Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/yHdW34MsZvRf5L0uQHXz6RWrFwI.roa
File: yHdW34MsZvRf5L0uQHXz6RWrFwI.roa (raw, json)
Hash identifier: JSv569j8ATz5a+yx2jJi3tYKYa7ZMr9tyf2V3AD/x+g=
Subject key identifier: C8:77:56:DF:83:2C:66:F4:5F:E4:BD:2E:40:75:F3:E9:15:AB:17:02
Certificate issuer: /CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c
Certificate serial: 019D315BDF1B841AC89621F12CA5D2C811C6
Authority key identifier: D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/yHdW34MsZvRf5L0uQHXz6RWrFwI.roa
Signing time: Fri 27 Mar 2026 22:13:17 +0000
ROA not before: Fri 27 Mar 2026 22:13:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 265137
IP address blocks: 77.110.67.0/24 maxlen: 24
77.110.69.0/24 maxlen: 24
77.110.73.0/24 maxlen: 24
77.110.78.0/24 maxlen: 24
77.110.86.0/24 maxlen: 24
77.110.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:31:5b:df:1b:84:1a:c8:96:21:f1:2c:a5:d2:c8:11:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c
Validity
Not Before: Mar 27 22:13:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c87756df832c66f45fe4bd2e4075f3e915ab1702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a0:ae:fd:5d:b8:48:f7:e4:3b:82:f5:84:c5:
a8:15:bc:90:a2:73:a6:94:9d:39:5c:2b:be:50:06:
3d:28:60:3f:d5:82:ad:43:a9:32:c5:71:e1:c3:51:
9d:79:e2:ab:42:f8:e1:00:02:87:85:fd:3d:17:56:
c7:47:b6:c6:ce:06:4c:35:6f:9b:b3:06:c7:76:77:
4a:8a:48:25:9b:29:76:87:2d:07:a0:d9:0b:74:e4:
35:31:c7:52:47:00:5c:01:c2:17:d0:d8:f2:ba:25:
11:bf:63:d3:ba:8c:35:0c:d3:5c:bd:3c:72:20:a4:
8d:ec:fa:39:9d:7f:ab:eb:ad:14:ef:ac:73:80:12:
c2:2b:85:c8:1e:8c:cc:a1:44:7e:33:a0:87:7a:39:
60:1a:f0:9d:33:05:95:b8:d6:5b:e7:26:df:7b:ea:
93:f3:83:8d:d2:39:7c:d5:cb:e2:6f:20:ed:34:cc:
d8:0f:6a:db:c8:50:b1:70:5c:a8:f6:6e:f3:cc:ab:
2d:e3:8e:1a:6d:4e:12:b7:5f:1b:92:26:55:26:1d:
40:6d:53:51:58:ee:d7:99:c9:02:71:a9:28:c8:f9:
e6:8d:34:8d:75:de:ab:98:3b:c9:3c:be:65:24:09:
f2:a6:ea:1d:8e:0b:08:40:0a:01:c2:aa:6d:13:8e:
8d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:77:56:DF:83:2C:66:F4:5F:E4:BD:2E:40:75:F3:E9:15:AB:17:02
X509v3 Authority Key Identifier:
keyid:D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/yHdW34MsZvRf5L0uQHXz6RWrFwI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.110.67.0/24
77.110.69.0/24
77.110.73.0/24
77.110.78.0/24
77.110.86.0/24
77.110.92.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:90:c3:91:b3:3b:5a:a9:6a:2e:f7:ff:36:c2:0b:44:e2:fd:
ca:f6:b5:c1:bb:5e:4e:f7:95:b7:ee:fe:44:0f:30:20:5b:ab:
17:72:6d:1e:81:e8:1b:d6:08:c6:a5:99:5d:e5:3d:a9:4d:ac:
77:f2:b3:e1:cc:1e:c3:52:21:59:9e:5f:03:b6:5f:a1:c7:18:
48:c6:b7:f9:c6:34:7f:c7:ed:7b:42:50:8c:d2:27:69:82:5b:
da:db:ac:7b:fe:08:05:1e:bb:12:df:cb:51:f7:bb:c0:25:54:
91:1c:87:d1:e3:9c:6f:62:2e:d9:ae:48:75:4f:30:ed:29:dc:
d4:f5:44:c7:0a:d7:8d:48:b9:63:0a:4b:8b:8d:c0:86:e7:8c:
f3:1d:53:30:52:07:86:95:dc:cb:1e:2a:45:cf:38:2d:cc:98:
3e:e3:e4:f2:24:de:a6:db:ca:ce:bc:9f:32:f3:c9:29:ae:f4:
b7:86:1a:49:f5:37:36:d3:8e:f0:f3:b2:6d:af:66:1c:33:0b:
71:72:1b:18:38:65:a8:1a:cc:57:cb:f7:43:17:3e:82:8a:6a:
61:b7:ef:85:24:17:57:dd:84:44:0c:cc:28:c8:71:d6:24:54:
38:cf:74:01:0e:43:d1:b0:63:4f:d0:9b:a6:ae:82:4b:98:1d:
5b:35:f1:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 20:13:02 2026 by rpki-client