Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/m24O6Wpo34YVFTi5GGLw487-z5U.roa
File: m24O6Wpo34YVFTi5GGLw487-z5U.roa (raw, json)
Hash identifier: 8LP656VRzP22y/4rrgOPp8IsbB22qkGycpmzkEoh59Q=
Subject key identifier: 9B:6E:0E:E9:6A:68:DF:86:15:15:38:B9:18:62:F0:E3:CE:FE:CF:95
Certificate issuer: /CN=ee8ba8824c5c8d207326a4a3ab893ebb8f5096ad
Certificate serial: 019EC54AC54A3F77188A40189A9661DACE2D
Authority key identifier: EE:8B:A8:82:4C:5C:8D:20:73:26:A4:A3:AB:89:3E:BB:8F:50:96:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7ouogkxcjSBzJqSjq4k-u49Qlq0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/m24O6Wpo34YVFTi5GGLw487-z5U.roa
Signing time: Sun 14 Jun 2026 08:41:11 +0000
ROA not before: Sun 14 Jun 2026 08:41:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 19905
IP address blocks: 77.232.97.0/24 maxlen: 24
2a02:cb81:1014::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/7ouogkxcjSBzJqSjq4k-u49Qlq0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/7ouogkxcjSBzJqSjq4k-u49Qlq0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7ouogkxcjSBzJqSjq4k-u49Qlq0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 11:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c5:4a:c5:4a:3f:77:18:8a:40:18:9a:96:61:da:ce:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee8ba8824c5c8d207326a4a3ab893ebb8f5096ad
Validity
Not Before: Jun 14 08:41:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9b6e0ee96a68df86151538b91862f0e3cefecf95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:a1:0f:14:bf:85:98:c9:81:46:3f:a3:a8:41:
83:41:89:93:0a:8f:48:d0:72:cf:75:31:6e:c9:6d:
bd:d6:54:d0:bc:b1:fb:ca:a1:21:07:00:69:02:50:
ec:81:94:44:a8:8f:3d:77:4d:ec:7e:37:87:38:43:
aa:e9:1a:fa:27:27:6e:3d:8f:1b:53:82:69:7a:50:
6f:e2:8b:75:fb:57:45:ff:ec:da:53:ff:44:78:b9:
c8:b9:3c:ab:be:e8:48:ee:35:b2:5e:ee:bd:f7:42:
62:35:6d:f7:54:55:58:c8:47:8a:ab:5e:a4:70:3a:
a6:3b:46:eb:4d:1f:99:ec:b8:a4:8c:d5:e3:60:43:
8f:96:c9:e8:4a:83:64:4b:26:1e:e5:d5:2d:f9:6b:
0e:64:b5:38:d0:c0:19:62:19:23:8e:6b:c6:78:b0:
43:26:00:cf:d4:a4:f0:fc:b2:70:37:5d:12:b3:e3:
36:a0:39:64:76:2f:a3:2d:80:d9:c6:56:e9:7d:00:
9d:1f:95:b0:8e:3a:2b:3c:48:71:2d:63:19:da:69:
3d:25:65:8e:17:84:d7:52:b1:59:09:f2:5f:72:65:
d4:81:f6:b3:13:0a:76:f0:de:70:63:fd:66:94:7a:
1d:b1:86:65:a0:25:db:ee:ef:b3:7d:18:ea:5e:8e:
91:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:6E:0E:E9:6A:68:DF:86:15:15:38:B9:18:62:F0:E3:CE:FE:CF:95
X509v3 Authority Key Identifier:
keyid:EE:8B:A8:82:4C:5C:8D:20:73:26:A4:A3:AB:89:3E:BB:8F:50:96:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ouogkxcjSBzJqSjq4k-u49Qlq0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/m24O6Wpo34YVFTi5GGLw487-z5U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/7ouogkxcjSBzJqSjq4k-u49Qlq0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.232.97.0/24
IPv6:
2a02:cb81:1014::/48
Signature Algorithm: sha256WithRSAEncryption
39:cd:05:db:37:e1:a0:b0:d3:e8:71:8c:7a:12:b0:9f:2e:47:
24:f7:f4:7d:ec:03:b7:0a:c5:e3:fa:07:56:59:f9:aa:e9:71:
5e:fa:0a:26:6f:c6:bb:d3:12:92:73:ec:2b:fe:99:83:46:82:
ca:11:8d:37:56:a7:b5:46:71:4a:f4:53:a3:f4:58:6a:16:b6:
65:9c:70:15:09:e7:e9:54:ab:63:83:a9:7a:bf:be:6b:22:a5:
b7:cf:14:c3:6b:46:e6:91:fa:67:08:f0:a3:62:21:02:e9:0c:
9c:c9:29:18:91:9c:a5:07:3f:53:b5:9c:10:f5:2a:bf:26:4e:
ea:82:d3:b9:30:b1:d8:41:b5:0d:56:7b:9a:7f:ef:9c:94:42:
fc:32:67:e0:be:cd:e7:1e:de:ec:65:e0:e4:6a:bb:29:a6:f2:
00:57:f3:6b:7a:f8:eb:36:b6:2b:3a:dd:70:7b:f5:7a:a8:2d:
75:c5:aa:95:e0:c5:c6:e1:21:07:d6:74:62:7c:dd:bc:14:b8:
93:e2:ab:0e:fc:d7:f8:35:d6:af:af:01:0e:d0:e2:1d:66:5d:
2e:0a:e8:a5:de:1a:15:70:59:43:c8:72:39:75:44:08:73:6f:
51:d0:ca:18:7f:38:bb:a1:bc:5a:d0:cd:2f:02:77:08:15:76:
6b:0b:19:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 19:31:48 2026 by rpki-client