Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/voeoENGCfUa-n3J3ggEEo8bNZso.roa
File: voeoENGCfUa-n3J3ggEEo8bNZso.roa (raw, json)
Hash identifier: x32Qf0nLf7ePA2uHiZHEvqyEWxsKS30rgnv0jLY/q5I=
Subject key identifier: BE:87:A8:10:D1:82:7D:46:BE:9F:72:77:82:01:04:A3:C6:CD:66:CA
Certificate issuer: /CN=69fa2623b222d08d9356975044b9407b5fea48ba
Certificate serial: 01A17CA4033132B490E9A2FEDF08275D8B23
Authority key identifier: 69:FA:26:23:B2:22:D0:8D:93:56:97:50:44:B9:40:7B:5F:EA:48:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/voeoENGCfUa-n3J3ggEEo8bNZso.roa
Signing time: Tue 27 Oct 2026 09:14:45 +0000
ROA not before: Tue 27 Oct 2026 09:14:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57494
IP address blocks: 177.177.212.0/24 maxlen: 32
177.177.213.0/24 maxlen: 32
177.177.219.0/24 maxlen: 32
177.177.220.0/24 maxlen: 32
177.203.48.0/24 maxlen: 32
177.203.49.0/24 maxlen: 32
177.203.58.0/24 maxlen: 32
177.203.59.0/24 maxlen: 32
179.66.184.0/24 maxlen: 32
179.66.185.0/24 maxlen: 32
179.66.186.0/24 maxlen: 32
179.66.187.0/24 maxlen: 32
179.236.41.0/24 maxlen: 32
179.236.42.0/24 maxlen: 32
179.252.219.0/24 maxlen: 32
179.252.220.0/24 maxlen: 32
179.252.221.0/24 maxlen: 32
201.51.28.0/24 maxlen: 32
201.51.29.0/24 maxlen: 32
201.51.30.0/24 maxlen: 32
201.51.31.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:a4:03:31:32:b4:90:e9:a2:fe:df:08:27:5d:8b:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69fa2623b222d08d9356975044b9407b5fea48ba
Validity
Not Before: Oct 27 09:14:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=be87a810d1827d46be9f7277820104a3c6cd66ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:66:2d:cd:26:56:77:d4:29:5d:53:75:55:76:
7b:58:7b:22:77:fb:85:61:ca:e1:ed:2b:f7:81:36:
10:39:ca:18:b9:7f:36:a4:a1:f7:56:e2:4b:88:6c:
4c:ff:bf:15:20:de:f1:d2:50:83:89:7d:c0:48:cf:
e3:ce:05:33:dd:cd:4f:1d:86:cc:bb:e2:8a:e1:a7:
77:61:65:97:77:d8:3e:21:9b:fd:5d:1c:36:1f:14:
32:67:c7:81:ee:cf:52:ac:83:76:24:9d:19:26:57:
2d:98:8b:15:9e:80:3e:ad:16:1a:7a:87:fc:01:22:
88:ce:0d:b0:06:72:df:51:f3:2a:90:5b:4a:b2:b4:
97:48:c7:8b:57:90:5c:19:5c:83:3a:7f:3d:95:24:
f5:de:48:f6:b6:d2:a5:d7:2b:e2:d7:8d:07:16:f6:
86:1a:5e:5a:38:fc:e1:4a:05:9a:f0:2b:25:c8:60:
85:9d:e6:b7:69:d1:c7:1f:76:60:6c:08:29:17:e4:
53:07:0f:a4:51:a1:fe:22:29:59:e9:9d:9c:f1:0e:
52:c7:b9:27:54:5a:7b:5d:9a:48:25:3f:07:2e:b7:
75:1e:c0:85:57:ef:91:2b:be:53:78:7a:e8:ad:09:
c2:d1:f8:67:0f:67:90:79:b4:fa:17:ff:c3:99:da:
73:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:87:A8:10:D1:82:7D:46:BE:9F:72:77:82:01:04:A3:C6:CD:66:CA
X509v3 Authority Key Identifier:
keyid:69:FA:26:23:B2:22:D0:8D:93:56:97:50:44:B9:40:7B:5F:EA:48:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/voeoENGCfUa-n3J3ggEEo8bNZso.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.177.212.0/23
177.177.219.0-177.177.220.255
177.203.48.0/23
177.203.58.0/23
179.66.184.0/22
179.236.41.0-179.236.42.255
179.252.219.0-179.252.221.255
201.51.28.0/22
Signature Algorithm: sha256WithRSAEncryption
37:67:ea:df:82:58:e7:c1:36:5d:3d:0c:1e:b9:9f:e8:d5:64:
68:ff:a3:d8:c3:06:92:78:1c:5e:ea:8d:09:df:d9:d6:ac:9a:
e0:04:3b:bb:02:8d:7c:fd:5e:ee:53:75:5d:7b:72:4f:b7:f8:
41:00:39:2e:c9:3e:3f:b6:ad:8a:33:28:97:09:c1:fd:a6:2b:
72:e7:0e:a1:aa:ca:8a:84:79:7f:5b:a3:0e:3a:86:9f:0d:c8:
c3:66:6b:c3:51:11:43:b7:a7:31:d6:f2:49:d3:e4:a7:fb:f3:
dd:6f:6b:98:4a:ce:d6:d4:d0:ae:b0:7c:68:9c:41:1b:e1:5e:
93:65:61:d6:45:7b:74:74:3e:43:40:d0:e9:75:53:e4:36:4d:
27:24:a4:59:f9:a2:e5:6e:57:6f:03:75:eb:4c:a6:02:08:c1:
0b:89:30:4a:03:49:a2:e2:95:a9:90:86:40:78:e9:cd:cb:3a:
1c:96:94:90:39:f4:4c:24:1c:ed:c3:50:e5:9a:9e:de:c0:c0:
f8:bc:c8:22:9c:64:e4:0a:7d:ce:56:db:5c:e6:72:1c:b3:89:
18:36:ba:68:c5:a2:c7:9c:a2:3e:69:0a:66:e8:71:43:06:61:
c4:ba:4d:8a:52:5f:bc:9e:ab:03:4c:e2:73:b8:70:3a:1d:5b:
8b:aa:e1:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:13:56 2026 by rpki-client