Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/o5v2otthTxI9MaotpF4RXsxny8c.roa
File: o5v2otthTxI9MaotpF4RXsxny8c.roa (raw, json)
Hash identifier: 8Fkmii+rqIIBVQH5OTZvGOuhbJRNm26073tjiOdkjrw=
Subject key identifier: A3:9B:F6:A2:DB:61:4F:12:3D:31:AA:2D:A4:5E:11:5E:CC:67:CB:C7
Certificate issuer: /CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c
Certificate serial: 019DD9471BD431425BEE27C05FFDC80F488C
Authority key identifier: D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/o5v2otthTxI9MaotpF4RXsxny8c.roa
Signing time: Wed 29 Apr 2026 12:46:49 +0000
ROA not before: Wed 29 Apr 2026 12:46:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203273
IP address blocks: 77.110.109.0/24 maxlen: 24
77.110.114.0/24 maxlen: 24
77.110.115.0/24 maxlen: 24
77.110.119.0/24 maxlen: 24
77.110.122.0/24 maxlen: 24
77.110.123.0/24 maxlen: 24
77.110.124.0/24 maxlen: 24
77.110.125.0/24 maxlen: 24
77.110.126.0/24 maxlen: 24
77.110.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 18:48:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d9:47:1b:d4:31:42:5b:ee:27:c0:5f:fd:c8:0f:48:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c
Validity
Not Before: Apr 29 12:46:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a39bf6a2db614f123d31aa2da45e115ecc67cbc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2d:98:ff:14:40:b3:03:cd:f0:bc:0b:ba:78:
64:23:94:b7:e7:e6:8a:c3:a0:44:1b:df:2a:6f:a9:
b5:9f:06:07:54:c7:64:71:dc:5c:45:5a:a0:c3:69:
e9:13:c9:8b:e3:24:01:0a:c0:72:63:cc:4c:9a:5f:
14:89:78:25:c7:bb:25:2f:17:0f:56:24:40:7e:01:
86:e5:6a:ad:e4:a2:90:6b:f5:ed:4d:46:27:10:61:
58:f1:f8:c7:f5:ec:18:87:7c:22:52:fc:a0:65:53:
ec:1e:70:61:96:32:ad:31:b7:77:52:e7:c4:09:c0:
4e:c8:69:b8:e0:38:e5:f9:31:01:5b:05:05:c3:e3:
bf:ec:6d:b0:8c:e2:7b:58:81:33:b4:36:37:1f:07:
44:2d:9e:ff:e7:8c:05:40:31:37:82:5f:50:cc:35:
37:57:90:58:f8:b5:10:de:e3:e8:bb:2b:37:9a:f7:
ef:07:ab:8d:8f:6d:48:5e:67:06:d8:d4:49:f5:34:
cf:df:1b:98:9d:a5:80:57:4c:91:8d:e3:7c:1d:6d:
b7:f2:de:e2:55:2a:8e:d5:6b:78:1c:20:6c:d4:65:
3b:07:1c:d9:fc:c1:28:94:31:53:c2:4a:47:3c:5f:
d1:2d:88:70:11:0f:d3:47:68:5f:91:0c:f7:58:12:
bb:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:9B:F6:A2:DB:61:4F:12:3D:31:AA:2D:A4:5E:11:5E:CC:67:CB:C7
X509v3 Authority Key Identifier:
keyid:D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/o5v2otthTxI9MaotpF4RXsxny8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.110.109.0/24
77.110.114.0/23
77.110.119.0/24
77.110.122.0-77.110.127.255
Signature Algorithm: sha256WithRSAEncryption
