Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/4m9eLVMkHTFPf2NF4LzJX_qQn0U.roa
File: 4m9eLVMkHTFPf2NF4LzJX_qQn0U.roa (raw, json)
Hash identifier: /9nMh4yACPxJTj7myULJgg2MVuZyFPKpq45/pARYDvc=
Subject key identifier: E2:6F:5E:2D:53:24:1D:31:4F:7F:63:45:E0:BC:C9:5F:FA:90:9F:45
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 01995319FC05B025A0D88853BC5B92E16598
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/4m9eLVMkHTFPf2NF4LzJX_qQn0U.roa
Signing time: Tue 16 Sep 2025 15:17:15 +0000
ROA not before: Tue 16 Sep 2025 15:17:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215531
IP address blocks: 77.83.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Sep 2025 16:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:53:19:fc:05:b0:25:a0:d8:88:53:bc:5b:92:e1:65:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Sep 16 15:17:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e26f5e2d53241d314f7f6345e0bcc95ffa909f45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:df:44:0e:49:81:b9:5c:aa:9f:23:5d:d4:98:
05:73:9a:27:fd:0a:3b:09:6a:1b:27:68:e1:27:18:
f4:48:50:3f:61:6e:f6:66:d4:c9:ee:a5:bb:2d:5e:
f3:9e:d0:e7:62:dc:98:8e:9b:f7:91:2d:ea:fd:70:
35:15:6b:a8:53:60:3b:42:a7:79:ca:44:b2:40:29:
34:21:03:55:aa:06:5d:d7:ab:8e:e6:5d:77:c5:02:
fd:6a:11:78:02:81:93:d2:ad:70:d3:7d:2c:a1:3f:
c8:1e:91:a7:18:f3:b1:ed:c4:5c:93:78:79:66:c7:
75:71:bb:a5:5f:12:63:48:b4:92:97:09:aa:40:11:
38:c2:0a:c9:ee:ba:e6:2d:05:db:6c:7d:f1:d9:61:
de:01:5b:a3:65:fb:65:85:bc:9c:4d:3d:53:17:a2:
c2:02:bd:bd:ab:c7:04:92:ac:8a:fd:19:bd:e6:8e:
0b:e1:88:26:ac:c3:cf:f2:eb:80:27:f4:03:0c:81:
bb:aa:53:6d:bc:4b:1a:c9:62:10:e1:12:8b:75:34:
3c:8f:da:18:7c:5a:ea:79:e6:a1:11:3c:40:de:37:
eb:73:74:e5:f5:2d:4c:fd:69:ef:48:ec:51:a9:1c:
9a:31:d1:b0:d9:84:01:17:73:d9:f0:6a:a4:bf:4f:
67:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:6F:5E:2D:53:24:1D:31:4F:7F:63:45:E0:BC:C9:5F:FA:90:9F:45
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/4m9eLVMkHTFPf2NF4LzJX_qQn0U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.37.0/24
Signature Algorithm: sha256WithRSAEncryption
34:18:74:11:e4:fa:eb:28:89:23:aa:75:e9:c7:54:af:fc:77:
fb:47:60:86:bd:df:bc:9b:68:bf:29:33:07:b4:64:12:3a:38:
87:17:62:8b:df:26:51:c5:ca:0a:c1:cb:8a:9c:76:1b:95:1b:
e8:fa:a4:b6:f8:20:6f:5c:a7:53:f5:a7:f0:59:9e:93:7a:89:
e5:08:5c:d5:d3:a4:f6:73:67:b2:84:b9:23:13:f4:0a:75:fc:
6b:83:b2:36:df:b9:ad:ed:d5:a3:14:88:15:67:73:0b:92:37:
12:9a:57:a9:19:87:53:a2:c8:f4:12:d9:be:68:14:50:d2:f8:
23:95:51:d2:29:3e:e8:49:43:65:29:3d:ae:40:7c:5e:56:50:
6c:4a:78:d5:b6:cf:fd:ff:4b:a8:de:44:de:c7:49:42:bb:ac:
c7:fe:e6:f5:1b:96:9d:b3:59:28:ba:e3:18:61:8d:ed:82:a9:
ad:81:b2:65:1d:43:c8:80:2a:6b:a9:bc:9f:d4:3f:37:03:bf:
f8:ea:b7:41:7a:e6:94:0f:46:59:de:d1:61:8d:ef:f3:a1:63:
b3:1a:b6:80:f7:cf:e8:0c:78:2d:b8:4a:73:5d:f3:9f:35:17:
36:77:2c:1a:93:6f:38:ae:46:50:95:47:f8:f6:3a:1a:78:86:
6a:d8:92:ca
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZlTGfwFsCWg2IhTvFuS4WWYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy
YTI4YTEwHhcNMjUwOTE2MTUxNzE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMjZmNWUyZDUzMjQxZDMxNGY3ZjYzNDVlMGJjYzk1ZmZhOTA5ZjQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5N9EDkmBuVyqnyNd1JgFc5on/Qo7
CWobJ2jhJxj0SFA/YW72ZtTJ7qW7LV7zntDnYtyYjpv3kS3q/XA1FWuoU2A7Qqd5
ykSyQCk0IQNVqgZd16uO5l13xQL9ahF4AoGT0q1w030soT/IHpGnGPOx7cRck3h5
Zsd1cbulXxJjSLSSlwmqQBE4wgrJ7rrmLQXbbH3x2WHeAVujZftlhbycTT1TF6LC
Ar29q8cEkqyK/Rm95o4L4YgmrMPP8uuAJ/QDDIG7qlNtvEsayWIQ4RKLdTQ8j9oY
fFrqeeahETxA3jfrc3Tl9S1M/WnvSOxRqRyaMdGw2YQBF3PZ8Gqkv09neQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOJvXi1TJB0xT39jReC8yV/6kJ9FMB8GA1UdIwQY
MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt
ZWVmMzUxMWY2YzYwLzEvNG05ZUxWTWtIVEZQZjJORjRMekpYX3FRbjBVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw
LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATVMlMA0G
CSqGSIb3DQEBCwUAA4IBAQA0GHQR5PrrKIkjqnXpx1Sv/Hf7R2CGvd+8m2i/KTMH
tGQSOjiHF2KL3yZRxcoKwcuKnHYblRvo+qS2+CBvXKdT9afwWZ6TeonlCFzV06T2
c2eyhLkjE/QKdfxrg7I237mt7dWjFIgVZ3MLkjcSmlepGYdTosj0Etm+aBRQ0vgj
lVHSKT7oSUNlKT2uQHxeVlBsSnjVts/9/0uo3kTex0lCu6zH/ub1G5ads1kouuMY
YY3tgqmtgbJlHUPIgCprqbyf1D83A7/46rdBeuaUD0ZZ3tFhje/zoWOzGraA98/o
DHgtuEpzXfOfNRc2dywak284rkZQlUf49joaeIZq2JLK
-----END CERTIFICATE-----
Generated at Sat Sep 20 01:41:01 2025 by rpki-client