Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/000d6b-0ffc-46de-a2a6-fac16ed10a4a/1/sUQqwSxZusUBi9vAsx5snTDra5E.roa
File: sUQqwSxZusUBi9vAsx5snTDra5E.roa (raw, json)
Hash identifier: ZFriObyQYAxJbwjMxasjggndiXLds723oCaqAYJCBYw=
Subject key identifier: B1:44:2A:C1:2C:59:BA:C5:01:8B:DB:C0:B3:1E:6C:9D:30:EB:6B:91
Certificate issuer: /CN=dbc92025adb368cb9532098986077079b01c1655
Certificate serial: 019CE9756093534D9BC3A95E3B07F35AD40C
Authority key identifier: DB:C9:20:25:AD:B3:68:CB:95:32:09:89:86:07:70:79:B0:1C:16:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28kgJa2zaMuVMgmJhgdwebAcFlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/000d6b-0ffc-46de-a2a6-fac16ed10a4a/1/sUQqwSxZusUBi9vAsx5snTDra5E.roa
Signing time: Fri 13 Mar 2026 23:08:29 +0000
ROA not before: Fri 13 Mar 2026 23:08:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200477
IP address blocks: 77.235.32.0/24 maxlen: 24
77.235.35.0/24 maxlen: 24
77.235.49.0/24 maxlen: 24
77.235.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/000d6b-0ffc-46de-a2a6-fac16ed10a4a/1/28kgJa2zaMuVMgmJhgdwebAcFlU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/000d6b-0ffc-46de-a2a6-fac16ed10a4a/1/28kgJa2zaMuVMgmJhgdwebAcFlU.mft
rsync://rpki.ripe.net/repository/DEFAULT/28kgJa2zaMuVMgmJhgdwebAcFlU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e9:75:60:93:53:4d:9b:c3:a9:5e:3b:07:f3:5a:d4:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbc92025adb368cb9532098986077079b01c1655
Validity
Not Before: Mar 13 23:08:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b1442ac12c59bac5018bdbc0b31e6c9d30eb6b91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:99:f8:00:d3:68:cc:46:a6:dd:4c:67:45:d7:
3d:74:cc:6c:5b:4b:f2:03:a5:71:a7:d1:8f:41:05:
eb:bf:b7:4d:10:4d:59:a7:d2:73:fe:29:72:18:2c:
40:98:ae:fa:8a:b6:26:a2:ea:7d:c4:30:c7:b2:fc:
24:89:02:ec:c9:de:09:a5:d9:50:ed:2b:07:b2:35:
7c:f3:a2:c2:dc:3c:04:a8:b0:b5:55:90:5d:48:ea:
ba:89:d6:62:13:31:e7:c1:22:e8:94:49:b1:ed:78:
12:2b:d8:a1:fd:cd:71:b2:29:e0:0c:71:98:a1:37:
54:4b:eb:2e:43:57:d8:5b:d5:9d:79:51:a4:1b:23:
fe:8c:78:2b:92:46:88:e3:0f:d6:bd:df:52:f0:c6:
8e:dc:b9:27:a0:4c:ba:37:dd:4f:6d:44:58:50:63:
8d:53:c3:2e:e8:7d:e7:a5:d7:4a:0c:d7:18:46:8b:
4b:82:7f:f3:57:7d:76:e1:f4:21:f6:22:3a:16:04:
74:ce:ef:c3:5a:ed:29:d3:da:30:de:1e:03:91:47:
35:b1:c5:23:d2:11:c0:27:0d:51:97:89:d0:9f:51:
3d:7f:58:94:bb:9d:59:da:ed:22:a6:a3:b6:bc:c3:
63:49:07:db:4f:14:7c:7e:bd:82:ee:2d:bc:7a:e9:
7a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:44:2A:C1:2C:59:BA:C5:01:8B:DB:C0:B3:1E:6C:9D:30:EB:6B:91
X509v3 Authority Key Identifier:
keyid:DB:C9:20:25:AD:B3:68:CB:95:32:09:89:86:07:70:79:B0:1C:16:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28kgJa2zaMuVMgmJhgdwebAcFlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/000d6b-0ffc-46de-a2a6-fac16ed10a4a/1/sUQqwSxZusUBi9vAsx5snTDra5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/000d6b-0ffc-46de-a2a6-fac16ed10a4a/1/28kgJa2zaMuVMgmJhgdwebAcFlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.235.32.0/24
