Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/JbC08AZZ4yXpMlH-fCQSdJypEsk.roa
File: JbC08AZZ4yXpMlH-fCQSdJypEsk.roa (raw, json)
Hash identifier: dv25QT/BTHr/Vmlb0AXRPmd0ZYYxQm5AHmzhJRYqsHI=
Subject key identifier: 25:B0:B4:F0:06:59:E3:25:E9:32:51:FE:7C:24:12:74:9C:A9:12:C9
Certificate issuer: /CN=df895a3ee2211b6ee2df7202f09a426680d66269
Certificate serial: 019FFFCD3B8A2EBC459EFB6415E451ECAFA7
Authority key identifier: DF:89:5A:3E:E2:21:1B:6E:E2:DF:72:02:F0:9A:42:66:80:D6:62:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/JbC08AZZ4yXpMlH-fCQSdJypEsk.roa
Signing time: Fri 14 Aug 2026 10:24:27 +0000
ROA not before: Fri 14 Aug 2026 10:24:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215102
IP address blocks: 77.105.128.0/24 maxlen: 24
77.105.129.0/24 maxlen: 24
77.105.132.0/24 maxlen: 24
77.105.134.0/24 maxlen: 24
77.105.160.0/24 maxlen: 24
185.225.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 19:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ff:cd:3b:8a:2e:bc:45:9e:fb:64:15:e4:51:ec:af:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df895a3ee2211b6ee2df7202f09a426680d66269
Validity
Not Before: Aug 14 10:24:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=25b0b4f00659e325e93251fe7c2412749ca912c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:7f:a7:ee:5e:fe:af:92:4f:01:a2:9b:40:40:
c1:01:de:ae:75:9f:ce:d5:37:63:f2:17:a2:bf:74:
d1:18:5d:fc:a2:79:f0:47:62:f3:71:0b:96:18:a4:
47:b3:e7:a3:17:32:a0:5b:26:1c:e7:f5:7b:10:70:
1e:a7:a7:0c:b1:30:3b:0a:a2:a8:ca:d9:82:8f:90:
5f:d2:11:9c:76:e4:e0:6e:1c:c1:7b:ac:67:c1:c5:
0a:b5:13:82:c5:b4:56:03:fc:23:8a:09:52:2c:64:
1d:e5:22:be:26:38:50:ec:19:cd:52:a8:b3:55:e6:
15:41:d4:e1:ca:a4:67:d1:f6:09:29:66:68:c8:7b:
ca:b7:9d:fb:58:e2:dd:e2:e4:62:31:0e:a4:9b:60:
a0:8c:65:39:a4:c9:99:4f:13:c0:dc:42:ad:af:5c:
9e:ca:4c:6c:7c:25:9f:41:93:49:c6:3d:65:0e:00:
38:55:98:72:72:73:3f:c1:76:b7:cf:e3:4a:21:64:
c3:22:1c:38:26:29:83:5b:b8:54:ea:e1:46:fa:ab:
22:d7:7a:54:9c:6d:7f:43:3e:b2:23:25:d5:80:5d:
83:6b:b3:f3:7d:46:34:da:76:14:24:aa:8b:1b:b8:
35:ef:f0:38:9f:96:6f:5d:1b:1a:89:d3:f1:21:d3:
a2:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:B0:B4:F0:06:59:E3:25:E9:32:51:FE:7C:24:12:74:9C:A9:12:C9
X509v3 Authority Key Identifier:
keyid:DF:89:5A:3E:E2:21:1B:6E:E2:DF:72:02:F0:9A:42:66:80:D6:62:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/JbC08AZZ4yXpMlH-fCQSdJypEsk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.128.0/23
77.105.132.0/24
77.105.134.0/24
77.105.160.0/24
185.225.202.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:43:af:18:ec:f3:b4:80:23:2a:6b:ee:e3:b5:79:71:19:c3:
16:87:78:e2:15:d9:ff:f0:47:9d:cb:af:21:97:5a:a4:e5:b0:
33:07:0f:e6:4c:32:13:b6:14:93:34:09:ec:dd:6e:4e:ed:3c:
f3:1e:f6:11:0f:eb:79:78:c7:4c:84:8e:28:ac:18:22:29:bc:
0b:a6:7f:f1:86:80:df:eb:14:39:af:5e:fc:a4:f1:60:21:74:
a1:26:f6:e3:9e:46:7c:6d:ea:a7:c8:04:73:fa:86:c5:3a:2f:
27:be:01:bd:3c:9c:f6:11:02:0d:f7:ec:8c:43:1d:28:25:f3:
f7:ec:4e:b4:1e:e2:5e:b6:21:da:23:08:64:ab:9b:10:5b:28:
ac:d4:ec:f8:29:63:c2:87:e9:23:00:af:33:b3:ff:81:61:25:
d1:00:05:40:ce:95:11:da:da:ee:da:69:80:1b:c6:22:95:64:
6c:96:7c:bf:cb:d3:1b:b6:47:08:c1:36:fc:9a:60:ad:30:8a:
a3:72:87:95:af:9d:ea:b8:a5:22:c0:2a:73:98:26:39:67:bb:
db:73:b1:2c:57:d6:d0:e7:2f:93:32:1a:f5:a2:15:42:75:e6:
f1:54:a4:d8:e9:d0:2b:c7:59:ac:e3:1e:a3:91:c6:9a:89:fc:
74:da:91:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 02:31:15 2026 by rpki-client