Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/jAy7jLzPFSWinovi-bsB0j1fWc0.roa
File: jAy7jLzPFSWinovi-bsB0j1fWc0.roa (raw, json)
Hash identifier: /x0g3lVaUyPzzl3qGeFfay+ngK53wmT0x5807HnGXwE=
Subject key identifier: 8C:0C:BB:8C:BC:CF:15:25:A2:9E:8B:E2:F9:BB:01:D2:3D:5F:59:CD
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 019DCDEDCD5EBBD823F89E675D27E90D6773
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/jAy7jLzPFSWinovi-bsB0j1fWc0.roa
Signing time: Mon 27 Apr 2026 07:53:26 +0000
ROA not before: Mon 27 Apr 2026 07:53:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214432
IP address blocks: 77.242.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:ed:cd:5e:bb:d8:23:f8:9e:67:5d:27:e9:0d:67:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Apr 27 07:53:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8c0cbb8cbccf1525a29e8be2f9bb01d23d5f59cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:fa:ba:36:44:8c:14:27:54:6a:8d:be:17:8e:
60:5f:5a:74:9f:79:57:5a:9b:07:34:96:63:56:8f:
75:47:be:71:b6:2b:41:de:52:2b:a3:d7:1c:68:0b:
56:80:cb:5f:4e:dd:5b:8e:c0:07:8e:ca:fe:16:71:
de:46:f9:cc:a6:8c:3f:1b:9c:a6:ce:14:69:45:dd:
c0:37:52:4d:2b:66:b3:52:70:42:80:e4:cc:50:bc:
a5:ae:be:5b:18:ef:68:ff:74:bd:88:f6:69:0d:7b:
a9:9c:b1:40:91:86:34:dc:b8:69:78:b7:65:9c:e0:
fd:db:78:4a:9e:70:96:ca:35:bc:6e:db:90:b8:f7:
7b:1f:06:fc:47:b1:14:db:a8:f8:18:b0:14:62:d0:
ee:65:98:55:36:ff:8d:11:5d:8d:b6:d3:db:dc:29:
96:1f:86:6a:09:04:74:fc:b9:66:1c:d6:64:5d:18:
c1:82:bd:54:75:a8:0a:6a:8f:c2:ef:15:71:bc:79:
68:b8:da:df:b5:e2:69:36:6e:fe:26:73:2f:61:be:
2e:f0:43:8b:ba:f3:02:6a:74:79:0e:2a:59:e3:05:
1f:d5:a9:e7:e8:50:32:71:c6:53:d2:39:bd:3f:5f:
dc:68:90:c2:78:08:01:f8:44:ff:d0:a2:3d:3e:c7:
61:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:0C:BB:8C:BC:CF:15:25:A2:9E:8B:E2:F9:BB:01:D2:3D:5F:59:CD
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/jAy7jLzPFSWinovi-bsB0j1fWc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.242.159.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:3f:43:8a:53:99:05:71:18:7d:5b:e6:28:ca:aa:e6:41:23:
44:2a:a3:be:a9:48:76:dc:be:e9:f8:6a:c0:8c:77:25:b3:18:
94:71:c4:f0:b0:57:20:f8:14:a5:80:89:bb:8a:16:fe:db:e6:
87:9d:f7:f5:a9:b2:3c:ea:18:ae:dc:4a:03:d8:c3:72:31:53:
5f:b5:e0:3b:34:2e:19:bb:ac:c8:5e:08:b1:86:a8:41:67:b6:
ab:d9:ed:76:0a:95:bf:53:92:ff:fc:ae:d8:b4:a3:2a:7c:6e:
ec:9b:b2:de:66:c1:68:b7:bd:d9:91:4c:fa:fa:ce:55:14:0b:
19:d7:58:d0:84:e3:ad:50:ce:8f:97:3b:9c:bf:bf:1a:48:fc:
f7:58:a1:3e:86:30:a8:04:68:fa:92:2e:c4:32:0f:f7:c0:bd:
0e:33:08:56:05:5b:70:f3:a3:c8:5d:39:95:1a:a1:67:87:9e:
9c:25:14:1d:8e:23:5a:ed:1b:aa:79:b5:4b:f8:23:0a:b9:9e:
65:1b:0b:74:57:a6:3b:b0:01:a0:11:19:14:4e:cb:a9:79:92:
3a:a9:e0:91:76:ee:e2:90:a0:a0:97:49:4c:a5:e6:85:ff:a7:
66:1b:12:e7:47:fd:d8:5b:18:6c:4a:02:78:cf:ea:58:9f:a4:
79:24:e7:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:03:09 2026 by rpki-client