Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/0XLwdTu4nRGxVAQOFOgi-F-CPp8.roa
File: 0XLwdTu4nRGxVAQOFOgi-F-CPp8.roa (raw, json)
Hash identifier: pak6BtTzWa98W3dJFCCof2yZ3EkBaahZi9HG5ewTysQ=
Subject key identifier: D1:72:F0:75:3B:B8:9D:11:B1:54:04:0E:14:E8:22:F8:5F:82:3E:9F
Certificate issuer: /CN=df895a3ee2211b6ee2df7202f09a426680d66269
Certificate serial: 019F1D728A2E00B3DCDBF8AF28A906DDD64E
Authority key identifier: DF:89:5A:3E:E2:21:1B:6E:E2:DF:72:02:F0:9A:42:66:80:D6:62:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/0XLwdTu4nRGxVAQOFOgi-F-CPp8.roa
Signing time: Wed 01 Jul 2026 11:31:13 +0000
ROA not before: Wed 01 Jul 2026 11:31:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 77.105.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 01:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1d:72:8a:2e:00:b3:dc:db:f8:af:28:a9:06:dd:d6:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df895a3ee2211b6ee2df7202f09a426680d66269
Validity
Not Before: Jul 1 11:31:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d172f0753bb89d11b154040e14e822f85f823e9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d5:b3:91:e9:b9:47:71:a4:5b:f2:76:36:fc:
42:48:a0:93:a0:d1:bd:0d:11:24:25:de:48:30:2f:
97:7d:24:44:4d:c1:b6:4e:74:16:c8:1a:0e:4b:6e:
20:71:ca:ea:f3:b5:61:7d:9b:03:06:31:e5:17:92:
e5:22:49:b5:db:34:a2:95:a3:b5:7a:e0:89:2a:3a:
11:a9:d5:38:ec:63:7c:c0:12:8b:60:67:7f:f5:07:
6c:96:a0:74:f7:84:4c:89:73:1f:7a:89:7a:41:55:
38:b8:c9:7b:c9:ee:c4:c3:62:8a:4d:ba:72:bf:88:
3f:8d:1e:5e:dc:a2:ca:fc:e7:ac:d2:23:5c:9b:d2:
5d:7c:40:89:33:fa:8d:4d:33:b1:a5:b0:f1:b5:bd:
b5:a0:e9:97:06:87:90:12:27:47:77:35:38:a2:af:
bb:fb:f6:01:d5:4c:14:f9:ee:4a:11:74:b5:05:11:
d8:e0:b7:41:ed:af:76:93:a9:1c:33:e2:e8:f8:25:
63:c6:00:01:2f:61:94:c4:20:b5:99:1f:0d:fb:93:
38:5d:80:79:d8:c1:45:57:9c:85:a3:6e:a4:7f:1c:
81:26:b3:3e:8a:19:6a:72:13:82:b1:2c:37:fa:d0:
9a:17:f3:d4:b9:b2:84:94:0e:4e:9c:47:55:65:c4:
a6:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:72:F0:75:3B:B8:9D:11:B1:54:04:0E:14:E8:22:F8:5F:82:3E:9F
X509v3 Authority Key Identifier:
keyid:DF:89:5A:3E:E2:21:1B:6E:E2:DF:72:02:F0:9A:42:66:80:D6:62:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/0XLwdTu4nRGxVAQOFOgi-F-CPp8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.162.0/24
Signature Algorithm: sha256WithRSAEncryption
17:e6:f4:26:7d:ce:d9:65:73:13:e5:04:8e:31:b8:ef:0a:52:
bf:3f:78:31:fe:e3:f6:b3:c5:8f:b2:a5:ed:cc:4f:78:d3:05:
