Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/0ee2ab-07d9-4a81-abf0-e0e4be6696f9/1/SFuwL9n2ykHG8Q1bG2zh3J3rMY8.roa
File: SFuwL9n2ykHG8Q1bG2zh3J3rMY8.roa (raw, json)
Hash identifier: MQYGYdS73ZtBvhBLN7sM94ounBVaM1F31AdoiiH3acc=
Subject key identifier: 48:5B:B0:2F:D9:F6:CA:41:C6:F1:0D:5B:1B:6C:E1:DC:9D:EB:31:8F
Certificate issuer: /CN=fccce2a26b9093c96b2a5ccddd7034bb5ce012fc
Certificate serial: 019F236884B2FD3725196886AD16C7CF27FA
Authority key identifier: FC:CC:E2:A2:6B:90:93:C9:6B:2A:5C:CD:DD:70:34:BB:5C:E0:12:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_MziomuQk8lrKlzN3XA0u1zgEvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/0ee2ab-07d9-4a81-abf0-e0e4be6696f9/1/SFuwL9n2ykHG8Q1bG2zh3J3rMY8.roa
Signing time: Thu 02 Jul 2026 15:17:59 +0000
ROA not before: Thu 02 Jul 2026 15:17:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42586
IP address blocks: 77.36.128.0/17 maxlen: 24
77.36.128.0/18 maxlen: 18
77.36.128.0/19 maxlen: 19
77.36.128.0/20 maxlen: 20
77.36.144.0/20 maxlen: 20
77.36.160.0/19 maxlen: 19
77.36.160.0/20 maxlen: 20
77.36.163.0/24 maxlen: 24
77.36.164.0/24 maxlen: 24
77.36.165.0/24 maxlen: 24
77.36.166.0/24 maxlen: 24
77.36.176.0/20 maxlen: 20
77.36.192.0/18 maxlen: 18
77.36.192.0/19 maxlen: 19
77.36.192.0/20 maxlen: 20
77.36.208.0/20 maxlen: 20
77.36.224.0/19 maxlen: 19
77.36.224.0/20 maxlen: 20
77.36.240.0/20 maxlen: 20
185.194.244.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/0ee2ab-07d9-4a81-abf0-e0e4be6696f9/1/_MziomuQk8lrKlzN3XA0u1zgEvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/0ee2ab-07d9-4a81-abf0-e0e4be6696f9/1/_MziomuQk8lrKlzN3XA0u1zgEvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/_MziomuQk8lrKlzN3XA0u1zgEvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:84:b2:fd:37:25:19:68:86:ad:16:c7:cf:27:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fccce2a26b9093c96b2a5ccddd7034bb5ce012fc
Validity
Not Before: Jul 2 15:17:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=485bb02fd9f6ca41c6f10d5b1b6ce1dc9deb318f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:29:1f:3a:22:f9:44:c4:11:54:47:b4:eb:d0:
37:a2:68:33:93:04:db:a6:7d:5f:41:f4:2b:07:de:
c4:ce:fc:7f:35:e6:da:57:53:a6:1c:b9:6b:97:89:
96:0f:39:b9:72:c0:97:ab:32:67:83:00:5d:f5:99:
63:62:76:4a:87:3d:6b:a4:62:cf:28:ff:1b:71:17:
82:87:43:4d:0d:15:71:1e:8f:f0:d5:39:e4:80:45:
0a:28:cd:7b:4d:9d:89:70:e8:98:0f:bd:db:03:cb:
07:2e:8c:3d:56:79:7d:d5:8d:ad:30:b4:3f:da:2a:
e3:31:dd:89:2e:d9:a7:66:35:f7:0c:7f:a8:59:e3:
d4:40:2b:1b:e2:17:7c:70:46:bb:a5:e9:dd:87:17:
78:fd:33:5d:bc:96:e3:e1:01:6c:2f:eb:ce:31:67:
18:c1:6d:74:aa:ee:d7:01:b7:c1:00:eb:d1:4c:41:
77:53:d3:0f:0b:d6:2e:78:1e:bd:45:16:ef:93:b4:
dc:59:fc:6c:e3:bc:d9:6b:ce:9c:43:c2:2f:78:de:
1f:4b:36:44:2b:6d:b8:75:07:01:69:88:60:06:29:
55:2e:b5:38:5e:1a:63:28:cc:6d:73:ee:bb:04:17:
48:ec:74:e7:d4:08:14:c5:4c:95:c3:ae:3a:70:a2:
f5:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:5B:B0:2F:D9:F6:CA:41:C6:F1:0D:5B:1B:6C:E1:DC:9D:EB:31:8F
X509v3 Authority Key Identifier:
keyid:FC:CC:E2:A2:6B:90:93:C9:6B:2A:5C:CD:DD:70:34:BB:5C:E0:12:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_MziomuQk8lrKlzN3XA0u1zgEvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0ee2ab-07d9-4a81-abf0-e0e4be6696f9/1/SFuwL9n2ykHG8Q1bG2zh3J3rMY8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0ee2ab-07d9-4a81-abf0-e0e4be6696f9/1/_MziomuQk8lrKlzN3XA0u1zgEvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.36.128.0/17
185.194.244.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:de:e4:a9:d0:6d:be:6f:6a:7b:72:eb:bd:aa:0c:7a:ad:c2:
61:fa:e7:95:ab:a0:ab:5d:b2:07:85:36:7f:74:5c:d0:6d:28:
8c:88:a9:e7:78:e1:c7:ef:2b:e7:5f:ad:46:3a:49:1b:2b:5d:
fd:80:0f:f2:59:e7:20:0b:49:5a:89:63:24:17:44:34:d1:1c:
50:d7:f5:5e:71:98:70:76:30:a5:3e:bc:bb:07:a9:43:12:50:
4c:af:68:4e:75:ac:fd:70:90:b5:a3:76:2a:94:28:3a:91:30:
08:fb:50:ae:c9:d4:50:c0:08:09:37:56:17:a1:3d:d8:a3:bf:
ac:0e:5e:73:37:fb:3c:e9:e1:0e:60:c6:e0:9d:85:c1:7e:23:
99:11:ad:75:0c:97:5f:af:e5:a6:1d:8e:10:17:2d:e1:58:2a:
c7:37:cc:8f:cf:f9:82:98:1c:db:a5:37:0e:42:19:f5:0b:0f:
17:fb:20:fe:70:d5:60:ce:a5:67:38:ef:73:95:a6:7f:ee:44:
f5:b3:a5:f3:fe:91:13:bb:2e:9f:0d:5e:a9:05:cc:9a:5b:86:
1f:5d:6b:e0:af:53:8f:13:93:f4:82:b1:b1:d5:0a:dc:be:60:
e7:56:95:44:88:3d:cb:1a:1c:34:8f:5f:bf:fd:d9:72:30:85:
db:c5:5e:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:52:41 2026 by rpki-client