Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/77Pzys8EjCWjn94m5-fvg7JsuLY.roa
File: 77Pzys8EjCWjn94m5-fvg7JsuLY.roa (raw, json)
Hash identifier: Rk/urrdOvsWhN/Fm8DGscorvloC/YwBsF8klanLEJB8=
Subject key identifier: EF:B3:F3:CA:CF:04:8C:25:A3:9F:DE:26:E7:E7:EF:83:B2:6C:B8:B6
Certificate issuer: /CN=6aa8fa75c5020cd6218cf7f109de420265204bac
Certificate serial: 01A07756EBCA5EFB699DFFA8EB8D4028984A
Authority key identifier: 6A:A8:FA:75:C5:02:0C:D6:21:8C:F7:F1:09:DE:42:02:65:20:4B:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aqj6dcUCDNYhjPfxCd5CAmUgS6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/77Pzys8EjCWjn94m5-fvg7JsuLY.roa
Signing time: Sun 06 Sep 2026 15:29:40 +0000
ROA not before: Sun 06 Sep 2026 15:29:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 46.29.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/aqj6dcUCDNYhjPfxCd5CAmUgS6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:77:56:eb:ca:5e:fb:69:9d:ff:a8:eb:8d:40:28:98:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6aa8fa75c5020cd6218cf7f109de420265204bac
Validity
Not Before: Sep 6 15:29:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=efb3f3cacf048c25a39fde26e7e7ef83b26cb8b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ae:d5:d1:69:30:7e:a0:ad:c5:59:c5:93:fe:
32:cf:4c:63:66:16:68:92:a3:14:43:c1:67:94:ce:
2f:26:f1:e4:7c:75:83:9c:0e:87:27:a7:ed:d4:21:
9a:96:ec:2c:5f:f1:64:b3:34:12:93:8c:a4:5a:0b:
44:20:1a:f2:bf:02:b0:d3:a7:cc:48:09:f6:5e:67:
69:89:73:f0:32:4a:59:46:53:1d:45:df:50:fe:14:
e7:ee:1d:93:bc:58:54:11:60:6a:80:0a:50:77:70:
35:14:a0:b5:ab:a9:e2:be:fc:ae:15:2b:a5:18:be:
41:6a:34:0d:60:bb:e2:f3:b3:ce:1e:7c:a0:56:9a:
ab:45:12:55:9a:4c:4c:f3:02:48:5c:51:1e:88:08:
bc:e1:c3:c2:8b:7c:9f:98:f0:14:f9:da:1e:e3:bb:
60:dd:18:26:6a:61:dc:0c:6e:44:17:09:e8:55:fb:
c9:2e:32:47:ac:75:1a:7f:59:99:0a:2a:5c:c9:36:
2e:eb:8b:a8:f8:db:eb:22:ee:79:64:bf:82:87:19:
2b:55:07:8a:2b:f2:8a:29:33:00:1e:a6:29:13:d4:
40:56:f1:1f:6c:df:ec:c3:95:53:6a:3b:f3:7b:d2:
94:8f:a4:85:bd:b9:d7:cb:34:d4:3e:96:e8:39:79:
84:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:B3:F3:CA:CF:04:8C:25:A3:9F:DE:26:E7:E7:EF:83:B2:6C:B8:B6
X509v3 Authority Key Identifier:
keyid:6A:A8:FA:75:C5:02:0C:D6:21:8C:F7:F1:09:DE:42:02:65:20:4B:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aqj6dcUCDNYhjPfxCd5CAmUgS6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/77Pzys8EjCWjn94m5-fvg7JsuLY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.29.36.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:b0:27:93:b3:e3:75:fd:df:d3:b6:53:6d:1e:a4:e4:68:4a:
a8:e1:0c:d2:69:2d:12:ae:9b:a2:a0:2f:86:81:b8:e4:84:84:
86:e1:bc:4c:60:d5:5f:5b:61:5e:bf:bf:dd:d9:12:0d:ce:51:
8c:a6:33:b1:b6:1f:79:ab:5e:75:4b:30:bb:99:8e:84:23:dd:
95:22:83:cc:a6:39:b3:81:e5:37:6b:59:fc:17:ae:de:c4:92:
0c:c2:39:cd:b1:80:f9:97:48:e4:55:43:95:13:46:89:b6:b1:
16:f8:47:06:f1:23:51:1b:b7:41:7f:7a:21:03:3f:b8:2f:52:
2c:ba:ee:cb:7f:b1:d6:7b:9f:29:85:63:66:70:73:0a:e2:38:
5c:20:9e:7c:8a:27:4f:9b:d7:56:04:10:74:33:6f:28:e6:54:
d7:77:83:48:7c:7a:5c:70:ba:e5:9c:b6:31:2b:99:7c:8f:15:
18:61:87:a3:f9:18:ee:e5:bc:38:9a:74:cb:0d:c0:ce:d3:c2:
b2:93:cf:9f:38:5e:02:26:28:1b:a3:5c:79:7a:37:4b:dd:17:
70:16:32:14:71:97:2c:74:1f:1f:75:67:ce:e7:33:21:81:97:
cd:bc:03:e7:86:c7:77:a1:0d:c4:65:48:91:5d:e8:56:d2:b4:
80:85:33:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:31:02 2026 by rpki-client