91:0a:47:7f:dc:5b:06:ee:de:6c:56:b2:41:74:4a:e3:0f:e9:
48:9e:27:9a:84:72:67:75:63:d0:de:c3:ff:04:b5:fd:08:0d:
dc:05:23:c2:16:0b:0c:94:de:f1:1d:91:81:fa:05:9c:38:38:
5f:65:dc:ca:62:51:f9:16:ac:8e:d5:91:42:c5:b4:83:86:d3:
1d:23:0f:c7:96:99:10:d6:bd:5d:4f:fb:fb:b5:3d:72:21:1b:
d9:f6:f1:28:74:e9:65:80:14:a6:ed:9e:69:fd:c1:d1:ce:d8:
b0:5d:c3:1a:7d:bc:c7:f0:2b:5a:b3:5b:07:92:12:4b:6a:98:
e9:02:04:77:d3:b5:bd:06:2f:95:54:3a:ce:2d:0a:a2:c3:3b:
17:9f:f0:73:83:a2:01:55:10:0c:a3:76:b7:4a:49:1d:e8:55:
16:9a:43:82:d9:60:61:e9:fa:3e:d5:65:1d:a4:62:d8:35:c7:
49:38:1f:86:74:64:d6:b1:bf:2e:85:dd:f2:69:58:46:f7:d9:
bd:80:cd:f5:ee:1b:5c:82:09:f8:c7:39:d3:a6:c4:89:34:aa:
78:a6:d4:41
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8dcoouALPc2/ivKKkG3dZOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmODk1YTNlZTIyMTFiNmVlMmRmNzIwMmYwOWE0MjY2ODBk
NjYyNjkwHhcNMjYwNzAxMTEzMTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMTcyZjA3NTNiYjg5ZDExYjE1NDA0MGUxNGU4MjJmODVmODIzZTlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdWzkem5R3GkW/J2NvxCSKCToNG9
DREkJd5IMC+XfSRETcG2TnQWyBoOS24gccrq87VhfZsDBjHlF5LlIkm12zSilaO1
euCJKjoRqdU47GN8wBKLYGd/9QdslqB094RMiXMfeol6QVU4uMl7ye7Ew2KKTbpy
v4g/jR5e3KLK/Oes0iNcm9JdfECJM/qNTTOxpbDxtb21oOmXBoeQEidHdzU4oq+7
+/YB1UwU+e5KEXS1BRHY4LdB7a92k6kcM+Lo+CVjxgABL2GUxCC1mR8N+5M4XYB5
2MFFV5yFo26kfxyBJrM+ihlqchOCsSw3+tCaF/PUubKElA5OnEdVZcSmGQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNFy8HU7uJ0RsVQEDhToIvhfgj6fMB8GA1UdIwQY
MBaAFN+JWj7iIRtu4t9yAvCaQmaA1mJpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzRsYVB1SWhHMjdpMzNJQzhKcENab0RXWW1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8xYTcyYTctMjc3ZC00NGY1LTg3ZGUt
NzBiMmViZDUxNDM4LzEvMFhMd2RUdTRuUkd4VkFRT0ZPZ2ktRi1DUHA4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC8xYTcyYTctMjc3ZC00NGY1LTg3ZGUtNzBiMmViZDUxNDM4
LzEvMzRsYVB1SWhHMjdpMzNJQzhKcENab0RXWW1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATWmiMA0G
CSqGSIb3DQEBCwUAA4IBAQAX5vQmfc7ZZXMT5QSOMbjvClK/P3gx/uP2s8WPsqXt
zE940wWRCkd/3FsG7t5sVrJBdErjD+lInieahHJndWPQ3sP/BLX9CA3cBSPCFgsM
lN7xHZGB+gWcODhfZdzKYlH5FqyO1ZFCxbSDhtMdIw/HlpkQ1r1dT/v7tT1yIRvZ
9vEodOllgBSm7Z5p/cHRztiwXcMafbzH8Ctas1sHkhJLapjpAgR307W9Bi+VVDrO
LQqiwzsXn/Bzg6IBVRAMo3a3Skkd6FUWmkOC2WBh6fo+1WUdpGLYNcdJOB+GdGTW
sb8uhd3yaVhG99m9gM317htcggn4xznTpsSJNKp4ptRB
-----END CERTIFICATE-----
Generated at Tue Jul 7 09:43:07 2026 by rpki-client