Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/nDjb-6pfa7dsrU0p5iYCorazV7I.roa
File: nDjb-6pfa7dsrU0p5iYCorazV7I.roa (raw, json)
Hash identifier: aZ1M3P2HuQaXMBpPIZiTQ3UgD4ep8AizolxvpBwz3co=
Subject key identifier: 9C:38:DB:FB:AA:5F:6B:B7:6C:AD:4D:29:E6:26:02:A2:B6:B3:57:B2
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 019DF4BAB28B95C10CD5009730EF23BFE489
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/nDjb-6pfa7dsrU0p5iYCorazV7I.roa
Signing time: Mon 04 May 2026 20:42:49 +0000
ROA not before: Mon 04 May 2026 20:42:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 77.246.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f4:ba:b2:8b:95:c1:0c:d5:00:97:30:ef:23:bf:e4:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: May 4 20:42:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9c38dbfbaa5f6bb76cad4d29e62602a2b6b357b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1f:c7:4a:a1:8c:8c:74:0f:c5:4e:d9:d3:39:
37:3b:dd:c8:f9:dd:60:94:c7:98:1b:da:5d:68:0d:
e0:2d:ad:a9:b5:10:27:07:30:1f:4f:c5:94:1a:f6:
b2:5e:36:df:ff:5c:b6:a0:17:c2:96:4d:0d:e3:a6:
8f:ed:c3:bd:f3:f4:bf:39:f4:8f:68:66:e8:1d:98:
48:88:08:fc:90:af:ae:6d:22:78:ee:ae:dd:72:a6:
5f:a4:e9:2c:93:a0:d7:c8:53:1f:09:9d:93:4c:27:
73:10:13:87:00:a5:74:fb:ab:5c:ef:ac:b7:8e:26:
8b:7f:2b:35:e9:3f:7f:68:29:36:43:89:41:14:b1:
51:49:da:b1:9b:4e:8a:7d:ae:2a:b0:92:2f:c2:89:
6e:29:d6:e1:42:bd:3a:26:15:79:bb:fa:a7:bc:db:
57:c2:73:20:84:ba:c2:49:9b:c2:52:cc:c2:99:50:
62:0b:cf:b3:53:d3:fd:07:fe:29:dc:23:f9:4d:8b:
ff:d5:e7:03:c6:35:3f:cb:a2:66:18:fd:c4:69:c1:
4b:76:a7:00:51:76:88:cd:88:03:c7:51:60:8c:9e:
d7:c4:5d:46:4a:f5:e0:c7:47:60:8d:d5:e9:47:41:
b4:e1:40:6e:a4:57:15:40:d0:f7:0f:b2:f3:55:a3:
00:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:38:DB:FB:AA:5F:6B:B7:6C:AD:4D:29:E6:26:02:A2:B6:B3:57:B2
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/nDjb-6pfa7dsrU0p5iYCorazV7I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.246.221.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:e6:a2:4b:e4:cf:50:5b:b9:6f:2a:67:3a:db:8e:1b:d1:23:
76:53:ae:7b:c8:a9:f0:12:02:6b:c9:9a:00:f8:29:b5:8b:5d:
38:2b:c7:b0:01:79:f8:af:8a:65:25:30:27:c0:73:99:0d:9c:
b9:35:92:27:df:3f:69:d4:0d:36:91:e0:cb:00:a5:8e:07:28:
23:25:7f:9b:7d:b2:4b:ff:d0:5b:b1:99:6b:67:33:34:72:8e:
90:ec:fe:5f:59:c6:13:29:c8:a5:4e:b7:34:c1:53:c5:d1:83:
37:77:3a:20:a7:9f:61:66:c3:5f:06:35:60:a0:e7:b3:8a:c8:
2b:94:89:fd:c2:0b:96:bd:6a:7e:cb:8b:a1:12:5e:18:ee:15:
d2:30:e8:e5:2a:d1:f9:b6:3a:d2:7a:b1:99:f9:bc:46:39:8b:
88:c2:c2:fb:be:92:65:8a:04:90:63:b0:48:23:24:3b:cc:1b:
74:2c:f6:67:c6:d4:8e:e1:c6:37:e8:e0:a4:df:f9:1e:f6:a1:
a0:cd:06:99:7d:4c:f1:b7:91:70:fb:54:85:1d:6c:35:82:6b:
4a:d9:81:f2:cd:fd:96:9d:88:95:5b:ae:41:cf:f2:2c:97:56:
16:3e:5d:8e:5d:29:97:8c:a3:19:a2:df:29:f2:81:b5:b8:82:
3a:ee:90:4e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ30urKLlcEM1QCXMO8jv+SJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxMjRmYmExZTQwMWMwM2U1YmExY2Q3N2FlOWVlMzljZmQ2
MzFiZmIwHhcNMjYwNTA0MjA0MjQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YzM4ZGJmYmFhNWY2YmI3NmNhZDRkMjllNjI2MDJhMmI2YjM1N2IyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxB/HSqGMjHQPxU7Z0zk3O93I+d1g
lMeYG9pdaA3gLa2ptRAnBzAfT8WUGvayXjbf/1y2oBfClk0N46aP7cO98/S/OfSP
aGboHZhIiAj8kK+ubSJ47q7dcqZfpOksk6DXyFMfCZ2TTCdzEBOHAKV0+6tc76y3
jiaLfys16T9/aCk2Q4lBFLFRSdqxm06Kfa4qsJIvwoluKdbhQr06JhV5u/qnvNtX
wnMghLrCSZvCUszCmVBiC8+zU9P9B/4p3CP5TYv/1ecDxjU/y6JmGP3EacFLdqcA
UXaIzYgDx1FgjJ7XxF1GSvXgx0dgjdXpR0G04UBupFcVQND3D7LzVaMALwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJw42/uqX2u3bK1NKeYmAqK2s1eyMB8GA1UdIwQY
MBaAFFEk+6HkAcA+W6HNd66e45z9Yxv7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEt
YWI4ZjFmMzM4N2VlLzEvbkRqYi02cGZhN2RzclUwcDVpWUNvcmF6VjdJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEtYWI4ZjFmMzM4N2Vl
LzEvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATfbdMA0G
CSqGSIb3DQEBCwUAA4IBAQBb5qJL5M9QW7lvKmc6244b0SN2U657yKnwEgJryZoA
+Cm1i104K8ewAXn4r4plJTAnwHOZDZy5NZIn3z9p1A02keDLAKWOBygjJX+bfbJL
/9BbsZlrZzM0co6Q7P5fWcYTKcilTrc0wVPF0YM3dzogp59hZsNfBjVgoOezisgr
lIn9wguWvWp+y4uhEl4Y7hXSMOjlKtH5tjrSerGZ+bxGOYuIwsL7vpJligSQY7BI
IyQ7zBt0LPZnxtSO4cY36OCk3/ke9qGgzQaZfUzxt5Fw+1SFHWw1gmtK2YHyzf2W
nYiVW65Bz/Isl1YWPl2OXSmXjKMZot8p8oG1uII67pBO
-----END CERTIFICATE-----
Generated at Wed May 13 04:09:54 2026 by rpki-client