Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/a4y_KA-8E2Xvk9Flsk-gKj60kM0.roa
File: a4y_KA-8E2Xvk9Flsk-gKj60kM0.roa (raw, json)
Hash identifier: fmCY+qTeS8bDabH+aUH61mLLbXxPfSRcAGvLlcj8OlM=
Subject key identifier: 6B:8C:BF:28:0F:BC:13:65:EF:93:D1:65:B2:4F:A0:2A:3E:B4:90:CD
Certificate issuer: /CN=367e3e632229c7b2539ce5006344d6ada5f7bc12
Certificate serial: 019F2368CFC99B10F4151EF54DA4D413EFB4
Authority key identifier: 36:7E:3E:63:22:29:C7:B2:53:9C:E5:00:63:44:D6:AD:A5:F7:BC:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nn4-YyIpx7JTnOUAY0TWraX3vBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/a4y_KA-8E2Xvk9Flsk-gKj60kM0.roa
Signing time: Thu 02 Jul 2026 15:18:19 +0000
ROA not before: Thu 02 Jul 2026 15:18:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41931
IP address blocks: 77.46.4.0/22 maxlen: 22
77.46.8.0/21 maxlen: 21
77.46.16.0/20 maxlen: 20
77.46.32.0/19 maxlen: 19
77.46.64.0/20 maxlen: 20
77.46.80.0/20 maxlen: 20
77.46.96.0/20 maxlen: 20
77.46.112.0/20 maxlen: 20
195.177.196.0/23 maxlen: 23
2a00:1ac8:1000::/48 maxlen: 48
2a00:1ac8:1001::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/Nn4-YyIpx7JTnOUAY0TWraX3vBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/Nn4-YyIpx7JTnOUAY0TWraX3vBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nn4-YyIpx7JTnOUAY0TWraX3vBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:cf:c9:9b:10:f4:15:1e:f5:4d:a4:d4:13:ef:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=367e3e632229c7b2539ce5006344d6ada5f7bc12
Validity
Not Before: Jul 2 15:18:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6b8cbf280fbc1365ef93d165b24fa02a3eb490cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:cd:c3:49:3d:32:1e:83:13:6f:53:9d:d3:e7:
a2:72:10:99:05:5c:eb:08:82:43:3b:7f:f1:81:a5:
77:a9:6b:7a:aa:2c:e1:e0:25:0a:1a:bb:ca:f5:97:
ee:49:e0:c2:54:70:0f:26:3c:5e:29:8a:82:16:63:
17:93:06:c5:f5:64:20:30:a3:e6:f3:e7:e4:be:eb:
d7:fd:f1:73:0b:a8:24:66:4a:5c:43:b1:8a:50:3d:
a9:a7:f7:bb:54:17:4d:59:e9:b7:fd:dd:20:8c:4e:
e8:6e:31:88:0f:e8:e2:c5:13:2d:48:41:3d:37:be:
16:1f:45:6d:87:f2:ed:e5:5f:a2:58:76:c3:ba:36:
f4:54:f4:ea:ba:bf:32:5c:21:a9:11:61:c7:07:5f:
fa:09:3c:a6:91:3a:3f:b5:1b:d5:43:2f:63:c7:21:
be:bc:75:d2:6e:45:0c:c0:79:5b:4d:00:14:5a:16:
61:87:f1:a0:be:11:52:47:ce:56:96:1d:37:3b:89:
2f:b1:39:88:28:45:8b:83:2f:48:26:43:01:a2:27:
7d:f2:dd:91:b7:ef:33:03:ce:f4:89:57:ac:6c:21:
8c:de:a1:84:f1:76:d7:d0:d1:c6:97:a1:cf:66:9f:
8f:10:86:0c:75:49:ab:ca:13:af:11:61:63:34:50:
c7:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:8C:BF:28:0F:BC:13:65:EF:93:D1:65:B2:4F:A0:2A:3E:B4:90:CD
X509v3 Authority Key Identifier:
keyid:36:7E:3E:63:22:29:C7:B2:53:9C:E5:00:63:44:D6:AD:A5:F7:BC:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nn4-YyIpx7JTnOUAY0TWraX3vBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/a4y_KA-8E2Xvk9Flsk-gKj60kM0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/Nn4-YyIpx7JTnOUAY0TWraX3vBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.46.4.0-77.46.127.255
195.177.196.0/23
IPv6:
2a00:1ac8:1000::/47
Signature Algorithm: sha256WithRSAEncryption
a0:3d:77:b2:ab:26:38:92:88:9a:6a:f2:6d:e1:51:72:2e:f7:
5c:e6:e9:61:1d:2f:36:99:aa:fc:7b:ca:c1:c0:f3:10:cb:ce:
ae:49:75:0b:f7:53:6a:b3:de:7c:5c:1f:1a:d1:be:96:6b:07:
eb:88:55:d2:c7:3c:89:25:97:35:0b:4b:cd:df:ad:26:1c:eb:
05:a6:96:91:dd:8e:3a:5c:2d:42:fd:97:55:04:9b:c1:61:bf:
a2:df:59:07:c5:bd:34:e2:57:80:27:67:2f:b2:3a:55:8f:88:
9f:be:57:b4:77:18:2f:28:fc:92:69:fb:9a:30:7a:b8:73:ae:
8f:16:e1:a8:0d:6e:25:52:a2:67:98:56:95:2c:07:57:b4:6c:
77:96:ec:75:93:8b:77:a6:69:67:d9:29:74:38:72:36:26:da:
20:f8:7f:33:7c:7d:5e:4c:40:cd:6b:4f:14:e1:08:5c:24:af:
30:f4:4b:a1:97:9c:fd:46:10:f9:6a:a7:65:c0:53:8c:e0:78:
f9:2b:c4:0c:47:8b:25:ef:06:bf:d6:ad:6d:57:bf:d1:c0:63:
c7:63:6f:3c:22:97:0b:27:77:e4:02:c7:59:1c:23:3a:a1:ea:
64:25:ff:d6:5f:ad:0d:c8:62:ad:b5:a6:d5:b5:a3:30:e4:99:
36:05:00:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:07:28 2026 by rpki-client