Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/mF8pLzbTtYdJKuSza1_8lLcFK50.roa
File: mF8pLzbTtYdJKuSza1_8lLcFK50.roa (raw, json)
Hash identifier: pKG3766tELFvatc/bjxdAzgMtziSK0d1kSxNJxPIrLo=
Subject key identifier: 98:5F:29:2F:36:D3:B5:87:49:2A:E4:B3:6B:5F:FC:94:B7:05:2B:9D
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 019F65F3880A08BFFFA834F952BBAB4AE726
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/mF8pLzbTtYdJKuSza1_8lLcFK50.roa
Signing time: Wed 15 Jul 2026 13:24:46 +0000
ROA not before: Wed 15 Jul 2026 13:24:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 77.76.4.0/22 maxlen: 22
78.128.3.0/24 maxlen: 24
78.128.41.0/24 maxlen: 24
78.128.86.0/23 maxlen: 23
78.128.88.0/22 maxlen: 22
78.128.97.0/24 maxlen: 24
78.128.100.0/22 maxlen: 22
78.128.116.0/23 maxlen: 23
78.142.31.0/24 maxlen: 24
83.222.190.0/23 maxlen: 23
84.201.224.0/20 maxlen: 20
91.148.162.0/23 maxlen: 23
91.148.164.0/23 maxlen: 23
91.148.169.0/24 maxlen: 24
91.148.170.0/23 maxlen: 23
91.148.172.0/22 maxlen: 22
130.185.227.0/24 maxlen: 24
130.185.234.0/24 maxlen: 24
185.81.120.0/24 maxlen: 24
193.24.240.0/22 maxlen: 22
193.200.14.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:65:f3:88:0a:08:bf:ff:a8:34:f9:52:bb:ab:4a:e7:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Jul 15 13:24:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=985f292f36d3b587492ae4b36b5ffc94b7052b9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:37:8c:83:9d:06:2e:9d:69:f6:0c:50:87:f9:
19:3b:ad:90:5c:96:98:a6:38:f9:eb:fe:18:10:7e:
4e:ee:76:18:b6:c7:90:be:27:37:e6:dc:f1:4a:13:
b3:45:74:1d:bb:ec:e8:1a:4a:16:1a:08:89:5b:e2:
7c:61:0c:a2:f2:94:7f:15:37:53:8d:ea:dd:36:5d:
93:45:f8:d4:7b:1a:f5:a8:35:bb:64:f7:42:cf:09:
3e:ae:98:24:15:72:a7:20:4b:9b:a0:b0:21:5f:11:
95:b1:38:8b:f4:0c:ff:bc:f9:bc:cf:85:ff:1c:0a:
f2:f9:1d:61:98:2a:50:bb:c1:d9:99:f6:7f:6d:b9:
66:86:ef:2a:7b:55:36:03:50:f7:3a:c0:1b:8a:d3:
c5:9e:87:af:72:14:97:21:75:88:34:cd:0e:bb:26:
f9:8b:d8:3d:83:c2:10:1f:09:3c:3f:b3:8d:87:82:
03:ac:95:d0:7d:96:7b:d0:51:14:55:ed:78:fa:05:
aa:d6:4b:4e:08:cc:23:93:88:6c:46:d4:61:55:fb:
7b:b2:f2:4d:97:b0:20:ec:b8:db:77:89:f0:40:6f:
a9:13:56:69:b0:4a:47:35:fe:e4:8b:0b:ff:82:bd:
88:b5:1a:86:30:dc:05:9a:79:fb:49:48:51:d4:df:
8a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:5F:29:2F:36:D3:B5:87:49:2A:E4:B3:6B:5F:FC:94:B7:05:2B:9D
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/mF8pLzbTtYdJKuSza1_8lLcFK50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.76.4.0/22
78.128.3.0/24
78.128.41.0/24
78.128.86.0-78.128.91.255
78.128.97.0/24
78.128.100.0/22
78.128.116.0/23
78.142.31.0/24
83.222.190.0/23
84.201.224.0/20
91.148.162.0-91.148.165.255
