Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/xrK-gFzKLBW4kF9DuEV9G9NGWek.roa
File: xrK-gFzKLBW4kF9DuEV9G9NGWek.roa (raw, json)
Hash identifier: STi2LtHiMLVYX0A2icVHDyUOaCfzOkKw4aSBJjOIJ3I=
Subject key identifier: C6:B2:BE:80:5C:CA:2C:15:B8:90:5F:43:B8:45:7D:1B:D3:46:59:E9
Certificate issuer: /CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c
Certificate serial: 019FC6552050FABF7AACBFE45663F7975213
Authority key identifier: D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/xrK-gFzKLBW4kF9DuEV9G9NGWek.roa
Signing time: Mon 03 Aug 2026 06:34:55 +0000
ROA not before: Mon 03 Aug 2026 06:34:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208185
IP address blocks: 77.110.65.0/24 maxlen: 24
77.110.72.0/24 maxlen: 24
77.110.89.0/24 maxlen: 24
80.71.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Aug 2026 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c6:55:20:50:fa:bf:7a:ac:bf:e4:56:63:f7:97:52:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c
Validity
Not Before: Aug 3 06:34:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c6b2be805cca2c15b8905f43b8457d1bd34659e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0b:ae:ea:02:55:17:d8:f2:34:b2:60:9f:d6:
05:a1:12:f2:96:68:52:a1:37:30:5e:bf:81:92:ab:
e9:ba:89:5c:2e:1b:12:b0:02:89:2f:24:f4:5d:a2:
8e:71:75:56:60:7d:f4:1e:e2:1a:f1:84:07:24:f0:
0a:44:de:a8:07:9a:4d:e3:39:90:08:54:05:9f:50:
62:55:1d:73:d4:78:cd:c3:06:c5:75:99:d6:a5:74:
bf:e8:e2:be:30:3b:db:69:4a:ff:c4:78:41:4a:32:
33:01:d0:66:ea:47:08:86:8a:d3:d2:b5:0e:82:d8:
b6:61:41:11:3c:77:8a:2f:ab:61:cb:ed:10:e1:57:
ac:12:51:41:1b:20:73:f5:8a:d9:a6:d6:a9:e8:f6:
3a:9b:e2:7e:13:7e:2a:6f:09:13:39:a7:fd:1a:aa:
3e:d1:92:78:8f:ff:0c:4e:b5:d7:d2:90:99:91:a2:
f0:b5:21:02:77:78:b8:99:f3:cc:fc:11:87:14:e5:
41:c7:2a:fe:46:63:2d:52:ac:93:67:19:83:af:92:
6e:12:43:95:0f:91:8f:52:03:cb:b4:ff:b2:18:44:
8b:32:56:52:b0:28:1b:ec:7e:61:d4:b8:e6:72:bd:
4c:54:36:02:ef:ae:ea:f7:ed:c1:3f:17:84:e5:f6:
9b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:B2:BE:80:5C:CA:2C:15:B8:90:5F:43:B8:45:7D:1B:D3:46:59:E9
X509v3 Authority Key Identifier:
keyid:D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/xrK-gFzKLBW4kF9DuEV9G9NGWek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.110.65.0/24
77.110.72.0/24
77.110.89.0/24
80.71.153.0/24
Signature Algorithm: sha256WithRSAEncryption
17:bd:0a:3f:8e:fc:85:66:72:3d:ea:af:75:7a:65:c3:50:63:
3a:05:e7:1f:7d:ec:6f:1b:d0:e6:a7:ab:bc:30:6d:3f:00:b7:
