Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/3550b4-51b5-448b-ab62-2a813dbf4582/1/yqqyq27K4-xGzG8Of_lVR5tN1fY.roa
File: yqqyq27K4-xGzG8Of_lVR5tN1fY.roa (raw, json)
Hash identifier: L4LuTGsF9rww8/NB+ZFiDYSxLKLvCScujCdQEYKMpLs=
Subject key identifier: CA:AA:B2:AB:6E:CA:E3:EC:46:CC:6F:0E:7F:F9:55:47:9B:4D:D5:F6
Certificate issuer: /CN=053d04e72bb249c79eb1168cf1d43a3ca548c206
Certificate serial: 01A0616F511FD886408AE49BCD78AC5AF800
Authority key identifier: 05:3D:04:E7:2B:B2:49:C7:9E:B1:16:8C:F1:D4:3A:3C:A5:48:C2:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BT0E5yuySceesRaM8dQ6PKVIwgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/3550b4-51b5-448b-ab62-2a813dbf4582/1/yqqyq27K4-xGzG8Of_lVR5tN1fY.roa
Signing time: Wed 02 Sep 2026 09:24:40 +0000
ROA not before: Wed 02 Sep 2026 09:24:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29422
IP address blocks: 77.86.128.0/17 maxlen: 17
77.91.209.0/24 maxlen: 24
77.91.210.0/23 maxlen: 23
83.145.192.0/18 maxlen: 18
83.150.64.0/18 maxlen: 18
84.20.128.0/19 maxlen: 19
84.239.128.0/17 maxlen: 17
84.239.208.0/20 maxlen: 20
94.101.0.0/20 maxlen: 20
185.123.116.0/22 maxlen: 22
188.117.0.0/18 maxlen: 18
194.79.16.0/22 maxlen: 22
213.157.64.0/19 maxlen: 19
217.30.176.0/20 maxlen: 20
217.149.48.0/20 maxlen: 20
2001:1bc8::/29 maxlen: 29
2001:1bc8::/32 maxlen: 32
2a01:51c0::/29 maxlen: 29
2a01:51c0::/32 maxlen: 32
2a01:51c1::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/3550b4-51b5-448b-ab62-2a813dbf4582/1/BT0E5yuySceesRaM8dQ6PKVIwgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/3550b4-51b5-448b-ab62-2a813dbf4582/1/BT0E5yuySceesRaM8dQ6PKVIwgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BT0E5yuySceesRaM8dQ6PKVIwgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 00:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:61:6f:51:1f:d8:86:40:8a:e4:9b:cd:78:ac:5a:f8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=053d04e72bb249c79eb1168cf1d43a3ca548c206
Validity
Not Before: Sep 2 09:24:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=caaab2ab6ecae3ec46cc6f0e7ff955479b4dd5f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7b:ae:44:16:9d:59:c2:b6:ce:28:32:03:98:
08:ca:50:58:9d:1c:9e:78:c8:ba:85:a7:e3:a4:4e:
af:bb:ae:85:25:e9:c7:56:3b:5a:97:78:1a:b2:ed:
bb:f5:6b:31:b2:61:f6:e2:2f:4f:d5:eb:44:e4:43:
4c:57:66:52:75:64:87:33:09:30:cd:a1:a1:57:93:
59:18:8c:57:29:34:c5:8c:9a:66:77:4a:bb:95:29:
35:c1:c6:1f:e2:e3:29:2c:f2:c3:be:72:a7:23:ca:
d2:15:8a:fb:56:09:ad:f4:4b:a0:55:2d:01:4c:97:
ea:62:0e:64:03:7d:1d:a1:37:6e:9f:31:54:ec:85:
0d:f1:53:54:bc:7d:bb:18:15:64:ca:d3:49:95:05:
85:9c:57:a6:33:c0:e2:68:c2:6c:64:5f:fd:d1:97:
66:ee:fa:82:81:ed:36:9b:44:84:45:62:b4:1c:39:
d8:00:ab:91:c9:1b:45:ab:ae:c2:53:98:50:ab:b3:
9d:2b:c6:ed:08:fb:8d:b8:f3:31:00:f4:27:b6:3d:
9a:7f:1f:6a:92:5e:75:89:13:13:cd:0d:a1:8f:27:
1d:cf:95:52:5a:2f:d7:9d:07:09:be:b6:f2:99:1d:
c4:db:8e:4f:75:2d:6a:20:68:1e:5a:e8:ce:7e:ac:
59:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:AA:B2:AB:6E:CA:E3:EC:46:CC:6F:0E:7F:F9:55:47:9B:4D:D5:F6
X509v3 Authority Key Identifier:
keyid:05:3D:04:E7:2B:B2:49:C7:9E:B1:16:8C:F1:D4:3A:3C:A5:48:C2:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BT0E5yuySceesRaM8dQ6PKVIwgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/3550b4-51b5-448b-ab62-2a813dbf4582/1/yqqyq27K4-xGzG8Of_lVR5tN1fY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/3550b4-51b5-448b-ab62-2a813dbf4582/1/BT0E5yuySceesRaM8dQ6PKVIwgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.86.128.0/17
77.91.209.0-77.91.211.255
83.145.192.0/18
83.150.64.0/18
84.20.128.0/19
84.239.128.0/17
94.101.0.0/20
185.123.116.0/22
188.117.0.0/18
194.79.16.0/22
213.157.64.0/19
217.30.176.0/20
217.149.48.0/20
IPv6:
2001:1bc8::/29
2a01:51c0::/29
Signature Algorithm: sha256WithRSAEncryption
53:ad:38:4d:1d:3f:c4:53:29:b0:3b:6b:65:21:f2:fc:52:c8:
86:f9:c0:e9:67:f9:1d:60:25:37:9f:81:e4:e5:26:ef:a6:6f:
e7:ea:6c:b6:34:1a:a5:b6:5c:81:33:5b:72:44:6d:39:d8:08:
08:a0:bb:26:73:68:7d:ce:ad:43:9e:fa:ca:dd:a3:be:1c:27:
ee:88:88:ca:64:d5:d2:1b:b0:56:56:5f:95:7b:bf:1b:ad:b3:
58:54:37:95:d0:69:5c:f2:f3:ff:fe:1f:03:c6:f0:c2:7f:43:
7e:6d:23:45:87:0b:fb:29:79:d6:55:da:d5:f8:8d:0e:94:e5:
f9:ec:b5:cd:45:3b:76:f7:0e:7e:11:de:65:86:54:15:ef:20:
e4:73:df:64:77:cf:4e:8b:05:0e:15:09:60:d7:23:2c:5f:0b:
f9:26:b8:02:7e:9f:d6:aa:b6:d8:b1:0c:6c:9c:3a:39:7f:1f:
7e:31:7d:a7:c5:50:20:b2:55:48:81:d0:e5:1e:f6:fd:5c:99:
ac:39:f4:50:0e:2a:66:f2:bc:6a:f0:c8:b1:43:7e:50:e4:a2:
90:b5:16:c3:23:cd:52:1d:80:a2:e5:e8:b5:63:9a:76:89:77:
30:f8:cf:52:29:07:c5:2f:81:84:0c:c0:d8:70:d2:3a:5f:d7:
b6:61:4f:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 12:01:43 2026 by rpki-client