Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/sypz3alt6kD9RUIKSoriU5Cgg9c.roa
File: sypz3alt6kD9RUIKSoriU5Cgg9c.roa (raw, json)
Hash identifier: Q5XVGAYpXK3W0dy+5n1dt4ArQn0bSHlxksL+5uZfIdA=
Subject key identifier: B3:2A:73:DD:A9:6D:EA:40:FD:45:42:0A:4A:8A:E2:53:90:A0:83:D7
Certificate issuer: /CN=a2900e4655ab349a4632b140719dc97230431725
Certificate serial: 019E1BBB3F48AF1C0BF0D2297B9A53FD9834
Authority key identifier: A2:90:0E:46:55:AB:34:9A:46:32:B1:40:71:9D:C9:72:30:43:17:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/sypz3alt6kD9RUIKSoriU5Cgg9c.roa
Signing time: Tue 12 May 2026 10:28:36 +0000
ROA not before: Tue 12 May 2026 10:28:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 28917
IP address blocks: 80.77.164.0/22 maxlen: 24
80.77.164.0/24 maxlen: 24
80.77.165.0/24 maxlen: 24
80.77.166.0/24 maxlen: 24
80.77.167.0/24 maxlen: 24
2a02:2518::/29 maxlen: 29
2a02:2518::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:bb:3f:48:af:1c:0b:f0:d2:29:7b:9a:53:fd:98:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2900e4655ab349a4632b140719dc97230431725
Validity
Not Before: May 12 10:28:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b32a73dda96dea40fd45420a4a8ae25390a083d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:aa:99:7a:1a:2f:cb:89:86:a2:c3:6e:09:37:
c7:a3:ab:32:bc:fd:89:43:1a:ef:11:c2:dd:38:50:
af:7d:ea:df:db:34:c3:1e:4f:f0:02:30:57:39:41:
59:8b:c4:54:05:46:d5:e2:f9:3a:49:62:12:d4:55:
f0:07:70:e6:27:66:9e:92:dd:54:37:0c:48:93:b2:
23:42:cf:5d:59:27:cc:72:56:29:68:f2:c2:8f:31:
e1:69:85:2c:7f:b2:4d:bd:71:14:85:ae:a2:69:8e:
95:e9:74:9c:6c:f3:85:93:15:32:ad:a6:01:f8:c8:
1e:d9:14:e8:40:e3:fd:ac:35:43:53:6a:1b:9c:32:
7d:d3:c0:e9:f2:6e:c8:c5:a3:b9:4d:d4:aa:26:77:
a1:8e:68:86:73:e1:d8:7f:36:f5:3b:22:f9:57:7e:
8d:a0:23:6c:4d:cf:56:7c:b5:20:a2:85:33:ed:b4:
08:7e:05:fe:d6:73:f7:82:9e:78:ef:3d:70:1d:4a:
88:ff:e2:42:57:d7:e3:ed:e3:8e:5a:3a:7b:89:5f:
d1:ad:74:cb:93:16:8c:41:0f:21:4b:77:90:30:b1:
ae:cd:f4:69:a0:07:01:4c:5a:50:e9:bf:21:3d:72:
e4:0d:86:53:b3:04:f7:a7:4d:80:97:af:53:fa:17:
64:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:2A:73:DD:A9:6D:EA:40:FD:45:42:0A:4A:8A:E2:53:90:A0:83:D7
X509v3 Authority Key Identifier:
keyid:A2:90:0E:46:55:AB:34:9A:46:32:B1:40:71:9D:C9:72:30:43:17:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/sypz3alt6kD9RUIKSoriU5Cgg9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.77.164.0/22
IPv6:
2a02:2518::/29
Signature Algorithm: sha256WithRSAEncryption
