Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/027oPVZPJTpqLMqPlKvynkBEhk8.roa
File: 027oPVZPJTpqLMqPlKvynkBEhk8.roa (raw, json)
Hash identifier: m5rXzZdGhYh3Qrh63aCPoRifxVzm7FkAwk8+tuWfMjg=
Subject key identifier: D3:6E:E8:3D:56:4F:25:3A:6A:2C:CA:8F:94:AB:F2:9E:40:44:86:4F
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 01A0C2D18E95E10BF4AAB8A10BDD9EBBC87D
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/027oPVZPJTpqLMqPlKvynkBEhk8.roa
Signing time: Mon 21 Sep 2026 07:15:08 +0000
ROA not before: Mon 21 Sep 2026 07:15:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20473
IP address blocks: 77.93.138.0/23 maxlen: 24
77.107.95.0/24 maxlen: 24
81.168.65.0/24 maxlen: 24
81.168.125.0/24 maxlen: 24
82.152.117.0/24 maxlen: 24
82.153.122.0/24 maxlen: 24
109.176.91.0/24 maxlen: 24
212.38.81.0/24 maxlen: 24
213.130.138.0/24 maxlen: 24
213.210.11.0/24 maxlen: 24
213.210.48.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 02:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:d1:8e:95:e1:0b:f4:aa:b8:a1:0b:dd:9e:bb:c8:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Sep 21 07:15:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d36ee83d564f253a6a2cca8f94abf29e4044864f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:59:80:3e:da:d5:9a:0d:19:69:2a:70:62:b9:
5a:8b:d3:8e:e2:2a:3e:60:28:4b:c8:64:29:4f:67:
ec:b7:d2:54:4d:ff:ca:88:58:22:4f:0d:e7:32:42:
d8:3a:7f:11:41:11:20:55:b0:74:47:54:c0:0e:44:
b1:16:92:f3:8a:ec:d7:51:f3:25:96:bd:c4:13:f5:
03:24:68:28:4d:23:2c:a4:e9:a1:b7:86:94:72:76:
1e:8d:4c:8a:73:77:c9:1d:ed:67:fb:3b:4f:75:b8:
bb:2b:5c:b4:a2:b2:33:a8:56:08:4a:b4:fb:c6:fe:
ac:a1:7a:a1:dc:0c:25:dc:64:4f:e8:34:59:5e:cd:
a8:f2:8c:f4:3c:df:c7:8f:15:8b:f7:c4:24:2b:64:
21:4d:d7:a3:69:37:be:63:fb:6e:56:4d:35:dd:d0:
2b:88:77:09:bd:aa:96:2f:ef:83:45:4b:29:31:0c:
4f:b5:62:dd:94:c3:1d:13:5d:da:88:ae:2a:7b:fa:
c5:11:74:e3:02:9c:7e:b0:3b:bc:1b:13:eb:aa:17:
49:77:6a:01:e9:58:7d:47:17:a8:38:1b:1c:24:6b:
18:5d:1b:53:3b:64:c9:f1:d3:df:b6:33:43:2a:44:
fc:d2:71:da:da:d9:42:fd:54:da:df:c8:67:5d:8f:
19:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:6E:E8:3D:56:4F:25:3A:6A:2C:CA:8F:94:AB:F2:9E:40:44:86:4F
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/027oPVZPJTpqLMqPlKvynkBEhk8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.93.138.0/23
77.107.95.0/24
81.168.65.0/24
81.168.125.0/24
82.152.117.0/24
82.153.122.0/24
109.176.91.0/24
212.38.81.0/24
213.130.138.0/24
213.210.11.0/24
213.210.48.0/23
Signature Algorithm: sha256WithRSAEncryption
3f:29:ad:ea:a0:83:68:a7:fc:52:69:28:f9:b7:e9:99:7f:03:
d9:49:66:18:e2:3f:14:bb:5c:4a:b7:c0:d8:06:f6:f8:6e:81:
63:50:3d:33:c2:fc:b2:6f:d5:0d:5e:9f:96:5e:db:42:d1:4c:
b7:92:20:f5:3c:a7:d8:49:89:29:b8:20:00:6e:6c:21:48:f3:
ea:59:14:07:34:11:9f:ea:45:fc:ad:83:14:fc:3c:71:e7:8a:
0a:c0:70:12:7a:59:05:82:c1:57:aa:ea:e6:66:3d:8a:f7:81:
a8:36:fc:ac:4f:8b:8f:08:a0:6d:8f:5f:71:52:24:48:6e:87:
03:4a:e1:65:30:7a:8b:eb:22:bc:f9:c4:a9:a5:05:22:7b:ba:
22:40:87:af:14:48:b8:c1:6f:9b:5b:c1:6b:1b:de:fc:d6:c0:
7d:b8:96:25:de:3c:db:d1:5c:a5:34:8f:c4:e5:66:69:55:d2:
15:97:f8:39:b0:de:69:c6:b2:bf:ed:20:50:c7:e0:ee:fc:9a:
15:06:99:65:3c:03:b2:30:49:5b:2f:90:41:c6:be:75:37:1a:
78:15:d4:82:ac:f5:11:d7:c3:d9:5b:3c:84:82:bb:8c:f9:46:
ca:04:67:0c:1b:4a:3b:c5:27:fc:b8:17:72:f4:ac:3a:55:b1:
41:2c:01:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 12:34:03 2026 by rpki-client