a3:94:77:fc:12:e6:5e:b6:33:77:58:3b:da:9f:4f:14:4b:4e:
db:21:11:93:35:6a:18:70:06:b5:dd:bf:05:a1:87:ad:90:9a:
00:8e:6a:c1:84:e9:b4:0f:ae:8f:41:09:6b:88:b6:6b:d4:6a:
70:87:02:77:a6:67:28:75:be:a5:b1:19:78:5f:fa:6d:9f:12:
b0:b8:e0:c5:91:5b:15:0f:eb:c4:cd:7c:a1:e1:91:e2:a6:73:
77:f0:b8:e5:49:c5:66:6c:0c:f1:97:0c:19:3b:13:3f:4f:a3:
fc:d4:b3:9f:18:f7:8e:a2:4d:ad:99:47:19:ef:04:51:5e:6e:
ac:4d:2a:6a:37:1d:fd:21:2f:f7:e3:0a:df:08:a8:e4:43:9e:
f2:96:9d:e8:19:73:2e:4c:9d:48:51:14:6e:e1:1e:0a:a1:b0:
e9:00:58:f0:8c:9d:8c:44:30:2f:f3:95:f6:e9:4f:d9:24:bc:
b9:be:2b:c6:69:c5:17:31:98:82:05:4d:9c:d2:57:ac:3f:fd:
bf:fb:be:b8:32:dd:1d:90:86:bf:1a:e8:97:1e:3f:86:ae:c3:
a5:f8:57:82:b9:d3:8b:52:34:fc:a0:21:6f:ed:54:87:63:99:
5a:eb:01:76:b8:f7:b9:50:20:67:07:2f:b7:87:c0:77:92:c8:
c2:1c:4e:da
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAZ3ZRxvUMUJb7ifAX/3ID0iMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0Y2UyYmYwMDAxY2Q0MzBlOTI3N2ZiMDBlZDFhYmU1MWMw
YjVjN2MwHhcNMjYwNDI5MTI0NjQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMzliZjZhMmRiNjE0ZjEyM2QzMWFhMmRhNDVlMTE1ZWNjNjdjYmM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApi2Y/xRAswPN8LwLunhkI5S35+aK
w6BEG98qb6m1nwYHVMdkcdxcRVqgw2npE8mL4yQBCsByY8xMml8UiXglx7slLxcP
ViRAfgGG5Wqt5KKQa/XtTUYnEGFY8fjH9ewYh3wiUvygZVPsHnBhljKtMbd3UufE
CcBOyGm44Djl+TEBWwUFw+O/7G2wjOJ7WIEztDY3HwdELZ7/54wFQDE3gl9QzDU3
V5BY+LUQ3uPouys3mvfvB6uNj21IXmcG2NRJ9TTP3xuYnaWAV0yRjeN8HW238t7i
VSqO1Wt4HCBs1GU7BxzZ/MEolDFTwkpHPF/RLYhwEQ/TR2hfkQz3WBK75wIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFKOb9qLbYU8SPTGqLaReEV7MZ8vHMB8GA1UdIwQY
MBaAFNTOK/AAHNQw6Sd/sA7Rq+UcC1x8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMU00cjhBQWMxRERwSjMtd0R0R3I1UndMWEh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9iYTBiZDMtYjM2NS00NDYxLThmZmEt
MWY1NDMxZTJhNWFmLzEvbzV2Mm90dGhUeEk5TWFvdHBGNFJYc3hueThjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9iYTBiZDMtYjM2NS00NDYxLThmZmEtMWY1NDMxZTJhNWFm
LzEvMU00cjhBQWMxRERwSjMtd0R0R3I1UndMWEh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQATW5tAwQB
TW5yAwQATW53MAwDBAFNbnoDBAdNbgAwDQYJKoZIhvcNAQELBQADggEBAKOUd/wS
5l62M3dYO9qfTxRLTtshEZM1ahhwBrXdvwWhh62QmgCOasGE6bQPro9BCWuItmvU
anCHAnemZyh1vqWxGXhf+m2fErC44MWRWxUP68TNfKHhkeKmc3fwuOVJxWZsDPGX
DBk7Ez9Po/zUs58Y946iTa2ZRxnvBFFebqxNKmo3Hf0hL/fjCt8IqORDnvKWnegZ
cy5MnUhRFG7hHgqhsOkAWPCMnYxEMC/zlfbpT9kkvLm+K8ZpxRcxmIIFTZzSV6w/
/b/7vrgy3R2Qhr8a6JceP4auw6X4V4K504tSNPygIW/tVIdjmVrrAXa497lQIGcH
L7eHwHeSyMIcTto=
-----END CERTIFICATE-----
Generated at Wed May 6 04:14:51 2026 by rpki-client