bb:bc:25:39:e6:de:5f:31:5e:23:c7:a2:6d:d8:01:39:4f:85:
a5:b6:a5:e9:15:f6:d4:a3:5d:e8:86:cb:f0:96:84:5f:a1:98:
12:e3:65:96:78:b3:85:80:5d:2d:86:4e:7b:2d:5f:67:23:9c:
58:c1:21:08:69:b8:9b:f9:66:85:ec:84:6f:af:5a:ed:b1:0c:
81:1c:29:52:31:bd:99:d7:a7:f1:35:04:ee:4f:cb:55:fe:7e:
70:08:12:95:fb:f9:c1:21:98:52:bd:e7:3f:fe:53:26:1e:3a:
0e:34:83:0a:65:88:ba:0d:ec:22:72:6c:e6:5b:a7:64:a8:d3:
55:fb:af:bf:1b:96:30:3e:6a:f6:8b:83:f9:13:78:4b:3c:75:
ff:1f:40:bf:cc:19:f0:d2:ca:7a:5a:22:af:05:98:5e:98:81:
f2:e1:3d:d3:08:51:ad:4b:8f:aa:6d:ee:35:ba:87:ab:21:dd:
c9:04:4a:ae:be:8b:42:4b:14:c1:38:fb:67:bc:46:6c:b0:72:
e9:62:9a:44:12:ce:d9:dc:e1:94:b5:ca:f5:81:00:c2:09:2d:
79:8b:97:e8:ea:06:5b:81:63:4f:1d:55:f2:1f:bb:b1:67:41:
0f:d3:aa:04:77:ae:39:ce:e7:95:d0:3d:8e:35:d4:1a:1b:47:
58:7e:3f:33
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZ4buz9IrxwL8NIpe5pT/Zg0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyOTAwZTQ2NTVhYjM0OWE0NjMyYjE0MDcxOWRjOTcyMzA0
MzE3MjUwHhcNMjYwNTEyMTAyODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMzJhNzNkZGE5NmRlYTQwZmQ0NTQyMGE0YThhZTI1MzkwYTA4M2Q3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz6qZehovy4mGosNuCTfHo6syvP2J
QxrvEcLdOFCvferf2zTDHk/wAjBXOUFZi8RUBUbV4vk6SWIS1FXwB3DmJ2aekt1U
NwxIk7IjQs9dWSfMclYpaPLCjzHhaYUsf7JNvXEUha6iaY6V6XScbPOFkxUyraYB
+Mge2RToQOP9rDVDU2obnDJ908Dp8m7IxaO5TdSqJnehjmiGc+HYfzb1OyL5V36N
oCNsTc9WfLUgooUz7bQIfgX+1nP3gp547z1wHUqI/+JCV9fj7eOOWjp7iV/RrXTL
kxaMQQ8hS3eQMLGuzfRpoAcBTFpQ6b8hPXLkDYZTswT3p02Al69T+hdkQwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFLMqc92pbepA/UVCCkqK4lOQoIPXMB8GA1UdIwQY
MBaAFKKQDkZVqzSaRjKxQHGdyXIwQxclMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3BBT1JsV3JOSnBHTXJGQWNaM0pjakJERnlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC80ZjcwMWEtZWQ2Zi00N2M4LWJmNzMt
ZjRjNWZjM2NhMmM0LzEvc3lwejNhbHQ2a0Q5UlVJS1NvcmlVNUNnZzljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC80ZjcwMWEtZWQ2Zi00N2M4LWJmNzMtZjRjNWZjM2NhMmM0
LzEvb3BBT1JsV3JOSnBHTXJGQWNaM0pjakJERnlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCUE2kMA0E
AgACMAcDBQMqAiUYMA0GCSqGSIb3DQEBCwUAA4IBAQC7vCU55t5fMV4jx6Jt2AE5
T4WltqXpFfbUo13ohsvwloRfoZgS42WWeLOFgF0thk57LV9nI5xYwSEIabib+WaF
7IRvr1rtsQyBHClSMb2Z16fxNQTuT8tV/n5wCBKV+/nBIZhSvec//lMmHjoONIMK
ZYi6DewicmzmW6dkqNNV+6+/G5YwPmr2i4P5E3hLPHX/H0C/zBnw0sp6WiKvBZhe
mIHy4T3TCFGtS4+qbe41uoerId3JBEquvotCSxTBOPtnvEZssHLpYppEEs7Z3OGU
tcr1gQDCCS15i5fo6gZbgWNPHVXyH7uxZ0EP06oEd645zueV0D2ONdQaG0dYfj8z
-----END CERTIFICATE-----
Generated at Tue May 12 21:53:05 2026 by rpki-client