Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/bCdYO2D1pk-Sh6yPVxjaFkaTLV4.roa
File: bCdYO2D1pk-Sh6yPVxjaFkaTLV4.roa (raw, json)
Hash identifier: cUAnZwmDfvuC8Ml+3dgezXg7SEdjrMZVgimvYz6Sy2A=
Subject key identifier: 6C:27:58:3B:60:F5:A6:4F:92:87:AC:8F:57:18:DA:16:46:93:2D:5E
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 01A0D93A097DD1133BF402F8721972574D8E
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/bCdYO2D1pk-Sh6yPVxjaFkaTLV4.roa
Signing time: Fri 25 Sep 2026 15:40:54 +0000
ROA not before: Fri 25 Sep 2026 15:40:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 77.246.220.0/24 maxlen: 24
77.246.221.0/24 maxlen: 24
77.246.222.0/24 maxlen: 24
88.80.142.0/24 maxlen: 24
88.80.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 00:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:3a:09:7d:d1:13:3b:f4:02:f8:72:19:72:57:4d:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Sep 25 15:40:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6c27583b60f5a64f9287ac8f5718da1646932d5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:07:c1:10:a7:d3:6a:02:0e:0d:33:6b:20:8e:
3f:85:37:31:8a:fe:45:e7:c2:fd:08:3e:74:88:9c:
7f:7b:a8:38:bd:9c:37:8e:f4:0a:30:48:0e:92:87:
22:a7:be:88:2e:a0:0c:e0:42:87:28:8b:04:c0:bb:
d1:cd:e0:72:f7:94:43:49:52:30:11:78:9f:c8:01:
4f:2b:ee:6f:ff:b0:75:da:77:11:db:4e:bc:b2:8c:
c1:36:c7:a6:5a:60:13:12:b7:6b:43:c4:f0:94:ff:
79:b3:45:a8:8c:27:3a:be:e5:9e:0b:6f:9b:cb:91:
97:e5:ed:90:52:73:e3:9a:26:7a:39:e6:4c:84:01:
d6:f0:5b:73:3b:ba:c3:2e:b9:f6:35:da:3e:88:f2:
d7:df:6b:ef:18:89:3b:90:49:33:43:41:dd:a8:a2:
7b:44:ad:cb:b9:16:00:6b:94:8c:b2:6e:01:0a:01:
22:f6:d0:e1:8d:81:a6:69:60:18:43:0a:8a:6a:84:
4a:29:88:7e:9b:51:79:40:3c:6d:3b:f6:13:52:20:
2b:0c:f8:66:60:b7:95:f1:1e:3e:38:81:6c:87:e2:
08:88:50:ae:ec:71:27:62:ef:ba:e5:eb:5e:4e:fe:
8d:15:d8:c3:1f:1c:32:15:31:93:b4:b1:da:9b:82:
bb:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:27:58:3B:60:F5:A6:4F:92:87:AC:8F:57:18:DA:16:46:93:2D:5E
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/bCdYO2D1pk-Sh6yPVxjaFkaTLV4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.246.220.0-77.246.222.255
88.80.142.0/23
Signature Algorithm: sha256WithRSAEncryption
4e:19:fb:0a:97:bf:3a:2b:8f:95:09:17:0b:9b:9f:95:e3:a0:
79:09:7e:da:b8:dd:9d:07:c5:03:74:9a:19:0f:7b:4c:2e:ba:
5c:ab:54:67:43:55:8d:94:96:86:1f:e1:4e:e4:85:bd:35:16:
e5:12:cf:5b:83:19:cb:0d:c3:d0:44:a3:76:2e:a3:56:9a:73:
5e:b0:1f:ea:f5:d3:6d:79:53:8c:e6:68:e5:77:e0:4c:9d:14:
d6:f5:01:b0:22:0f:25:1e:ac:2f:11:89:38:e5:20:3a:64:b6:
47:2f:36:fb:f8:c4:de:ee:fe:bc:13:be:79:b4:7f:9f:7a:36:
fa:5c:58:0d:e6:4f:1a:fb:cb:c5:c0:a2:bd:66:c4:ae:9f:1e:
77:e3:48:0e:f5:4a:d2:ac:96:75:80:9b:fa:2b:ae:97:d4:5d:
2f:bc:1f:69:d7:8f:34:99:11:7c:c2:ed:b5:f8:1d:10:09:cd:
00:8b:5e:f1:10:15:84:bf:2a:62:f4:4e:00:fd:a6:18:49:5e:
3b:a1:42:e5:13:d5:14:b5:26:54:2a:90:13:e6:4a:9d:0f:f3:
b0:51:5a:54:54:14:8c:bd:52:6d:86:35:23:dd:c1:ae:65:e6:
3b:17:c9:80:a8:1b:7c:14:1a:47:f5:2f:32:6b:5f:8e:06:60:
e0:69:50:98
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAaDZOgl90RM79AL4chlyV02OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxMjRmYmExZTQwMWMwM2U1YmExY2Q3N2FlOWVlMzljZmQ2
MzFiZmIwHhcNMjYwOTI1MTU0MDU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YzI3NTgzYjYwZjVhNjRmOTI4N2FjOGY1NzE4ZGExNjQ2OTMyZDVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQfBEKfTagIODTNrII4/hTcxiv5F
58L9CD50iJx/e6g4vZw3jvQKMEgOkocip76ILqAM4EKHKIsEwLvRzeBy95RDSVIw
EXifyAFPK+5v/7B12ncR2068sozBNsemWmATErdrQ8TwlP95s0WojCc6vuWeC2+b
y5GX5e2QUnPjmiZ6OeZMhAHW8FtzO7rDLrn2Ndo+iPLX32vvGIk7kEkzQ0HdqKJ7
RK3LuRYAa5SMsm4BCgEi9tDhjYGmaWAYQwqKaoRKKYh+m1F5QDxtO/YTUiArDPhm
YLeV8R4+OIFsh+IIiFCu7HEnYu+65eteTv6NFdjDHxwyFTGTtLHam4K7AQIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFGwnWDtg9aZPkoesj1cY2hZGky1eMB8GA1UdIwQY
MBaAFFEk+6HkAcA+W6HNd66e45z9Yxv7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEt
YWI4ZjFmMzM4N2VlLzEvYkNkWU8yRDFway1TaDZ5UFZ4amFGa2FUTFY0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEtYWI4ZjFmMzM4N2Vl
LzEvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAJN9twD
BABN9t4DBAFYUI4wDQYJKoZIhvcNAQELBQADggEBAE4Z+wqXvzorj5UJFwubn5Xj
oHkJftq43Z0HxQN0mhkPe0wuulyrVGdDVY2UloYf4U7khb01FuUSz1uDGcsNw9BE
o3Yuo1aac16wH+r10215U4zmaOV34EydFNb1AbAiDyUerC8RiTjlIDpktkcvNvv4
xN7u/rwTvnm0f596NvpcWA3mTxr7y8XAor1mxK6fHnfjSA71StKslnWAm/orrpfU
XS+8H2nXjzSZEXzC7bX4HRAJzQCLXvEQFYS/KmL0TgD9phhJXjuhQuUT1RS1JlQq
kBPmSp0P87BRWlRUFIy9Um2GNSPdwa5l5jsXyYCoG3wUGkf1LzJrX44GYOBpUJg=
-----END CERTIFICATE-----
Generated at Sat Sep 26 09:34:40 2026 by rpki-client