Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/ufJWMAdllEMmIPcuF9xb-uLZ_Ug.roa
File: ufJWMAdllEMmIPcuF9xb-uLZ_Ug.roa (raw, json)
Hash identifier: WQKwVoqUwSPAOPq2m2hpOUE0h89BiOqZqr9Z2GNDF64=
Subject key identifier: B9:F2:56:30:07:65:94:43:26:20:F7:2E:17:DC:5B:FA:E2:D9:FD:48
Certificate issuer: /CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c
Certificate serial: 019F42CE995E5D4C9D58142D256953CD5A80
Authority key identifier: D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/ufJWMAdllEMmIPcuF9xb-uLZ_Ug.roa
Signing time: Wed 08 Jul 2026 17:37:43 +0000
ROA not before: Wed 08 Jul 2026 17:37:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59447
IP address blocks: 77.110.66.0/24 maxlen: 24
77.110.71.0/24 maxlen: 24
77.110.74.0/24 maxlen: 24
77.110.75.0/24 maxlen: 24
77.110.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:42:ce:99:5e:5d:4c:9d:58:14:2d:25:69:53:cd:5a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c
Validity
Not Before: Jul 8 17:37:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b9f25630076594432620f72e17dc5bfae2d9fd48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:89:e7:75:18:48:15:ec:93:1d:95:d4:fc:13:
9a:44:56:20:28:80:c5:2d:32:4a:3f:1e:3e:7d:29:
7d:23:5d:af:24:10:e2:4f:81:87:41:dc:82:9e:a9:
18:3a:cf:41:13:8a:f4:c5:d9:db:ba:91:e9:61:3b:
65:a7:53:7b:6e:06:9f:d6:7f:7e:71:6a:c7:69:56:
11:b7:14:c2:44:56:b0:cb:07:76:1a:d1:32:ee:5d:
84:f4:46:a9:f0:2b:ad:97:93:08:0d:7c:4b:22:f0:
6e:f7:53:61:b7:39:99:eb:e4:19:f6:32:78:cb:d6:
b8:60:01:54:a5:31:fd:71:1b:2f:6f:71:8c:81:d4:
0b:88:8a:4b:4c:6f:e2:45:1e:65:f6:fb:cb:40:b4:
49:72:5c:22:8d:08:2b:81:62:a8:c4:66:06:3b:ca:
0f:95:ce:e0:6b:49:d6:3c:38:c4:61:72:56:bf:4a:
e8:53:d9:9c:08:48:8e:9c:ec:ce:f7:52:c2:58:f3:
7c:6e:46:bd:aa:95:d0:55:ad:33:92:eb:81:68:69:
19:2a:8f:a0:71:86:42:50:15:2b:b8:79:77:76:0a:
4d:5b:75:12:39:d3:e9:37:dc:aa:9b:63:d7:17:ba:
56:04:a0:95:31:64:c2:f9:e3:64:67:7a:65:3f:66:
0f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:F2:56:30:07:65:94:43:26:20:F7:2E:17:DC:5B:FA:E2:D9:FD:48
X509v3 Authority Key Identifier:
keyid:D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/ufJWMAdllEMmIPcuF9xb-uLZ_Ug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.110.66.0/24
77.110.71.0/24
77.110.74.0/23
77.110.77.0/24
Signature Algorithm: sha256WithRSAEncryption
37:1a:6f:f0:c8:73:e5:3b:7a:3e:e2:fc:be:2d:a5:aa:36:37:
a5:7c:9a:db:82:68:6c:40:85:61:c8:cb:61:ef:dc:bb:d8:0d:
47:52:fd:4e:3d:2c:7a:2f:ad:2e:52:c4:35:30:0a:36:78:ce:
a4:d4:f3:95:b8:94:73:3c:e0:46:f8:4d:a7:d4:6c:3b:11:26:
94:ec:e8:11:fe:19:35:52:c8:a1:5a:58:38:ed:bc:a6:d5:8e:
5d:67:6a:5e:9a:89:7a:08:14:48:52:9e:c4:9d:8f:7f:d7:5c:
75:35:fe:c6:73:c7:43:66:6b:9c:29:fc:13:34:ba:e9:52:70:
ee:a9:bd:8d:bb:83:b1:93:a3:36:be:ec:d5:18:9e:bf:0f:af:
dd:7d:22:4b:6f:45:72:c2:f8:f9:5e:4f:3f:99:c7:56:16:3d:
dd:33:e6:41:09:4d:f6:c4:9d:70:cf:19:24:8f:18:c4:dd:45:
c7:4f:a2:47:0c:15:00:fb:7b:4c:fb:1c:7f:44:62:d7:a6:38:
3e:dd:4f:38:ff:41:86:7b:75:c1:ad:4a:ca:19:30:73:55:45:
cf:46:f5:2b:be:a0:ff:4a:99:48:0e:50:c3:10:c1:ff:5d:08:
63:ab:0a:3a:0e:c0:4d:26:18:ff:3b:ed:84:66:25:04:31:ee:
d1:7b:ba:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:13:25 2026 by rpki-client