Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/AlUMjDs1AMrse1G7Mm4Ls5MOqbg.roa
File: AlUMjDs1AMrse1G7Mm4Ls5MOqbg.roa (raw, json)
Hash identifier: 1qWTrC8IRHVNBmVAFfK+oN6U6pjXzgDE6zNivII8rew=
Subject key identifier: 02:55:0C:8C:3B:35:00:CA:EC:7B:51:BB:32:6E:0B:B3:93:0E:A9:B8
Certificate issuer: /CN=27dc31a9636e1c1e9a5f5190936276a679e1646a
Certificate serial: 019F236865D4600854EB71C9D6B6FA3D9053
Authority key identifier: 27:DC:31:A9:63:6E:1C:1E:9A:5F:51:90:93:62:76:A6:79:E1:64:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9wxqWNuHB6aX1GQk2J2pnnhZGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/AlUMjDs1AMrse1G7Mm4Ls5MOqbg.roa
Signing time: Thu 02 Jul 2026 15:17:52 +0000
ROA not before: Thu 02 Jul 2026 15:17:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34482
IP address blocks: 77.234.160.0/19 maxlen: 19
80.72.144.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/J9wxqWNuHB6aX1GQk2J2pnnhZGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/J9wxqWNuHB6aX1GQk2J2pnnhZGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/J9wxqWNuHB6aX1GQk2J2pnnhZGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:65:d4:60:08:54:eb:71:c9:d6:b6:fa:3d:90:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27dc31a9636e1c1e9a5f5190936276a679e1646a
Validity
Not Before: Jul 2 15:17:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=02550c8c3b3500caec7b51bb326e0bb3930ea9b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d9:aa:63:e9:15:66:fb:78:35:0b:9f:06:cb:
08:7e:38:58:26:f9:0a:12:ef:5b:ee:c1:57:6e:a5:
e5:e9:fa:54:24:38:64:8a:a3:36:01:de:4d:f5:dc:
07:fb:14:ea:4c:2b:da:ef:09:3a:23:3f:b0:9f:f9:
52:6b:76:70:89:2e:1e:90:22:e6:f8:86:4c:a2:80:
6a:a5:9d:57:a8:ea:c2:b7:44:37:3a:16:3f:12:44:
66:30:89:30:c9:be:74:a2:78:d0:50:97:be:d4:3f:
43:15:15:a7:de:70:2e:16:14:3a:5b:40:87:d0:29:
64:2a:de:f8:15:1e:cf:88:5b:8d:45:ea:1d:8e:46:
b3:7f:8d:1a:01:d2:58:01:3b:6a:4d:a2:c0:df:e2:
f1:6d:be:36:06:92:27:18:ec:21:6d:81:5c:ff:cd:
75:3a:b0:f6:83:ae:d5:b7:80:3d:a4:8e:4d:c4:9b:
97:0e:e9:3b:10:73:b0:89:8e:3f:6d:9f:fc:25:c1:
e4:3d:33:d5:9a:de:4b:9d:3d:2f:49:7d:bb:70:5d:
dd:53:1e:9f:2a:f5:56:07:f6:e8:f6:ae:76:24:5d:
81:d5:3d:0e:1f:fc:7f:94:35:c6:1b:49:7e:63:92:
ad:51:31:40:71:a0:e5:48:db:67:26:9d:40:3d:6f:
8d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:55:0C:8C:3B:35:00:CA:EC:7B:51:BB:32:6E:0B:B3:93:0E:A9:B8
X509v3 Authority Key Identifier:
keyid:27:DC:31:A9:63:6E:1C:1E:9A:5F:51:90:93:62:76:A6:79:E1:64:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9wxqWNuHB6aX1GQk2J2pnnhZGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/AlUMjDs1AMrse1G7Mm4Ls5MOqbg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/J9wxqWNuHB6aX1GQk2J2pnnhZGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.234.160.0/19
80.72.144.0/20
Signature Algorithm: sha256WithRSAEncryption
7a:f4:82:47:1e:2d:bf:49:11:df:b1:a3:f1:b0:06:73:b9:3b:
44:55:48:1d:aa:c4:0f:a2:ab:d8:26:a5:14:87:85:5c:0f:fb:
c1:70:fc:c9:60:23:f8:63:72:93:2c:8a:fd:3b:a5:b5:bb:3e:
c6:c5:c6:5a:9b:79:60:d4:8d:f8:4a:3e:06:f3:fe:0a:ec:2b:
c5:fb:f3:4c:03:f0:9f:cd:ce:b4:99:9c:ba:b6:cb:0b:e1:2b:
8b:3c:0a:02:a0:d8:3f:c7:54:4c:b3:7a:72:df:57:50:35:ee:
5f:99:02:33:a4:53:f6:e5:4f:5a:0a:92:75:cc:35:e1:e8:48:
79:71:5d:9d:d7:ed:04:13:e0:dd:a0:57:a4:1e:de:45:e5:f9:
4a:c4:f6:76:cc:c8:b3:68:d8:d2:31:39:cb:3b:99:ea:21:70:
49:9b:bd:1f:06:80:64:c4:79:3a:c7:d7:53:a1:79:ed:ab:87:
2b:84:d5:f4:90:d6:45:d3:29:c7:7c:5d:a7:29:cc:b5:b4:b1:
62:a3:da:3f:92:43:0e:32:5d:85:00:67:07:01:5e:6a:1f:9c:
dd:5d:01:d9:ca:46:65:9f:ce:ec:04:db:16:43:0b:aa:3f:c4:
f4:aa:41:96:53:73:c4:ca:ce:df:02:c3:13:03:49:21:5f:83:
dd:5c:47:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:38:13 2026 by rpki-client