Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/CtHauIzgAIBJTflz-yD7WJD8Jn8.roa
File: CtHauIzgAIBJTflz-yD7WJD8Jn8.roa (raw, json)
Hash identifier: A1Vbm6qIGCatC5soS3/Q/VMSpCtDW9k9MFyR+Iv51Z4=
Subject key identifier: 0A:D1:DA:B8:8C:E0:00:80:49:4D:F9:73:FB:20:FB:58:90:FC:26:7F
Certificate issuer: /CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Certificate serial: 01A152B71CD08B9CCF9B75D23CBE01F3EC15
Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/CtHauIzgAIBJTflz-yD7WJD8Jn8.roa
Signing time: Mon 19 Oct 2026 05:51:34 +0000
ROA not before: Mon 19 Oct 2026 05:51:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402236
IP address blocks: 77.111.117.0/24 maxlen: 24
77.111.123.0/24 maxlen: 24
92.61.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 15:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:52:b7:1c:d0:8b:9c:cf:9b:75:d2:3c:be:01:f3:ec:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Validity
Not Before: Oct 19 05:51:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0ad1dab88ce00080494df973fb20fb5890fc267f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:79:11:f2:aa:13:e7:e0:c0:47:ce:77:31:5c:
8b:19:33:db:66:42:51:ad:b9:cb:c0:04:12:6a:8d:
5d:ad:b5:74:65:b4:24:c3:3a:62:b4:5c:43:97:b1:
84:4e:6d:18:1d:ae:0d:a6:ca:e7:7c:72:d9:a2:6a:
17:9d:e3:81:b5:bd:a5:18:3a:1d:87:af:ed:43:c7:
b5:30:cd:ee:15:dd:27:02:14:47:25:33:8f:70:92:
28:6c:c0:e7:f4:2b:cd:b5:88:5a:b5:c1:ce:24:e7:
bf:70:44:dd:79:5a:33:8d:85:64:10:71:8e:ae:db:
3c:32:a5:f5:ab:c4:81:90:b9:72:4f:53:0e:d3:66:
9f:0d:e7:eb:b5:46:0c:e2:f3:ae:c2:51:75:f9:0d:
53:6a:d6:75:26:06:2b:2f:77:93:8d:1f:4b:9b:f9:
1e:74:6b:c5:d2:ae:86:62:9d:17:1b:22:54:0a:63:
6b:b8:3f:8c:65:47:a9:13:e5:ae:bf:27:76:b7:53:
85:c5:bf:fd:ee:6d:dd:7f:53:11:9a:77:3a:47:b9:
61:b8:c7:05:f2:da:19:16:26:6c:d7:69:ad:06:f7:
68:c5:75:ba:91:ff:29:83:b1:c0:40:8d:f3:87:3c:
3d:91:3a:ae:ab:2d:9c:92:72:62:4e:fa:a0:de:96:
c4:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:D1:DA:B8:8C:E0:00:80:49:4D:F9:73:FB:20:FB:58:90:FC:26:7F
X509v3 Authority Key Identifier:
keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/CtHauIzgAIBJTflz-yD7WJD8Jn8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.111.117.0/24
77.111.123.0/24
92.61.109.0/24
Signature Algorithm: sha256WithRSAEncryption
21:76:46:bc:c4:30:d7:e3:bb:80:6f:bb:8b:cd:02:0b:3b:0e:
d8:62:d9:a4:7d:2b:f8:36:67:0e:b4:44:20:ac:19:5f:42:5c:
eb:c0:99:d2:1d:d5:70:b4:c3:95:6a:03:3c:08:34:3c:e0:90:
25:ae:57:61:45:5e:71:38:10:75:59:5b:90:2d:8a:00:64:02:
07:52:20:c9:33:cf:37:f6:91:ed:c0:20:b8:d1:b9:87:6c:9b:
8b:0f:90:7b:63:fa:40:70:f2:27:18:db:1c:a9:0e:e7:53:a9:
92:b0:8d:86:f7:fd:e6:18:a7:5d:6b:69:6e:3a:39:01:e6:8a:
33:18:bd:38:20:4f:23:fe:d1:e4:0f:81:d6:7e:74:d4:eb:69:
21:76:52:cc:b7:fb:2b:cd:27:79:f8:d4:74:32:b7:9d:6d:0c:
db:d0:0c:d1:e7:f5:db:4d:90:99:b6:27:28:6a:c1:8d:96:c6:
6e:3f:fd:c0:7f:48:c9:21:58:15:9e:dc:fb:e8:48:2a:e8:39:
2c:63:77:7e:cb:4e:3a:4d:b9:0f:2e:ab:59:63:bf:ee:e9:5a:
76:2c:b1:35:eb:97:37:f0:5b:c4:87:94:22:c4:b7:fb:61:55:
9c:ee:7c:57:9d:63:e6:e7:c9:aa:d5:5c:59:27:e0:20:61:70:
33:0b:c6:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 00:17:16 2026 by rpki-client