCrM0Foqmr99Ur7PepmGUgC1Ts0.roa (raw, json)
Hash identifier: PsHxBvZ369SRFDSO+Fj2EJJzFPlfyfCCV/NJdrfL2e4=
Subject key identifier: 54:2A:CC:D0:5A:2A:9A:BF:7D:52:BE:CF:7A:99:86:52:00:B5:4E:CD
Certificate issuer: /CN=dbc92025adb368cb9532098986077079b01c1655
Certificate serial: 019F9054F51797663315295B154AEDFF145A
Authority key identifier: DB:C9:20:25:AD:B3:68:CB:95:32:09:89:86:07:70:79:B0:1C:16:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28kgJa2zaMuVMgmJhgdwebAcFlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/000d6b-0ffc-46de-a2a6-fac16ed10a4a/1/VCrM0Foqmr99Ur7PepmGUgC1Ts0.roa
Signing time: Thu 23 Jul 2026 18:55:14 +0000
ROA not before: Thu 23 Jul 2026 18:55:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200477
IP address blocks: 77.235.32.0/24 maxlen: 24
77.235.35.0/24 maxlen: 24
77.235.49.0/24 maxlen: 24
77.235.52.0/24 maxlen: 24
2a07:340::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/000d6b-0ffc-46de-a2a6-fac16ed10a4a/1/28kgJa2zaMuVMgmJhgdwebAcFlU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/000d6b-0ffc-46de-a2a6-fac16ed10a4a/1/28kgJa2zaMuVMgmJhgdwebAcFlU.mft
rsync://rpki.ripe.net/repository/DEFAULT/28kgJa2zaMuVMgmJhgdwebAcFlU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:54:f5:17:97:66:33:15:29:5b:15:4a:ed:ff:14:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbc92025adb368cb9532098986077079b01c1655
Validity
Not Before: Jul 23 18:55:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=542accd05a2a9abf7d52becf7a99865200b54ecd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fa:a4:86:0b:fb:02:65:86:97:e5:4a:ac:7a:
75:35:07:6f:8c:be:f0:74:b7:bb:c7:3d:1c:28:ed:
ee:ed:46:2e:e5:5a:1c:9f:40:d3:bd:f8:ac:12:5d:
8e:61:0e:71:10:f8:ae:46:5f:32:51:48:4e:26:c0:
3a:6f:b3:f2:4e:17:83:52:53:6f:80:bb:5e:d9:bc:
b6:ac:3f:16:0b:15:6a:37:95:aa:70:ed:33:dc:39:
39:05:61:6f:d5:53:34:42:bb:79:78:df:62:6e:1f:
9e:ff:de:e3:16:45:6c:c4:31:38:57:32:63:dd:a8:
ea:0a:4a:67:75:4c:04:1d:35:8c:19:73:a2:89:5c:
b8:b3:0c:aa:e5:d7:77:80:f6:00:ed:99:b5:bb:bd:
bc:9f:80:b7:69:71:ee:69:cd:ab:91:5d:f3:76:2b:
8b:a5:7a:2b:49:ac:6d:01:35:79:a3:fb:c6:a7:5f:
58:19:38:28:8b:4e:0a:da:75:11:0c:44:9d:f1:fa:
b3:38:ec:6e:ec:57:42:cb:95:e5:3b:8c:dd:24:2b:
39:48:90:fb:a2:45:0c:66:a9:ae:15:50:1e:d4:4b:
ad:1b:e6:45:68:6c:2d:16:8c:2e:9f:0b:6c:65:09:
2b:00:47:2d:75:fe:e9:b6:79:b1:4d:f8:35:05:cb:
fe:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:2A:CC:D0:5A:2A:9A:BF:7D:52:BE:CF:7A:99:86:52:00:B5:4E:CD
X509v3 Authority Key Identifier:
keyid:DB:C9:20:25:AD:B3:68:CB:95:32:09:89:86:07:70:79:B0:1C:16:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28kgJa2zaMuVMgmJhgdwebAcFlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/000d6b-0ffc-46de-a2a6-fac16ed10a4a/1/VCrM0Foqmr99Ur7PepmGUgC1Ts0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/000d6b-0ffc-46de-a2a6-fac16ed10a4a/1/28kgJa2zaMuVMgmJhgdwebAcFlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.235.32.0/24
77.235.35.0/24
77.235.49.0/24
77.235.52.0/24
IPv6:
2a07:340::/29
Signature Algorithm: sha256WithRSAEncryption
80:a3:dc:fa:94:e7:b9:ae:13:36:ea:d4:8c:a2:af:8c:8c:0b:
20:c4:53:d2:f7:d1:e0:bc:24:50:0b:c0:b3:f1:99:6b:52:ba:
c0:7e:ff:ab:0d:84:7a:64:39:1c:e5:b3:3f:5e:f9:7a:5a:64:
2a:93:a8:e2:4a:64:76:7d:9f:2e:28:46:d5:ca:ee:64:67:4e:
dd:74:a4:da:92:a0:90:d2:38:8a:d8:41:74:12:ce:6d:03:b5:
4e:be:6d:8d:61:4b:f2:d1:e5:4d:9b:fe:36:a2:b9:6b:1c:12:
f6:2b:27:4b:75:c3:d2:05:08:8f:8b:65:c4:9c:88:a1:25:97:
4e:7b:33:bd:2a:8d:10:61:9f:2d:d6:91:34:08:15:65:b7:f8:
fd:ce:f3:d0:a4:4e:d3:1e:c1:f5:2d:90:51:ab:f4:c6:e4:2a:
d6:b4:65:f9:58:d1:0e:39:c5:db:d4:c0:a3:1a:18:9d:11:8e:
c2:d1:af:90:6c:48:96:3c:f8:aa:56:2c:1a:cb:ae:8d:5b:7a:
a8:1a:cd:45:5c:49:3d:1e:01:87:16:aa:91:28:11:72:46:fa:
16:26:6e:97:0b:12:4b:1c:5c:60:f5:ca:ef:16:48:97:5b:0d:
aa:42:33:7c:46:08:32:27:e4:50:65:a3:27:21:ba:75:a0:2d:
3e:b1:b5:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:13:41 2026 by rpki-client