f4:ca:77:82:cc:5d:99:82:39:38:71:cb:bf:63:41:5a:03:43:
6b:7c:5b:b8:77:82:fa:7a:8f:4e:37:97:ad:b7:44:94:80:94:
33:f7:0a:80:b7:18:5d:84:9f:87:86:af:3c:69:40:15:b1:f2:
24:b7:21:c4:ab:a5:56:c4:7d:f7:ad:3f:e7:07:8b:04:ef:9c:
01:2e:92:f0:2b:c5:d6:33:01:b0:db:32:d8:8d:a8:db:f5:27:
77:1f:66:91:f7:47:14:8a:79:79:a6:d7:02:bf:b4:94:20:d9:
37:91:ae:63:d7:c3:83:39:74:39:81:08:37:cc:b5:c7:52:19:
3f:ed:0f:d2:8e:8c:15:58:45:a8:cd:7b:55:96:da:0e:85:93:
c7:4d:12:2f:5d:cf:e7:c0:2a:a3:54:80:40:21:7a:c9:00:3d:
7d:f7:0e:a0:26:46:2e:3d:55:1f:31:5b:17:67:72:13:f1:eb:
f4:63:fc:4e:23:8a:cd:52:c7:6c:91:46:35:a0:35:96:1f:bd:
ca:7d:ce:00:25:38:b9:32:9e:43:c2:f6:ec:d9:89:a2:ca:12:
50:a3:f6:d5
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZ/GVSBQ+r96rL/kVmP3l1ITMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0Y2UyYmYwMDAxY2Q0MzBlOTI3N2ZiMDBlZDFhYmU1MWMw
YjVjN2MwHhcNMjYwODAzMDYzNDU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNmIyYmU4MDVjY2EyYzE1Yjg5MDVmNDNiODQ1N2QxYmQzNDY1OWU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwuu6gJVF9jyNLJgn9YFoRLylmhS
oTcwXr+BkqvpuolcLhsSsAKJLyT0XaKOcXVWYH30HuIa8YQHJPAKRN6oB5pN4zmQ
CFQFn1BiVR1z1HjNwwbFdZnWpXS/6OK+MDvbaUr/xHhBSjIzAdBm6kcIhorT0rUO
gti2YUERPHeKL6thy+0Q4VesElFBGyBz9YrZptap6PY6m+J+E34qbwkTOaf9Gqo+
0ZJ4j/8MTrXX0pCZkaLwtSECd3i4mfPM/BGHFOVBxyr+RmMtUqyTZxmDr5JuEkOV
D5GPUgPLtP+yGESLMlZSsCgb7H5h1Ljmcr1MVDYC767q9+3BPxeE5fabNwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFMayvoBcyiwVuJBfQ7hFfRvTRlnpMB8GA1UdIwQY
MBaAFNTOK/AAHNQw6Sd/sA7Rq+UcC1x8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMU00cjhBQWMxRERwSjMtd0R0R3I1UndMWEh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9iYTBiZDMtYjM2NS00NDYxLThmZmEt
MWY1NDMxZTJhNWFmLzEveHJLLWdGektMQlc0a0Y5RHVFVjlHOU5HV2VrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9iYTBiZDMtYjM2NS00NDYxLThmZmEtMWY1NDMxZTJhNWFm
LzEvMU00cjhBQWMxRERwSjMtd0R0R3I1UndMWEh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQATW5BAwQA
TW5IAwQATW5ZAwQAUEeZMA0GCSqGSIb3DQEBCwUAA4IBAQAXvQo/jvyFZnI96q91
emXDUGM6BecffexvG9Dmp6u8MG0/ALf0yneCzF2Zgjk4ccu/Y0FaA0NrfFu4d4L6
eo9ON5ett0SUgJQz9wqAtxhdhJ+Hhq88aUAVsfIktyHEq6VWxH33rT/nB4sE75wB
LpLwK8XWMwGw2zLYjajb9Sd3H2aR90cUinl5ptcCv7SUINk3ka5j18ODOXQ5gQg3
zLXHUhk/7Q/SjowVWEWozXtVltoOhZPHTRIvXc/nwCqjVIBAIXrJAD199w6gJkYu
PVUfMVsXZ3IT8ev0Y/xOI4rNUsdskUY1oDWWH73Kfc4AJTi5Mp5Dwvbs2YmiyhJQ
o/bV
-----END CERTIFICATE-----
Generated at Tue Aug 4 12:19:02 2026 by rpki-client