77.235.35.0/24
77.235.49.0/24
77.235.52.0/24
Signature Algorithm: sha256WithRSAEncryption
03:ab:de:d2:1a:b7:6e:d8:35:b5:c8:cd:f0:76:91:48:12:b3:
de:d7:d4:11:36:68:b9:68:96:e4:42:82:74:3f:74:ac:52:79:
38:89:de:aa:ff:9b:17:a6:00:e1:41:3e:d3:e2:cf:38:e1:e6:
86:73:09:61:8d:b8:9d:60:75:b2:f8:ae:75:5f:b8:73:1f:a4:
84:05:4a:e1:bd:c8:3f:e5:67:c9:5d:fb:d8:45:48:4e:0a:b2:
f2:b6:07:1b:51:3c:69:a0:c7:2e:35:61:10:49:ee:d5:6d:bc:
8e:96:72:79:86:c1:39:eb:6b:37:a3:b8:06:63:1f:08:a5:87:
d1:65:e1:64:62:63:ae:3e:cd:e4:b1:49:33:64:01:2f:3a:21:
ec:f8:78:7c:6b:20:80:83:cb:12:28:7e:ee:e4:d0:2d:93:24:
8c:f9:65:f7:11:ca:5f:9f:e0:77:16:c3:9d:84:f5:1c:a1:9e:
5a:04:0a:e6:f8:bb:3f:14:12:22:7c:d1:a7:a2:ea:c5:7f:cc:
0d:73:58:74:57:34:07:56:f7:fe:7c:00:8c:58:ee:15:c3:f3:
53:37:bc:fb:f5:69:fd:6c:4d:cb:46:93:0d:aa:e5:e3:f1:83:
4c:d5:3c:03:50:ba:95:42:87:56:f6:1a:38:15:24:90:31:4c:
d8:54:08:83
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZzpdWCTU02bw6leOwfzWtQMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiYzkyMDI1YWRiMzY4Y2I5NTMyMDk4OTg2MDc3MDc5YjAx
YzE2NTUwHhcNMjYwMzEzMjMwODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMTQ0MmFjMTJjNTliYWM1MDE4YmRiYzBiMzFlNmM5ZDMwZWI2YjkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5n4ANNozEam3UxnRdc9dMxsW0vy
A6Vxp9GPQQXrv7dNEE1Zp9Jz/ilyGCxAmK76irYmoup9xDDHsvwkiQLsyd4JpdlQ
7SsHsjV886LC3DwEqLC1VZBdSOq6idZiEzHnwSLolEmx7XgSK9ih/c1xsingDHGY
oTdUS+suQ1fYW9WdeVGkGyP+jHgrkkaI4w/Wvd9S8MaO3LknoEy6N91PbURYUGON
U8Mu6H3npddKDNcYRotLgn/zV3124fQh9iI6FgR0zu/DWu0p09ow3h4DkUc1scUj
0hHAJw1Rl4nQn1E9f1iUu51Z2u0ipqO2vMNjSQfbTxR8fr2C7i28eul6RwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFLFEKsEsWbrFAYvbwLMebJ0w62uRMB8GA1UdIwQY
MBaAFNvJICWts2jLlTIJiYYHcHmwHBZVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjhrZ0phMnphTXVWTWdtSmhnZHdlYkFjRmxVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8wMDBkNmItMGZmYy00NmRlLWEyYTYt
ZmFjMTZlZDEwYTRhLzEvc1VRcXdTeFp1c1VCaTl2QXN4NXNuVERyYTVFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy8wMDBkNmItMGZmYy00NmRlLWEyYTYtZmFjMTZlZDEwYTRh
LzEvMjhrZ0phMnphTXVWTWdtSmhnZHdlYkFjRmxVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQATesgAwQA
TesjAwQATesxAwQATes0MA0GCSqGSIb3DQEBCwUAA4IBAQADq97SGrdu2DW1yM3w
dpFIErPe19QRNmi5aJbkQoJ0P3SsUnk4id6q/5sXpgDhQT7T4s844eaGcwlhjbid
YHWy+K51X7hzH6SEBUrhvcg/5WfJXfvYRUhOCrLytgcbUTxpoMcuNWEQSe7VbbyO
lnJ5hsE562s3o7gGYx8IpYfRZeFkYmOuPs3ksUkzZAEvOiHs+Hh8ayCAg8sSKH7u
5NAtkySM+WX3Ecpfn+B3FsOdhPUcoZ5aBArm+Ls/FBIifNGnourFf8wNc1h0VzQH
Vvf+fACMWO4Vw/NTN7z79Wn9bE3LRpMNquXj8YNM1TwDULqVQodW9ho4FSSQMUzY
VAiD
-----END CERTIFICATE-----
Generated at Sat Mar 28 13:22:28 2026 by rpki-client