Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/3mm9P-FdP0-jDL-4nrrptbD_jB8.roa
File: 3mm9P-FdP0-jDL-4nrrptbD_jB8.roa (raw, json)
Hash identifier: QwWJgEY+dC/sU9EOt0b9HTBsM5YGl/obs/+Vb9lhNMU=
Subject key identifier: DE:69:BD:3F:E1:5D:3F:4F:A3:0C:BF:B8:9E:BA:E9:B5:B0:FF:8C:1F
Certificate issuer: /CN=5bc0e9489576598cd80cfd13e83d9fa7adc8791f
Certificate serial: 019F2368317AEDBE1A7F96B7CCC588E1557A
Authority key identifier: 5B:C0:E9:48:95:76:59:8C:D8:0C:FD:13:E8:3D:9F:A7:AD:C8:79:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W8DpSJV2WYzYDP0T6D2fp63IeR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/3mm9P-FdP0-jDL-4nrrptbD_jB8.roa
Signing time: Thu 02 Jul 2026 15:17:38 +0000
ROA not before: Thu 02 Jul 2026 15:17:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 28917
IP address blocks: 80.77.164.0/22 maxlen: 24
80.77.164.0/24 maxlen: 24
80.77.165.0/24 maxlen: 24
80.77.166.0/24 maxlen: 24
80.77.167.0/24 maxlen: 24
2a02:2518::/29 maxlen: 29
2a02:2518::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/W8DpSJV2WYzYDP0T6D2fp63IeR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/W8DpSJV2WYzYDP0T6D2fp63IeR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/W8DpSJV2WYzYDP0T6D2fp63IeR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:31:7a:ed:be:1a:7f:96:b7:cc:c5:88:e1:55:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bc0e9489576598cd80cfd13e83d9fa7adc8791f
Validity
Not Before: Jul 2 15:17:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=de69bd3fe15d3f4fa30cbfb89ebae9b5b0ff8c1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:91:62:c0:5b:28:f6:b4:80:d0:9f:04:d6:a7:
c1:d0:af:e3:34:ce:39:c9:6d:ef:20:82:ab:de:14:
33:18:27:ef:07:72:b1:62:41:88:09:a2:d8:2b:f1:
15:f5:a3:37:64:53:3b:0a:c8:fe:90:e6:5e:78:95:
ff:90:47:fb:c3:ad:6b:d9:e1:dd:e2:15:4c:0e:20:
48:c7:14:99:13:87:24:6c:90:ea:89:83:79:da:fa:
d8:26:85:33:ee:d5:cc:9b:30:20:db:d6:be:56:1d:
ce:25:c3:3a:05:82:d8:9d:a8:d6:52:4d:7c:80:c6:
4c:df:10:af:b1:f1:25:a8:a3:ae:99:ad:d7:ff:7b:
ef:9b:3e:9c:3b:0f:b1:ba:45:9d:bc:94:62:e6:ac:
4a:65:82:62:56:22:23:d5:8b:e6:5a:04:6e:73:a2:
37:9b:e9:b3:7a:e6:d0:87:b9:de:d7:d9:d2:e9:41:
aa:c4:47:b4:8d:22:c4:eb:35:6e:36:7d:6b:53:1b:
a6:70:af:84:83:7e:31:da:42:09:67:5b:81:f0:40:
40:eb:ae:48:0b:c0:d4:e2:57:5b:34:31:cd:15:f0:
ab:f7:18:12:6d:77:0f:b6:aa:29:a8:73:b4:ab:1c:
ba:c4:c8:1f:6e:77:b6:2d:55:25:f2:b0:0c:05:74:
c8:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:69:BD:3F:E1:5D:3F:4F:A3:0C:BF:B8:9E:BA:E9:B5:B0:FF:8C:1F
X509v3 Authority Key Identifier:
keyid:5B:C0:E9:48:95:76:59:8C:D8:0C:FD:13:E8:3D:9F:A7:AD:C8:79:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W8DpSJV2WYzYDP0T6D2fp63IeR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/3mm9P-FdP0-jDL-4nrrptbD_jB8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/W8DpSJV2WYzYDP0T6D2fp63IeR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.77.164.0/22
IPv6:
2a02:2518::/29
Signature Algorithm: sha256WithRSAEncryption
82:69:7b:09:4d:d2:c0:5d:99:78:fd:c3:5a:b8:ff:80:13:be:
fb:26:7a:cb:5f:8f:47:21:79:d9:b1:80:b2:f0:9c:74:bc:28:
af:92:5a:18:90:aa:1e:af:31:65:d1:e4:ee:f6:09:2f:e6:25:
d5:dd:e6:46:2f:82:9f:e4:0e:11:16:15:ea:77:f4:e2:1e:11:
e6:1a:b7:a1:3a:83:90:d1:02:1d:64:36:cf:78:15:0a:f7:0c:
a6:51:89:b6:4d:7c:28:97:a9:19:fb:2c:eb:67:ed:0b:42:17:
a2:fa:77:c7:7d:9b:c5:0c:91:2f:c9:eb:b6:62:d1:fa:36:35:
23:51:88:f2:b3:bf:4f:f1:4d:fe:73:0b:c4:38:50:db:b1:36:
54:f7:74:9f:bd:f0:18:5a:7f:c3:6e:ee:15:49:8c:a0:2c:80:
7c:8d:9a:40:24:df:d2:86:cf:18:23:e8:8d:08:a4:fc:97:ff:
89:e1:3f:8a:9f:86:02:0a:d8:f6:dc:47:15:72:8d:93:d6:f2:
3d:22:30:27:ee:54:79:53:54:4d:b8:3e:6f:68:82:fe:b9:6b:
20:df:de:87:61:c7:31:a2:c6:e9:fb:9b:4d:2b:b1:55:e1:b2:
fe:f1:a6:6f:f8:00:b0:e5:e0:83:2c:00:e0:ad:81:cd:95:d4:
a2:b8:32:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:08:44 2026 by rpki-client