Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/xWe4rZ63bwcir3qDRpZvUz_bMfQ.roa
File: xWe4rZ63bwcir3qDRpZvUz_bMfQ.roa (raw, json)
Hash identifier: afhytiVMUXYxoEk76QGj46otD9O5w2WJcpzKHL2/iGQ=
Subject key identifier: C5:67:B8:AD:9E:B7:6F:07:22:AF:7A:83:46:96:6F:53:3F:DB:31:F4
Certificate issuer: /CN=6d088cef28e02af7d00f297816c55f8e3c43d535
Certificate serial: 019EE5015024BD52BC56D76C654E3CBA1F02
Authority key identifier: 6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/xWe4rZ63bwcir3qDRpZvUz_bMfQ.roa
Signing time: Sat 20 Jun 2026 12:28:48 +0000
ROA not before: Sat 20 Jun 2026 12:28:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209847
IP address blocks: 77.91.73.0/24 maxlen: 24
77.91.74.0/24 maxlen: 24
77.91.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e5:01:50:24:bd:52:bc:56:d7:6c:65:4e:3c:ba:1f:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d088cef28e02af7d00f297816c55f8e3c43d535
Validity
Not Before: Jun 20 12:28:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c567b8ad9eb76f0722af7a8346966f533fdb31f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:02:ba:90:df:bd:75:dd:82:a8:e4:2b:54:4c:
72:5d:6d:4c:74:68:34:fb:07:39:c1:85:6a:7e:d7:
29:eb:72:54:76:6b:9e:54:48:c5:d7:39:34:69:b7:
2e:31:4b:ec:db:6a:96:bf:4b:fb:62:b1:6b:d5:6c:
98:b5:21:fc:7d:bf:c8:c7:7d:1a:5d:c9:26:e2:c0:
a5:81:cb:93:16:17:0e:36:18:ee:26:6b:5d:ae:df:
88:8e:4d:f6:6f:c0:68:c8:a4:57:33:89:83:1f:91:
7d:d6:11:75:ee:b3:1a:0e:e0:d8:92:45:6c:4b:bf:
6a:f1:2e:a3:a4:e4:77:bf:80:56:3e:66:75:c0:b5:
49:4c:19:93:14:d3:f0:1f:e8:c3:7c:8f:67:d8:38:
48:d1:a8:f0:77:a3:94:04:bf:d6:00:ab:71:df:54:
a9:8c:e0:3d:05:d6:47:05:c2:bf:ba:36:50:12:5b:
1b:52:8e:bb:ad:cc:69:27:29:e4:b2:e7:f0:bd:3c:
e7:13:1d:65:be:41:31:3b:3d:10:c5:d0:0e:56:fd:
28:da:65:8a:65:92:3a:4f:3c:f1:53:ae:d4:b4:ee:
f0:ac:78:46:98:0b:1b:b1:1f:bd:3e:82:76:8c:f7:
3d:d1:3b:37:17:11:d5:46:59:d4:33:a3:14:cc:bd:
df:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:67:B8:AD:9E:B7:6F:07:22:AF:7A:83:46:96:6F:53:3F:DB:31:F4
X509v3 Authority Key Identifier:
keyid:6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/xWe4rZ63bwcir3qDRpZvUz_bMfQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.91.73.0-77.91.75.255
Signature Algorithm: sha256WithRSAEncryption
93:b0:4c:00:4a:fa:aa:ab:c4:18:ee:dd:cd:2a:a8:a4:6c:ae:
c1:94:e1:de:c9:6c:00:ff:1e:47:7f:59:c2:13:84:3b:13:21:
56:54:22:73:e3:23:2a:d8:84:df:f3:a1:f0:09:31:b3:4a:b4:
b0:95:7f:ba:c2:f5:97:c1:a4:7e:6c:37:45:66:74:e2:0d:80:
a2:10:ca:f9:c7:26:90:4a:6c:a7:6a:13:33:af:4c:80:13:43:
b5:01:a3:29:e6:af:8c:6d:a3:d0:c5:3a:36:d6:77:d9:7d:4c:
dd:61:0d:a4:c2:7d:1e:44:e0:a2:a4:cc:df:b5:d7:6e:bd:ce:
0f:95:a1:76:6b:a3:a9:c8:07:b8:85:12:41:6a:7a:df:aa:6b:
82:5d:3d:06:3a:94:89:8c:26:28:db:ba:ef:e6:ae:f1:59:f0:
c6:f6:67:27:52:29:d5:c0:a4:b9:09:1e:67:c8:e0:49:ba:51:
88:1d:57:82:67:f8:47:cd:f2:ad:cf:45:80:cb:2d:24:2e:dd:
39:59:56:1a:b1:2b:6f:83:9c:9b:94:c1:f5:8d:0f:5a:05:7a:
65:2c:d4:ec:44:d5:1b:bc:ba:94:3c:f5:c9:ac:f3:e5:08:fd:
08:be:64:3e:28:9a:17:e3:ae:76:3b:e0:69:a1:7b:fb:21:68:
64:3b:36:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 19:36:28 2026 by rpki-client