Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/PyKnTBSTkDPIDVBbhjOOufVhd_E.roa
File: PyKnTBSTkDPIDVBbhjOOufVhd_E.roa (raw, json)
Hash identifier: L5XCvfsftM2b/0qLlknkr5Urjwm07f0CMYHvFoCgNjA=
Subject key identifier: 3F:22:A7:4C:14:93:90:33:C8:0D:50:5B:86:33:8E:B9:F5:61:77:F1
Certificate issuer: /CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c
Certificate serial: 01A0620C7AE6042105B238DBF29BE9A38CFB
Authority key identifier: D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/PyKnTBSTkDPIDVBbhjOOufVhd_E.roa
Signing time: Wed 02 Sep 2026 12:16:20 +0000
ROA not before: Wed 02 Sep 2026 12:16:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208185
IP address blocks: 77.110.72.0/24 maxlen: 24
77.110.89.0/24 maxlen: 24
80.71.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 15:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:62:0c:7a:e6:04:21:05:b2:38:db:f2:9b:e9:a3:8c:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c
Validity
Not Before: Sep 2 12:16:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3f22a74c14939033c80d505b86338eb9f56177f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:38:12:66:14:b4:65:5f:6f:1b:d7:ad:4f:4f:
4a:b5:bf:1a:2b:07:45:65:cc:ea:21:91:07:8b:d1:
55:24:f2:18:d0:37:f2:c2:20:c9:71:d0:e6:a0:e5:
0b:90:b5:9e:9b:1d:f5:47:c8:e6:37:d2:ac:a3:9c:
64:2f:d6:d7:48:0f:36:af:fb:26:0f:a6:6d:31:19:
bc:71:12:9d:e2:c3:be:0c:85:0a:2c:51:c4:49:e5:
88:4b:02:48:31:18:cc:b5:d8:82:75:18:1a:26:06:
4b:ba:35:98:fd:b7:6c:54:56:f6:48:42:3a:20:35:
c4:41:68:7d:21:6a:e2:d0:1a:21:16:46:97:a9:f8:
2a:d0:80:3e:d6:aa:7e:d7:45:fb:0c:8f:0d:0e:f7:
c2:c6:49:c1:65:ff:a7:26:7a:9e:9f:d5:f2:16:a8:
31:13:53:b2:c2:21:eb:f5:9f:31:bb:0e:9b:b4:42:
f9:73:ce:87:4e:1c:11:e0:07:98:25:c8:8d:a9:fd:
ed:c2:5b:ae:09:5f:8e:cf:dc:3b:58:d0:58:ea:11:
3a:52:89:58:74:e5:73:91:fd:20:ea:75:12:fc:e3:
e1:67:e9:1c:87:ff:5c:b8:c1:16:52:33:5f:66:5b:
99:78:c1:a0:8d:dc:47:83:ae:11:9f:90:36:17:6d:
d3:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:22:A7:4C:14:93:90:33:C8:0D:50:5B:86:33:8E:B9:F5:61:77:F1
X509v3 Authority Key Identifier:
keyid:D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/PyKnTBSTkDPIDVBbhjOOufVhd_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.110.72.0/24
77.110.89.0/24
80.71.153.0/24
Signature Algorithm: sha256WithRSAEncryption
96:cb:96:b8:61:c4:52:ed:aa:cd:eb:3c:0a:f4:5a:29:05:7e:
2d:f1:09:03:90:c1:4d:82:8c:4f:92:e2:da:bd:ca:ab:f4:b8:
23:49:eb:70:b5:b5:26:99:78:85:39:e2:e6:7a:57:51:b7:19:
d2:c3:70:dd:d8:99:19:4d:1d:11:7b:a1:8f:cc:5f:e7:5c:e4:
0f:dc:34:6b:ac:fb:b3:97:47:1f:92:b2:b5:e6:20:ce:75:94:
f8:0e:5e:4d:1b:ff:6a:b0:4c:6f:42:07:10:ad:72:79:5e:1f:
1a:b6:de:61:fb:45:f6:bf:a3:ac:45:7f:a2:f6:1b:47:62:d7:
2b:ac:ad:21:70:63:15:38:26:94:8e:f5:fe:c2:ba:8b:8d:fa:
52:35:44:61:fd:b3:01:9a:7e:2b:74:ac:e8:75:6f:7d:ec:f5:
75:d7:c0:bd:93:e5:10:fb:d6:e0:d7:3c:6c:c7:34:b6:30:c4:
e9:43:d6:30:07:37:a8:b4:f3:ef:5a:83:df:8d:74:cd:fe:16:
44:33:54:3b:7a:40:16:e2:8c:62:bd:b9:d4:7c:b9:0c:22:9d:
4f:ca:85:8a:c8:4e:14:87:3e:b3:1f:40:24:d5:da:e8:9f:d9:
f1:9f:9b:c0:29:5c:38:21:9f:63:89:1b:57:fb:2c:33:ba:ce:
f7:ff:fc:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 22:06:05 2026 by rpki-client