Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/sJIXiWgnO_YLcbm9d5KkX_aEu-I.roa
File: sJIXiWgnO_YLcbm9d5KkX_aEu-I.roa (raw, json)
Hash identifier: gt1mMf+MLZIqWTtv7KLzXlMwi6R2PvDNAN4i2GwfTn0=
Subject key identifier: B0:92:17:89:68:27:3B:F6:0B:71:B9:BD:77:92:A4:5F:F6:84:BB:E2
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 019CE832326FCCD74E1E8F2A6D6884CAE62A
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/sJIXiWgnO_YLcbm9d5KkX_aEu-I.roa
Signing time: Fri 13 Mar 2026 17:15:29 +0000
ROA not before: Fri 13 Mar 2026 17:15:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 77.246.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e8:32:32:6f:cc:d7:4e:1e:8f:2a:6d:68:84:ca:e6:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Mar 13 17:15:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b092178968273bf60b71b9bd7792a45ff684bbe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a7:60:2f:20:51:73:e8:49:6c:73:5d:cf:72:
99:09:81:2c:c9:35:a4:76:55:03:d5:d3:1c:31:de:
4c:80:9c:5c:3d:ee:6d:1c:29:77:b5:40:c9:9a:bc:
e4:01:4c:f1:55:e5:35:84:89:a1:ea:4e:0e:bb:a7:
07:0a:63:c0:b9:27:15:fd:a0:23:47:9d:5e:03:8e:
99:67:b8:1a:bb:9e:c9:2c:3a:1e:8a:d2:56:e8:e5:
94:8f:10:25:f8:32:39:98:d4:86:b0:50:82:63:66:
34:34:f0:69:7f:0f:d0:07:e8:0b:71:79:93:84:18:
0d:48:3d:4c:e4:15:cc:cc:cd:11:f0:01:b3:7c:9e:
6f:33:c9:66:20:7b:24:57:d0:c5:34:36:cb:65:cd:
4f:77:03:ed:86:69:a5:8a:a6:6f:9f:0b:eb:7d:65:
95:15:f4:28:b0:ba:70:96:95:9c:f0:e9:7a:92:d5:
2c:15:f8:89:9d:2b:44:57:e1:1e:e3:f9:d7:04:fa:
1a:21:5a:6e:aa:f1:04:29:78:f5:12:6b:cd:c2:eb:
2f:e4:d7:7d:cf:ce:93:30:11:d4:21:bb:d1:80:ca:
ee:09:97:dc:10:3f:9c:99:5a:c5:8a:2a:e8:35:66:
bd:b0:ea:15:72:43:fc:a6:95:59:73:81:9b:da:03:
9c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:92:17:89:68:27:3B:F6:0B:71:B9:BD:77:92:A4:5F:F6:84:BB:E2
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/sJIXiWgnO_YLcbm9d5KkX_aEu-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.246.221.0/24
Signature Algorithm: sha256WithRSAEncryption
47:11:c4:e9:cc:56:4c:57:59:fb:0b:33:3d:be:5b:86:cb:e1:
b3:8f:91:50:e4:8c:85:24:b3:c8:eb:b4:29:7e:a4:dc:b6:2a:
c5:0d:34:74:0d:98:49:3c:67:92:9e:37:46:6d:e0:23:41:e2:
e0:db:86:fe:b8:cf:1e:2f:57:c7:8f:17:55:e0:5a:d3:3a:c7:
eb:f0:ea:6d:17:18:d7:85:3f:2d:cf:84:48:0a:6c:d9:9f:99:
7c:17:e5:a8:76:fd:02:69:3b:23:f1:a3:24:1f:3c:08:83:00:
8a:78:30:66:65:b9:cb:f4:58:79:9b:e6:51:79:03:4d:08:5f:
52:31:43:50:31:d2:e2:5c:3b:a3:5b:40:8c:27:ca:fc:ba:b7:
06:82:4d:04:f4:3b:70:f5:c7:0f:fc:e2:10:84:f2:03:fb:04:
3a:66:45:dd:c9:55:5a:91:67:6e:99:35:6f:24:2d:6e:31:87:
fe:48:50:23:92:57:22:7f:be:44:f9:e1:4b:62:ec:60:6a:dd:
1b:1c:41:c5:95:40:39:fc:d8:ef:e3:4b:73:08:ac:3e:de:e7:
4b:ba:d2:ca:34:f4:62:ab:06:ff:50:b0:4c:d5:4a:73:ec:6a:
59:2c:08:89:f8:d5:53:43:88:76:02:73:8e:7f:43:68:7f:b1:
0e:62:e0:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:43:37 2026 by rpki-client