Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/22d011-ed42-4d14-a670-d5d51d37949d/1/77u0KhlM4RkvcT6vRkx5xSOvxVg.roa
File: 77u0KhlM4RkvcT6vRkx5xSOvxVg.roa (raw, json)
Hash identifier: h7IKgCoEVYdPw96PYCyo9ugZZ8dM1K3h4DAplQZ9CcU=
Subject key identifier: EF:BB:B4:2A:19:4C:E1:19:2F:71:3E:AF:46:4C:79:C5:23:AF:C5:58
Certificate issuer: /CN=522399c2789b1a5504f81671cff220c04eaf59f1
Certificate serial: 019CD2696EF7C97F80387AA4972E78FB7CDE
Authority key identifier: 52:23:99:C2:78:9B:1A:55:04:F8:16:71:CF:F2:20:C0:4E:AF:59:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UiOZwnibGlUE-BZxz_IgwE6vWfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/22d011-ed42-4d14-a670-d5d51d37949d/1/77u0KhlM4RkvcT6vRkx5xSOvxVg.roa
Signing time: Mon 09 Mar 2026 11:44:10 +0000
ROA not before: Mon 09 Mar 2026 11:44:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42781
IP address blocks: 80.184.3.0/24 maxlen: 24
80.184.9.0/24 maxlen: 24
80.184.10.0/24 maxlen: 24
80.184.11.0/24 maxlen: 24
80.184.12.0/23 maxlen: 23
80.184.17.0/24 maxlen: 24
80.184.19.0/24 maxlen: 24
80.184.21.0/24 maxlen: 24
80.184.24.0/22 maxlen: 22
80.184.29.0/24 maxlen: 24
80.184.55.0/24 maxlen: 24
80.184.56.0/24 maxlen: 24
80.184.77.0/24 maxlen: 24
80.184.85.0/24 maxlen: 24
80.184.95.0/24 maxlen: 24
80.184.107.0/24 maxlen: 24
80.184.109.0/24 maxlen: 24
80.184.110.0/24 maxlen: 24
80.184.117.0/24 maxlen: 24
80.184.120.0/22 maxlen: 22
80.184.124.0/24 maxlen: 24
80.184.125.0/24 maxlen: 24
80.184.127.0/24 maxlen: 24
80.184.135.0/24 maxlen: 24
80.184.140.0/23 maxlen: 23
80.184.144.0/22 maxlen: 22
80.184.148.0/22 maxlen: 22
80.184.165.0/24 maxlen: 24
80.184.190.0/24 maxlen: 24
80.184.200.0/24 maxlen: 24
80.184.204.0/22 maxlen: 22
80.184.216.0/22 maxlen: 22
80.184.221.0/24 maxlen: 24
80.184.224.0/22 maxlen: 22
80.184.229.0/24 maxlen: 24
80.184.245.0/24 maxlen: 24
158.94.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/22d011-ed42-4d14-a670-d5d51d37949d/1/UiOZwnibGlUE-BZxz_IgwE6vWfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/22d011-ed42-4d14-a670-d5d51d37949d/1/UiOZwnibGlUE-BZxz_IgwE6vWfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/UiOZwnibGlUE-BZxz_IgwE6vWfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 17:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d2:69:6e:f7:c9:7f:80:38:7a:a4:97:2e:78:fb:7c:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=522399c2789b1a5504f81671cff220c04eaf59f1
Validity
Not Before: Mar 9 11:44:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=efbbb42a194ce1192f713eaf464c79c523afc558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e4:a8:1c:66:5e:a7:47:cc:13:3a:64:4a:f6:
89:f5:a3:e8:b6:32:8b:4b:d1:4a:b1:18:3a:d0:22:
