Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/NDmwsiusftzbyMWBTWDJVW16t3w.roa
File: NDmwsiusftzbyMWBTWDJVW16t3w.roa (raw, json)
Hash identifier: vo2FWAXvXazwyLT6897L+Sclc/TCo4ut41EBl8NTSUY=
Subject key identifier: 34:39:B0:B2:2B:AC:7E:DC:DB:C8:C5:81:4D:60:C9:55:6D:7A:B7:7C
Certificate issuer: /CN=525d1c4955b2efbf009e9e41b1e72ea6dff824b3
Certificate serial: 019ECF89B0BD25E9E596201838FE4466980C
Authority key identifier: 52:5D:1C:49:55:B2:EF:BF:00:9E:9E:41:B1:E7:2E:A6:DF:F8:24:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ul0cSVWy778Anp5Bsecupt_4JLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/NDmwsiusftzbyMWBTWDJVW16t3w.roa
Signing time: Tue 16 Jun 2026 08:26:07 +0000
ROA not before: Tue 16 Jun 2026 08:26:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197891
IP address blocks: 77.74.200.0/24 maxlen: 24
2a13:8ac0:100::/40 maxlen: 40
2a13:8ac0:300::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Ul0cSVWy778Anp5Bsecupt_4JLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Ul0cSVWy778Anp5Bsecupt_4JLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ul0cSVWy778Anp5Bsecupt_4JLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:cf:89:b0:bd:25:e9:e5:96:20:18:38:fe:44:66:98:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=525d1c4955b2efbf009e9e41b1e72ea6dff824b3
Validity
Not Before: Jun 16 08:26:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3439b0b22bac7edcdbc8c5814d60c9556d7ab77c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:09:f2:3f:bb:d5:f3:0e:c8:8b:c1:af:f5:0e:
7e:46:9c:28:ad:29:90:bf:e8:fc:9e:d4:9b:b4:40:
e5:2b:f7:26:65:c2:38:01:db:57:89:65:b6:4d:22:
89:78:0b:ec:ca:51:89:32:18:02:d8:ff:d6:88:4f:
22:0a:b6:9e:d5:ff:5c:68:cf:e8:9c:5c:76:b8:98:
3b:41:cf:4e:c8:3d:fd:0f:22:a9:7e:a8:6e:8f:97:
aa:22:e5:01:73:20:81:dc:d9:df:92:5d:fa:0d:bc:
bb:4d:a6:f6:26:cb:30:be:dd:7f:5c:f6:e4:a2:3b:
44:c9:d1:dd:31:8e:0a:d2:17:4e:c8:bf:76:2b:ee:
f7:f4:4a:fb:d3:cd:e0:9a:c5:21:3c:81:ea:b2:f8:
23:14:ac:cc:6d:d1:b0:ee:f5:e9:68:d9:62:31:56:
0a:99:f3:f3:e1:54:b7:12:1b:d1:48:0d:ef:fa:d5:
4d:30:3e:ce:30:c6:c4:df:2b:d6:ed:96:7f:00:5d:
91:22:30:9c:06:b5:48:ff:8c:0d:1c:68:d7:8d:23:
0b:9a:7d:a9:3a:dc:ef:fb:b9:3e:fd:29:05:e3:d5:
8e:76:38:d9:3e:03:a7:11:ac:67:54:34:04:d4:b8:
23:fe:a2:18:cc:9d:fa:8a:62:b1:fc:60:89:a9:20:
c4:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:39:B0:B2:2B:AC:7E:DC:DB:C8:C5:81:4D:60:C9:55:6D:7A:B7:7C
X509v3 Authority Key Identifier:
keyid:52:5D:1C:49:55:B2:EF:BF:00:9E:9E:41:B1:E7:2E:A6:DF:F8:24:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ul0cSVWy778Anp5Bsecupt_4JLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/NDmwsiusftzbyMWBTWDJVW16t3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Ul0cSVWy778Anp5Bsecupt_4JLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.74.200.0/24
IPv6:
2a13:8ac0:100::/40
2a13:8ac0:300::/40
Signature Algorithm: sha256WithRSAEncryption
25:82:a1:7a:ec:fb:b0:ab:c7:a0:6e:29:88:6a:7b:b3:5a:05:
20:a1:9c:5b:e0:2e:a2:90:66:7f:c1:a8:b1:b0:ac:b3:7f:43:
35:c8:3d:fe:cc:ed:9f:51:27:dc:13:59:a1:d8:2c:a9:fe:7a:
13:55:db:91:0c:2b:4c:e3:e7:09:d7:8a:9c:ec:93:28:95:72:
92:77:64:c6:56:50:0a:da:8a:8f:8c:4f:36:cf:42:a7:5e:08:
da:23:b6:54:8a:eb:e8:db:7d:2b:2e:b9:50:e6:df:77:94:42:
e4:1a:f3:a0:98:57:4a:d4:76:4c:4a:b5:e7:fe:8f:ad:36:29:
f1:6b:d3:4e:e0:f3:3e:0b:dd:06:58:61:e7:85:73:b1:fa:9e:
55:bb:f5:70:53:a2:d9:02:39:ce:52:5f:e4:5e:71:98:fc:c7:
72:ca:91:20:39:c3:8a:ae:b9:d6:14:db:e4:0b:6a:40:74:de:
2a:79:77:41:d1:2f:03:4f:47:d7:8a:da:37:ec:dd:6b:e2:f1:
94:5a:15:7b:68:3d:6c:38:f3:67:8c:9a:8c:af:59:bb:bb:01:
34:ec:b2:35:8a:d4:c2:7e:d1:73:de:92:1a:7d:31:cd:9a:6e:
e9:d0:77:9b:8f:97:f3:e5:e6:4b:b1:37:32:46:39:d6:29:0b:
72:e0:02:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:45:35 2026 by rpki-client