91.148.169.0-91.148.175.255
130.185.227.0/24
130.185.234.0/24
185.81.120.0/24
193.24.240.0/22
193.200.14.0/23
Signature Algorithm: sha256WithRSAEncryption
62:ac:9e:af:d6:1c:bf:8c:1c:33:9a:7c:23:41:99:c0:7f:71:
37:8c:e2:54:a0:e6:c2:af:74:5f:79:8d:a5:3f:dc:89:da:28:
56:fe:8a:d9:ab:d3:09:cd:09:82:1e:a4:24:65:c5:46:3d:8c:
f3:d6:f7:a8:94:ac:ab:cf:cd:c5:72:6f:77:8c:0d:e7:79:76:
09:e4:f8:72:12:e9:39:b5:d3:b0:c5:ec:7f:5a:de:49:ac:a0:
58:67:3c:8e:6e:a7:88:87:a8:2f:ee:42:b5:eb:de:0b:a7:64:
31:53:2a:eb:3f:2d:f5:5e:6a:5c:7b:d8:03:fd:9c:ba:a9:23:
e0:f6:fe:58:58:88:44:3c:77:1b:e3:c3:1f:b2:6a:ad:78:d9:
d2:66:70:5a:21:de:a7:b3:ac:c0:a4:87:da:c4:3d:cc:a6:cc:
97:94:29:21:2f:54:f1:3c:d4:d9:23:d1:f4:0d:b2:5c:42:1a:
f0:f2:3e:41:14:85:81:7f:97:56:7a:4f:f1:20:19:f5:0a:de:
92:ae:be:d0:ad:6e:72:19:a5:34:c8:ae:e8:39:ef:ad:c4:85:
eb:a7:df:20:16:65:e3:f2:1c:aa:ca:b3:d9:13:d5:52:c2:58:
18:6e:b2:fc:87:30:0f:e0:95:6d:b3:cf:d6:be:68:1e:80:93:
9d:55:7e:9d
-----BEGIN CERTIFICATE-----
MIIFeTCCBGGgAwIBAgISAZ9l84gKCL//qDT5UrurSucmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzNWVhYzY0ZWE0ODAyZTY4MjQ2ODZmN2MwZDIwMWYyYzg1
Y2IyYWEwHhcNMjYwNzE1MTMyNDQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ODVmMjkyZjM2ZDNiNTg3NDkyYWU0YjM2YjVmZmM5NGI3MDUyYjlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhDeMg50GLp1p9gxQh/kZO62QXJaY
pjj56/4YEH5O7nYYtseQvic35tzxShOzRXQdu+zoGkoWGgiJW+J8YQyi8pR/FTdT
jerdNl2TRfjUexr1qDW7ZPdCzwk+rpgkFXKnIEuboLAhXxGVsTiL9Az/vPm8z4X/
HAry+R1hmCpQu8HZmfZ/bblmhu8qe1U2A1D3OsAbitPFnoevchSXIXWINM0Ouyb5
i9g9g8IQHwk8P7ONh4IDrJXQfZZ70FEUVe14+gWq1ktOCMwjk4hsRtRhVft7svJN
l7Ag7Ljbd4nwQG+pE1ZpsEpHNf7kiwv/gr2ItRqGMNwFmnn7SUhR1N+K6QIDAQAB
o4IChTCCAoEwHQYDVR0OBBYEFJhfKS8207WHSSrks2tf/JS3BSudMB8GA1UdIwQY
MBaAFMNerGTqSALmgkaG98DSAfLIXLKqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMt
ZGFjYjVmMzU2ZWEzLzEvbUY4cEx6YlR0WWRKS3VTemExXzhsTGNGSzUwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMtZGFjYjVmMzU2ZWEz
LzEvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGaBggrBgEFBQcBBwEB/wSBijCBhzCBhAQCAAEwfgMEAk1M
BAMEAE6AAwMEAE6AKTAMAwQBToBWAwQCToBYAwQAToBhAwQCToBkAwQBToB0AwQA
To4fAwQBU96+AwQEVMngMAwDBAFblKIDBAFblKQwDAMEAFuUqQMEBFuUoAMEAIK5
4wMEAIK56gMEALlReAMEAsEY8AMEAcHIDjANBgkqhkiG9w0BAQsFAAOCAQEAYqye
r9Ycv4wcM5p8I0GZwH9xN4ziVKDmwq90X3mNpT/cidooVv6K2avTCc0Jgh6kJGXF
Rj2M89b3qJSsq8/NxXJvd4wN53l2CeT4chLpObXTsMXsf1reSaygWGc8jm6niIeo
L+5CteveC6dkMVMq6z8t9V5qXHvYA/2cuqkj4Pb+WFiIRDx3G+PDH7JqrXjZ0mZw
WiHep7OswKSH2sQ9zKbMl5QpIS9U8TzU2SPR9A2yXEIa8PI+QRSFgX+XVnpP8SAZ
9Qrekq6+0K1uchmlNMiu6DnvrcSF66ffIBZl4/Icqsqz2RPVUsJYGG6y/IcwD+CV
bbPP1r5oHoCTnVV+nQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:36:19 2026 by rpki-client