d3:23:5c:9c:6c:9a:88:ea:f2:8d:18:dd:59:dc:e3:
15:02:89:c6:0c:8a:df:39:3f:f1:31:7f:fe:00:f8:
00:34:f4:cf:a0:11:dd:c6:d5:5e:13:5d:fe:3f:3f:
d2:a4:58:6e:5c:73:04:48:a2:c5:19:05:c6:1b:46:
24:fc:fe:ef:ee:ab:41:7a:04:33:b5:86:b1:23:c8:
05:4a:7b:c7:3b:68:43:21:12:62:5b:f6:94:e0:ff:
7d:88:85:91:d3:80:6e:9c:0f:e4:df:64:42:f9:df:
72:3f:02:8c:7d:a3:7b:01:e1:d4:0a:79:80:e4:10:
89:cf:58:a7:f4:38:82:4f:a7:7a:b1:57:ff:f8:cd:
7c:7b:73:94:bc:41:e8:cf:d1:71:1c:44:b3:a0:58:
d4:5e:93:11:c1:c1:7b:47:4b:e1:38:03:9c:6c:97:
12:22:7e:c6:d1:f6:51:8c:9c:d9:2e:ce:de:42:3e:
ce:d3:99:a6:31:e5:cb:11:7f:4b:0c:04:08:78:16:
2d:3e:13:8d:0a:11:76:e3:43:c3:49:ac:64:6e:6b:
07:af:91:b1:b5:cc:10:ec:24:94:3d:e7:a8:bc:58:
16:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:BB:B4:2A:19:4C:E1:19:2F:71:3E:AF:46:4C:79:C5:23:AF:C5:58
X509v3 Authority Key Identifier:
keyid:52:23:99:C2:78:9B:1A:55:04:F8:16:71:CF:F2:20:C0:4E:AF:59:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UiOZwnibGlUE-BZxz_IgwE6vWfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/22d011-ed42-4d14-a670-d5d51d37949d/1/77u0KhlM4RkvcT6vRkx5xSOvxVg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/22d011-ed42-4d14-a670-d5d51d37949d/1/UiOZwnibGlUE-BZxz_IgwE6vWfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.184.3.0/24
80.184.9.0-80.184.13.255
80.184.17.0/24
80.184.19.0/24
80.184.21.0/24
80.184.24.0/22
80.184.29.0/24
80.184.55.0-80.184.56.255
80.184.77.0/24
80.184.85.0/24
80.184.95.0/24
80.184.107.0/24
80.184.109.0-80.184.110.255
80.184.117.0/24
80.184.120.0-80.184.125.255
80.184.127.0/24
80.184.135.0/24
80.184.140.0/23
80.184.144.0/21
80.184.165.0/24
80.184.190.0/24
80.184.200.0/24
80.184.204.0/22
80.184.216.0/22
80.184.221.0/24
80.184.224.0/22
80.184.229.0/24
80.184.245.0/24
158.94.180.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:22:98:da:68:10:4d:10:f7:d9:a2:0b:90:ad:7e:a0:e6:33:
c3:72:6c:e5:c6:a0:61:fc:46:6c:29:5c:f9:a3:73:e8:d7:af:
c8:c1:e5:18:c0:f4:8e:40:ac:a0:29:eb:20:96:ce:cc:fd:d6:
05:9a:e3:2f:7d:28:dd:85:ff:24:0f:df:21:fb:fc:83:a5:ba:
bd:18:2a:a3:d2:03:7b:ff:1f:a6:52:f5:a4:80:42:ed:1f:ee:
70:94:74:06:71:35:a0:7b:af:42:e9:d3:d7:fc:df:a5:bf:f7:
bf:18:4e:35:8a:99:72:3a:1b:0f:3b:26:c7:ce:04:98:46:1a:
67:50:25:7d:49:14:3d:17:e7:f9:bc:41:97:13:cc:2b:d8:9d:
df:8a:bc:11:a8:dc:54:03:17:a0:6e:39:fc:8f:1f:ca:ad:79:
25:90:2d:fe:82:41:8c:26:cb:49:31:74:27:c9:81:d5:ab:3c:
4b:e9:67:99:7e:2e:55:62:38:d9:0b:e9:5d:e7:17:b5:a0:55:
d6:58:18:b7:ea:23:5b:64:3e:c6:a6:8f:94:c1:1d:0e:ba:13:
15:92:f1:d8:17:c6:bc:c4:cc:a2:6a:09:97:24:30:a9:0f:73:
41:f6:13:37:92:4a:a3:28:f5:ec:4c:7b:6f:6b:7e:47:f2:6d:
82:da:e6:e0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Mar 27 03:20:29 2026 by rpki-client