Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/hxVjN4ViTYov07b0DOLl2w6qTEI.roa
File: hxVjN4ViTYov07b0DOLl2w6qTEI.roa (raw, json)
Hash identifier: 5T+oFS29RJ0l8yQWiVqg0MoWL/i6NlSEWAxcmSYEMqE=
Subject key identifier: 87:15:63:37:85:62:4D:8A:2F:D3:B6:F4:0C:E2:E5:DB:0E:AA:4C:42
Certificate issuer: /CN=f2e160f0ce5e035af3cb21f4dfd04eab9ea7ee51
Certificate serial: 019EF1714EF7943B353E2255C1F8B38CD0A0
Authority key identifier: F2:E1:60:F0:CE:5E:03:5A:F3:CB:21:F4:DF:D0:4E:AB:9E:A7:EE:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8uFg8M5eA1rzyyH039BOq56n7lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/hxVjN4ViTYov07b0DOLl2w6qTEI.roa
Signing time: Mon 22 Jun 2026 22:26:35 +0000
ROA not before: Mon 22 Jun 2026 22:26:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212171
IP address blocks: 77.91.100.0/24 maxlen: 24
77.91.101.0/24 maxlen: 24
77.91.102.0/24 maxlen: 24
77.91.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/8uFg8M5eA1rzyyH039BOq56n7lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/8uFg8M5eA1rzyyH039BOq56n7lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8uFg8M5eA1rzyyH039BOq56n7lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f1:71:4e:f7:94:3b:35:3e:22:55:c1:f8:b3:8c:d0:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2e160f0ce5e035af3cb21f4dfd04eab9ea7ee51
Validity
Not Before: Jun 22 22:26:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8715633785624d8a2fd3b6f40ce2e5db0eaa4c42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c4:da:d9:cf:b2:7e:63:d9:97:10:f5:35:c2:
7d:2c:67:c8:9c:d0:78:48:02:c1:b9:7e:44:08:e2:
ef:de:92:90:a7:e0:77:af:0f:75:e9:76:15:73:79:
a1:71:df:12:0b:80:5e:5b:1a:65:45:4f:04:1b:70:
a4:a3:14:75:8a:6d:26:65:74:5e:bc:c9:ab:56:e7:
6e:05:05:f6:8f:30:b0:e5:cd:3f:15:7e:05:da:17:
81:6e:46:bc:ba:a2:56:e1:2d:69:fe:bc:54:35:95:
a0:21:80:40:a0:2c:14:a0:93:5f:87:3a:ac:b4:ac:
6a:7b:0f:b9:5c:bf:6c:b5:b2:4c:d0:c7:ec:fa:49:
a6:42:1e:e2:b6:d0:3b:d6:0c:0e:10:e1:d7:53:21:
49:a2:bb:93:66:35:76:67:0e:1e:0d:17:85:65:46:
08:fd:f4:61:c6:09:7b:bb:28:ed:0b:a1:25:3a:70:
62:c7:da:12:60:b1:53:3d:6e:60:2d:40:6e:7e:06:
86:1f:13:e4:2b:6a:99:c7:ad:74:8b:3f:3c:b7:3c:
7f:4b:de:ae:86:ab:8b:ad:4d:7f:06:78:f8:43:45:
4a:3c:9d:38:83:f5:92:8b:eb:dd:05:d5:ee:99:ba:
04:6c:b8:81:2c:bf:11:ad:fa:49:79:1b:2a:81:01:
23:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:15:63:37:85:62:4D:8A:2F:D3:B6:F4:0C:E2:E5:DB:0E:AA:4C:42
X509v3 Authority Key Identifier:
keyid:F2:E1:60:F0:CE:5E:03:5A:F3:CB:21:F4:DF:D0:4E:AB:9E:A7:EE:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8uFg8M5eA1rzyyH039BOq56n7lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/hxVjN4ViTYov07b0DOLl2w6qTEI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/8uFg8M5eA1rzyyH039BOq56n7lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.91.100.0-77.91.102.255
77.91.123.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:0a:62:6f:32:be:19:a5:f3:1a:f7:0c:8f:a2:75:ec:59:69:
02:21:5b:97:eb:ad:35:dc:3e:d9:56:ab:e0:bf:ed:e1:9d:e4:
db:a7:f9:0e:78:e5:bf:6a:07:f9:47:ef:ec:31:83:bf:f6:01:
5f:45:a9:39:02:c3:b0:a5:da:e5:7f:5d:20:95:b4:56:a7:1d:
d1:e4:bd:b2:39:15:9b:2e:1d:53:01:7c:f3:36:f7:5b:16:91:
46:37:2d:0d:29:3f:ce:04:aa:50:e5:0b:69:89:45:73:d0:b0:
b4:89:f8:d2:95:e9:f6:26:cd:64:fe:bb:93:fc:79:e1:89:df:
6d:66:51:64:da:47:7b:b0:5f:cc:ba:70:13:61:87:37:5d:75:
4a:ca:07:8b:ac:c1:27:a5:31:73:15:50:f6:85:52:86:05:36:
d8:46:5d:05:47:9f:86:6a:79:42:62:29:90:db:c9:20:38:72:
e3:fc:05:c3:99:8e:32:7c:57:64:df:97:ab:17:36:bf:0b:f5:
7f:cb:ba:30:f0:62:7d:0b:a9:31:1c:1f:f8:2e:94:fa:db:40:
ca:f3:28:2d:ba:e8:74:cf:b7:9b:a6:dd:80:b4:28:fc:52:3f:
ec:02:a0:7d:b5:4f:4a:d8:73:36:bc:72:02:0f:27:79:c9:be:
76:95:4e:46
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 19:24:56 2026 by rpki-client