Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/IaAb2SK8EToZ3e7j0TfiW41DJ5k.roa
File: IaAb2SK8EToZ3e7j0TfiW41DJ5k.roa (raw, json)
Hash identifier: x7R7BzlmMrfd4ImvpXAAcm0eBgLlqygHWCAkIPrZPM8=
Subject key identifier: 21:A0:1B:D9:22:BC:11:3A:19:DD:EE:E3:D1:37:E2:5B:8D:43:27:99
Certificate issuer: /CN=5bc0e9489576598cd80cfd13e83d9fa7adc8791f
Certificate serial: 019F2368331551E67D14EDCABAD1607442E5
Authority key identifier: 5B:C0:E9:48:95:76:59:8C:D8:0C:FD:13:E8:3D:9F:A7:AD:C8:79:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W8DpSJV2WYzYDP0T6D2fp63IeR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/IaAb2SK8EToZ3e7j0TfiW41DJ5k.roa
Signing time: Thu 02 Jul 2026 15:17:39 +0000
ROA not before: Thu 02 Jul 2026 15:17:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50045
IP address blocks: 80.77.160.0/24 maxlen: 24
2a02:2518:e000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/W8DpSJV2WYzYDP0T6D2fp63IeR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/W8DpSJV2WYzYDP0T6D2fp63IeR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/W8DpSJV2WYzYDP0T6D2fp63IeR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:33:15:51:e6:7d:14:ed:ca:ba:d1:60:74:42:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bc0e9489576598cd80cfd13e83d9fa7adc8791f
Validity
Not Before: Jul 2 15:17:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=21a01bd922bc113a19ddeee3d137e25b8d432799
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:74:ac:c4:2c:e4:08:1c:66:d2:b1:9a:ae:b9:
b4:7a:b9:62:f2:5e:51:c4:69:a3:8b:2e:b2:dd:1f:
a9:55:19:3b:e8:92:14:81:06:f9:37:7e:d5:71:2e:
b6:ea:2e:09:54:a2:4e:94:0f:a1:5a:c6:da:16:99:
5d:ce:c2:2d:2c:33:cf:46:dc:7c:52:e5:33:1f:e3:
40:d1:33:af:f8:58:df:5a:87:93:26:4b:41:c5:9e:
10:15:9a:10:65:3f:fa:ca:bb:34:2a:3a:98:f9:df:
68:77:5f:bd:20:31:1a:9e:e1:6c:fa:94:5e:76:5c:
28:1d:f4:8d:36:8a:b0:0f:b4:3a:aa:79:75:65:61:
9f:93:cb:0e:e1:97:be:69:ea:5a:01:63:87:76:d7:
25:9d:27:b0:36:0d:e4:ad:4e:49:eb:b9:f7:e8:5f:
b2:90:d0:44:7b:86:47:b2:e7:f7:9c:1c:1b:78:50:
49:37:ac:dc:21:40:c9:00:37:02:c4:a5:30:6e:02:
44:ad:d9:d2:92:e3:6a:36:1a:4b:e7:0e:20:02:f3:
41:91:95:27:c5:49:59:bd:e7:56:2c:1d:10:d6:19:
6b:2a:3a:1c:dd:12:82:15:6b:40:62:09:bb:7a:84:
96:b5:7a:fc:b0:0c:15:45:e5:59:e0:7c:7b:11:f7:
62:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:A0:1B:D9:22:BC:11:3A:19:DD:EE:E3:D1:37:E2:5B:8D:43:27:99
X509v3 Authority Key Identifier:
keyid:5B:C0:E9:48:95:76:59:8C:D8:0C:FD:13:E8:3D:9F:A7:AD:C8:79:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W8DpSJV2WYzYDP0T6D2fp63IeR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/IaAb2SK8EToZ3e7j0TfiW41DJ5k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/W8DpSJV2WYzYDP0T6D2fp63IeR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.77.160.0/24
IPv6:
2a02:2518:e000::/36
Signature Algorithm: sha256WithRSAEncryption
78:94:86:6f:bf:dc:49:97:dc:c4:73:17:5b:81:71:3c:d4:a7:
48:7c:48:fe:77:42:c4:1b:f8:1e:21:cf:6f:62:b1:03:f2:df:
fb:3a:4b:88:ea:1f:83:c5:b7:0d:b2:94:ec:8e:8f:52:34:5b:
ae:b5:96:78:05:c9:c9:e6:d5:a4:b0:e8:a9:12:ac:bb:f3:fb:
a7:77:52:e1:be:a8:2c:07:58:c9:ba:6f:41:1c:6e:20:8b:67:
7c:e9:33:c4:f7:b5:48:89:b4:65:ea:35:56:4b:91:d1:a0:18:
a1:7c:5c:ed:f5:d7:36:41:3e:60:02:88:9c:c3:4a:c1:bd:2c:
73:91:29:01:33:2c:bc:c9:78:9a:49:65:9c:d6:10:c4:02:0d:
94:60:b2:dd:db:8f:5b:57:e0:2b:05:f2:bc:40:f3:cd:05:d9:
24:cf:7b:23:05:49:1b:74:88:7a:aa:5c:b6:5d:23:7b:3b:3b:
13:11:b6:40:d3:07:fe:fa:d2:83:53:47:5d:c8:8e:aa:7e:cf:
0d:c8:5a:cd:08:ee:a8:48:23:f8:84:c0:39:38:7c:f1:a8:ae:
98:f8:3c:57:8e:0b:e0:94:3c:e2:8c:7c:38:a0:c3:69:79:50:
14:77:fd:7c:88:60:0b:28:61:83:49:7d:11:f9:d1:8e:bc:10:
01:cc:87:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:26:52 2026 by rpki-client