Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/59577d-2d4d-411d-86fb-00faecac7deb/1/PBcKVUNT6cnzq3vzaBEo4gtl5Z8.roa
File: PBcKVUNT6cnzq3vzaBEo4gtl5Z8.roa (raw, json)
Hash identifier: HYfjlIXaOozI/rCMC4UWmLkpHij9kD07KSE4H24zW7s=
Subject key identifier: 3C:17:0A:55:43:53:E9:C9:F3:AB:7B:F3:68:11:28:E2:0B:65:E5:9F
Certificate issuer: /CN=d3ff9749ee22f009257b89d8340cc64fb40bfc91
Certificate serial: 019ED4E3C29B520D0CF88C30FE67AA5A13FC
Authority key identifier: D3:FF:97:49:EE:22:F0:09:25:7B:89:D8:34:0C:C6:4F:B4:0B:FC:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0_-XSe4i8Akle4nYNAzGT7QL_JE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/59577d-2d4d-411d-86fb-00faecac7deb/1/PBcKVUNT6cnzq3vzaBEo4gtl5Z8.roa
Signing time: Wed 17 Jun 2026 09:22:36 +0000
ROA not before: Wed 17 Jun 2026 09:22:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213473
IP address blocks: 77.83.88.0/22 maxlen: 22
77.83.88.0/24 maxlen: 24
77.83.89.0/24 maxlen: 24
77.83.90.0/24 maxlen: 24
77.83.91.0/24 maxlen: 24
77.92.160.0/21 maxlen: 21
77.92.160.0/24 maxlen: 24
77.92.161.0/24 maxlen: 24
77.92.162.0/24 maxlen: 24
77.92.163.0/24 maxlen: 24
77.92.164.0/24 maxlen: 24
77.92.165.0/24 maxlen: 24
77.92.166.0/24 maxlen: 24
77.92.167.0/24 maxlen: 24
77.92.180.0/22 maxlen: 22
77.92.180.0/24 maxlen: 24
77.92.181.0/24 maxlen: 24
77.92.182.0/24 maxlen: 24
77.92.183.0/24 maxlen: 24
91.220.94.0/24 maxlen: 24
185.225.56.0/22 maxlen: 22
185.225.56.0/24 maxlen: 24
185.225.57.0/24 maxlen: 24
185.225.58.0/24 maxlen: 24
185.225.59.0/24 maxlen: 24
2a14:e500::/29 maxlen: 29
2a14:e500::/30 maxlen: 30
2a14:e504::/30 maxlen: 30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/59577d-2d4d-411d-86fb-00faecac7deb/1/0_-XSe4i8Akle4nYNAzGT7QL_JE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/59577d-2d4d-411d-86fb-00faecac7deb/1/0_-XSe4i8Akle4nYNAzGT7QL_JE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0_-XSe4i8Akle4nYNAzGT7QL_JE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 18:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d4:e3:c2:9b:52:0d:0c:f8:8c:30:fe:67:aa:5a:13:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3ff9749ee22f009257b89d8340cc64fb40bfc91
Validity
Not Before: Jun 17 09:22:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3c170a554353e9c9f3ab7bf3681128e20b65e59f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:bf:c9:42:37:94:45:1f:58:fd:0c:b6:4e:5e:
6e:d4:d5:9d:88:94:8e:97:f0:1c:3c:67:6a:44:2b:
e9:a4:43:7d:67:51:5a:e5:b5:60:d8:8b:1d:7a:7b:
da:09:07:60:66:5e:7f:2a:bc:8f:0b:48:59:f9:5b:
54:ba:7f:db:41:6b:e0:ef:85:8e:2e:40:a3:3d:76:
f8:45:f0:94:25:70:af:a6:8c:05:fe:a0:b5:c5:bc:
20:ac:c5:68:58:5c:07:46:cf:0c:de:2b:56:0d:d2:
fb:d9:43:47:86:c0:27:74:d7:5d:a6:ca:fd:fa:06:
dc:a5:cd:23:3a:4d:d2:b7:32:7f:06:21:7d:fc:5e:
bb:f3:6d:24:0a:16:ce:57:92:fa:ff:64:01:5a:15:
60:27:d8:e8:20:07:8e:9a:30:bd:c3:0d:e3:77:fc:
3f:63:ad:05:b9:cd:89:6d:87:aa:58:d7:8f:e8:6e:
a7:99:7e:7b:b6:a6:69:53:3d:78:49:27:71:ef:9d:
a9:56:21:3d:38:b3:6f:af:0e:34:62:0e:4e:8d:48:
ec:13:35:62:f9:71:a7:62:f9:f4:9d:79:32:85:d2:
eb:87:9b:f5:af:03:69:b6:bd:f8:18:ae:e3:e4:c5:
d5:23:0d:39:48:0f:02:20:d3:46:4c:1f:34:d8:32:
d4:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:17:0A:55:43:53:E9:C9:F3:AB:7B:F3:68:11:28:E2:0B:65:E5:9F
X509v3 Authority Key Identifier:
keyid:D3:FF:97:49:EE:22:F0:09:25:7B:89:D8:34:0C:C6:4F:B4:0B:FC:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0_-XSe4i8Akle4nYNAzGT7QL_JE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/59577d-2d4d-411d-86fb-00faecac7deb/1/PBcKVUNT6cnzq3vzaBEo4gtl5Z8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/59577d-2d4d-411d-86fb-00faecac7deb/1/0_-XSe4i8Akle4nYNAzGT7QL_JE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.88.0/22
77.92.160.0/21
77.92.180.0/22
91.220.94.0/24
185.225.56.0/22
IPv6:
2a14:e500::/29
Signature Algorithm: sha256WithRSAEncryption
27:da:e3:aa:f9:59:0a:dc:dc:d9:24:f4:7e:f9:0b:80:97:27:
56:30:0b:7b:31:b0:eb:db:61:b1:f9:6f:23:f5:12:19:94:8b:
2c:c2:89:32:20:84:e3:e5:6e:18:70:a7:0b:fd:57:36:60:c6:
c3:cd:48:99:33:2c:2e:7f:fd:9a:60:f7:68:69:26:82:2d:b7:
fb:73:79:fa:93:ce:58:27:b0:fd:03:5d:cf:92:d8:cd:f3:a2:
a2:02:35:a2:c2:66:6e:0f:04:d2:e7:62:1a:c2:7a:d3:11:93:
ae:94:67:9f:78:9a:ab:74:4d:eb:4e:7a:16:24:fb:5f:ba:ea:
6a:ec:78:28:13:ab:cc:ac:62:1c:0e:a4:9d:83:ad:cb:0c:43:
65:38:98:9a:c4:86:c1:71:30:c7:21:e9:fa:ac:a9:5b:e7:fb:
ea:be:6a:50:2b:55:60:4a:03:4d:8c:1c:f3:41:b0:26:f8:4d:
42:3c:89:03:b3:80:3d:9e:56:28:78:3e:47:5c:c3:66:48:42:
db:01:0c:2a:aa:82:2d:b6:a7:9b:a3:f3:a9:bd:d8:05:e2:79:
83:4e:f6:b5:4d:cb:de:9c:4a:74:9d:c2:65:cc:a6:d3:9a:2f:
0e:eb:bd:12:e6:e5:9a:03:6d:0b:7f:2c:4c:45:f7:9f:30:f2:
ab:5d:43:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:27:45 2026 by rpki-client