Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/dDV9cw2CeKzJ-llu__WQtBWBaBY.roa
File: dDV9cw2CeKzJ-llu__WQtBWBaBY.roa (raw, json)
Hash identifier: 0lA5AjVyBh2dMfH3N8bdN7kVkHk/r4peFpEI1RzOKJs=
Subject key identifier: 74:35:7D:73:0D:82:78:AC:C9:FA:59:6E:FF:F5:90:B4:15:81:68:16
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 019DF4BAB30FB16D7F1880A1A855ED7BBD1D
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/dDV9cw2CeKzJ-llu__WQtBWBaBY.roa
Signing time: Mon 04 May 2026 20:42:49 +0000
ROA not before: Mon 04 May 2026 20:42:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200019
IP address blocks: 77.246.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 17:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f4:ba:b3:0f:b1:6d:7f:18:80:a1:a8:55:ed:7b:bd:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: May 4 20:42:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=74357d730d8278acc9fa596efff590b415816816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5d:aa:36:42:04:34:e7:d6:18:9c:e5:67:4e:
26:5d:40:5c:5a:81:35:73:47:80:fd:50:6a:84:67:
54:e8:fa:4f:bf:1a:d1:97:d5:7f:23:2c:4f:e4:92:
b3:63:9d:8c:cd:aa:28:dc:10:53:2d:a8:3d:57:0b:
f4:33:84:d6:88:d2:12:b9:6a:de:0c:8c:94:4b:0d:
0a:57:5c:2f:34:41:da:d1:cd:93:43:9d:dd:5a:59:
c3:02:02:a5:f0:2c:97:1e:f5:d9:c3:c2:9a:5b:2b:
d6:63:53:f4:7e:22:e8:0d:79:2c:51:28:c6:02:c8:
6f:02:26:59:98:c2:78:a1:ca:77:98:b3:05:fa:5c:
d6:6f:f2:92:df:5a:90:05:35:e6:48:08:44:1a:19:
c1:42:c5:d4:82:cd:f1:d1:dd:06:2a:b6:af:62:c2:
25:44:26:97:90:30:45:99:95:b1:52:f1:8f:0e:e8:
8a:2b:ec:f5:9f:de:23:15:27:1a:f1:cf:a6:21:e4:
c0:7a:83:f4:a8:0a:68:d6:ce:9c:f8:bd:9b:ec:48:
7e:1f:48:c6:d9:97:b2:3d:40:4f:b2:fa:bc:d0:f6:
10:e1:aa:f7:e3:0b:1c:ef:8f:a6:96:63:48:14:da:
aa:e4:18:c7:fa:e0:b3:48:67:ac:f2:06:1c:a9:43:
db:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:35:7D:73:0D:82:78:AC:C9:FA:59:6E:FF:F5:90:B4:15:81:68:16
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/dDV9cw2CeKzJ-llu__WQtBWBaBY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.246.222.0/24
Signature Algorithm: sha256WithRSAEncryption
49:53:62:8f:8e:bb:60:ee:b4:25:ce:f0:d1:25:31:f9:2f:5a:
21:65:0a:25:5e:59:80:84:5f:4e:c0:db:2d:4e:bc:7b:f9:fe:
75:46:da:3c:57:75:f7:dd:fc:1b:73:a4:55:e7:67:a8:a5:3d:
cd:5f:a6:1a:74:50:9a:13:a7:82:96:4d:79:e1:98:16:b9:a4:
89:d0:d0:b3:24:c3:e3:38:e8:89:f1:3e:03:80:25:ba:5c:31:
e4:e4:a3:3b:67:8b:2a:34:7f:8f:96:14:7f:73:e7:a2:76:51:
c8:4a:69:df:20:41:9a:7a:96:19:fb:5b:80:10:ca:96:83:e0:
56:5d:b9:f8:9b:b7:d1:9f:7d:c5:75:67:d6:fb:37:84:81:ca:
75:c7:9d:09:2c:a0:ac:af:a1:d2:40:51:4f:c3:a9:ad:b6:84:
bd:6d:3a:c6:5a:22:13:f8:dd:06:77:f4:d9:a1:4d:05:00:92:
5f:c8:ec:0b:85:72:3b:7b:fc:b8:c7:b6:14:a8:80:50:d3:9b:
80:08:b0:07:ac:17:da:51:73:ef:fd:1a:99:3a:6b:64:dd:bb:
54:83:eb:15:94:e3:a3:86:5a:29:b8:62:22:cc:58:1a:a3:e6:
1e:02:02:5d:76:9b:ec:c5:c8:71:75:7d:b7:d4:40:54:dd:56:
e4:7f:81:83
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ30urMPsW1/GIChqFXte70dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxMjRmYmExZTQwMWMwM2U1YmExY2Q3N2FlOWVlMzljZmQ2
MzFiZmIwHhcNMjYwNTA0MjA0MjQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NDM1N2Q3MzBkODI3OGFjYzlmYTU5NmVmZmY1OTBiNDE1ODE2ODE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuF2qNkIENOfWGJzlZ04mXUBcWoE1
c0eA/VBqhGdU6PpPvxrRl9V/IyxP5JKzY52Mzaoo3BBTLag9Vwv0M4TWiNISuWre
DIyUSw0KV1wvNEHa0c2TQ53dWlnDAgKl8CyXHvXZw8KaWyvWY1P0fiLoDXksUSjG
AshvAiZZmMJ4ocp3mLMF+lzWb/KS31qQBTXmSAhEGhnBQsXUgs3x0d0GKravYsIl
RCaXkDBFmZWxUvGPDuiKK+z1n94jFSca8c+mIeTAeoP0qApo1s6c+L2b7Eh+H0jG
2ZeyPUBPsvq80PYQ4ar34wsc74+mlmNIFNqq5BjH+uCzSGes8gYcqUPbsQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHQ1fXMNgnisyfpZbv/1kLQVgWgWMB8GA1UdIwQY
MBaAFFEk+6HkAcA+W6HNd66e45z9Yxv7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEt
YWI4ZjFmMzM4N2VlLzEvZERWOWN3MkNlS3pKLWxsdV9fV1F0QldCYUJZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEtYWI4ZjFmMzM4N2Vl
LzEvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATfbeMA0G
CSqGSIb3DQEBCwUAA4IBAQBJU2KPjrtg7rQlzvDRJTH5L1ohZQolXlmAhF9OwNst
Trx7+f51Rto8V3X33fwbc6RV52eopT3NX6YadFCaE6eClk154ZgWuaSJ0NCzJMPj
OOiJ8T4DgCW6XDHk5KM7Z4sqNH+PlhR/c+eidlHISmnfIEGaepYZ+1uAEMqWg+BW
Xbn4m7fRn33FdWfW+zeEgcp1x50JLKCsr6HSQFFPw6mttoS9bTrGWiIT+N0Gd/TZ
oU0FAJJfyOwLhXI7e/y4x7YUqIBQ05uACLAHrBfaUXPv/RqZOmtk3btUg+sVlOOj
hlopuGIizFgao+YeAgJddpvsxchxdX231EBU3Vbkf4GD
-----END CERTIFICATE-----
Generated at Wed May 13 02:47:46 2026 by rpki-client