Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/gWq9l39B760m8BwJ6FnVCEx3RYw.roa
File: gWq9l39B760m8BwJ6FnVCEx3RYw.roa (raw, json)
Hash identifier: xDFQoaIioQRvVfbb2XuMIMFADpDMmuQXWxpgyLuFXOs=
Subject key identifier: 81:6A:BD:97:7F:41:EF:AD:26:F0:1C:09:E8:59:D5:08:4C:77:45:8C
Certificate issuer: /CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c
Certificate serial: 019FEB2DBE76616D3845987241432196986A
Authority key identifier: D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/gWq9l39B760m8BwJ6FnVCEx3RYw.roa
Signing time: Mon 10 Aug 2026 10:17:51 +0000
ROA not before: Mon 10 Aug 2026 10:17:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59447
IP address blocks: 77.110.66.0/24 maxlen: 24
77.110.75.0/24 maxlen: 24
77.110.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:eb:2d:be:76:61:6d:38:45:98:72:41:43:21:96:98:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c
Validity
Not Before: Aug 10 10:17:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=816abd977f41efad26f01c09e859d5084c77458c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:49:22:69:68:05:b8:2f:7b:e4:a4:e8:b3:a4:
4d:fc:bd:99:3f:5f:6e:01:e8:59:da:03:86:4f:5e:
d0:3a:ee:7b:89:61:cb:dd:65:3b:46:fa:05:53:ef:
df:f8:dd:53:65:54:b4:f9:ab:e8:8e:a5:6c:2a:aa:
a2:8d:c4:78:59:b0:df:fb:3a:65:b2:61:15:11:de:
3c:83:d0:91:af:fc:80:17:40:39:86:b8:b4:62:9f:
a9:c8:28:b5:58:c7:8c:b8:a6:b9:56:85:bf:a4:1b:
9f:33:b4:ea:75:ab:fe:bb:fa:b9:9e:f2:df:76:5a:
8b:fe:42:58:f0:a7:63:11:1f:97:0b:c4:e1:11:a4:
50:35:63:26:1f:7b:8b:a6:25:48:26:cd:1f:9f:6e:
af:a4:74:00:f1:36:d0:41:44:b8:c0:10:11:64:08:
23:a2:c2:a2:1f:80:90:e8:a2:57:36:72:7b:b7:d9:
89:8f:b6:51:38:bd:c7:90:9b:2d:96:2b:0e:25:be:
fa:1a:27:4e:f5:91:90:10:e8:d8:d8:09:9a:69:81:
39:bc:a9:2d:4a:ae:91:08:02:c8:9d:e7:c2:7e:5d:
14:26:c0:48:dc:4c:b0:52:38:92:ba:39:38:e7:45:
41:67:9e:0e:78:9c:c4:6e:2b:8f:d4:b3:a3:1d:14:
c4:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:6A:BD:97:7F:41:EF:AD:26:F0:1C:09:E8:59:D5:08:4C:77:45:8C
X509v3 Authority Key Identifier:
keyid:D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/gWq9l39B760m8BwJ6FnVCEx3RYw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.110.66.0/24
77.110.75.0/24
77.110.77.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:c7:e7:9d:fc:45:6c:5f:6d:2c:06:0d:89:f5:56:62:bd:cb:
69:93:11:4e:6c:17:32:d3:8a:ff:ee:8d:45:1f:39:27:2c:b3:
43:fc:7c:ad:35:ba:9e:1e:39:67:17:22:c4:c9:ec:c5:cb:94:
a2:80:92:7f:9d:37:bd:81:ed:eb:b7:06:05:ed:af:73:a5:02:
91:07:84:8c:b2:42:17:65:bd:0a:d9:c0:46:cf:7a:05:04:45:
23:ed:4c:a0:32:d2:da:18:b7:27:ed:3a:44:ad:d5:76:69:c5:
df:b2:fd:cc:0c:97:a7:83:e7:3a:92:bb:cf:b6:1a:bf:b0:27:
4f:42:36:1b:9d:c1:af:db:71:0a:99:68:db:58:95:a4:21:78:
29:62:60:fa:0f:fa:88:35:67:c5:dc:4e:f5:3e:d6:94:c8:40:
e1:83:93:71:32:bb:50:78:b9:ed:c3:f1:74:65:e5:4e:e5:bf:
bc:dd:b6:3d:db:2d:0e:4a:11:51:6d:f9:56:ab:c4:c7:3a:f0:
e8:29:8a:cc:d2:73:dc:4f:95:63:c4:66:4b:b6:6f:fb:00:43:
36:e3:10:ce:48:2f:06:e3:d2:6a:f3:7b:2e:89:58:f9:12:d2:
cd:90:12:b8:b6:c8:8a:b4:ef:8a:1e:33:86:99:c7:8e:cc:65:
9e:42:12:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:26:57 2026 by rpki-client