Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/5833f3-2421-41b0-be2e-82a107c4a7e2/1/_fu8HVCzSvRt0NkeK2yjKWusuWE.roa
File: _fu8HVCzSvRt0NkeK2yjKWusuWE.roa (raw, json)
Hash identifier: vu5AFCJ2gOF+w3Dk+FLPIQg6RZau2UZ0AeeFgZPuej4=
Subject key identifier: FD:FB:BC:1D:50:B3:4A:F4:6D:D0:D9:1E:2B:6C:A3:29:6B:AC:B9:61
Certificate issuer: /CN=bd6497047f20d6f708d7db42557b698fbfb3d8fb
Certificate serial: 019FC64DCE6C6F0656F4E99E63122F7C2E68
Authority key identifier: BD:64:97:04:7F:20:D6:F7:08:D7:DB:42:55:7B:69:8F:BF:B3:D8:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vWSXBH8g1vcI19tCVXtpj7-z2Ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/5833f3-2421-41b0-be2e-82a107c4a7e2/1/_fu8HVCzSvRt0NkeK2yjKWusuWE.roa
Signing time: Mon 03 Aug 2026 06:26:55 +0000
ROA not before: Mon 03 Aug 2026 06:26:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41371
IP address blocks: 77.240.32.0/24 maxlen: 24
77.240.34.0/24 maxlen: 24
77.240.36.0/24 maxlen: 24
77.240.37.0/24 maxlen: 24
77.240.40.0/24 maxlen: 24
77.240.41.0/24 maxlen: 24
77.240.42.0/24 maxlen: 24
77.240.43.0/24 maxlen: 24
88.151.176.0/21 maxlen: 21
88.151.176.0/24 maxlen: 24
88.151.177.0/24 maxlen: 24
88.151.178.0/24 maxlen: 24
88.151.179.0/24 maxlen: 24
88.151.180.0/24 maxlen: 24
88.151.181.0/24 maxlen: 24
88.151.182.0/24 maxlen: 24
88.151.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/5833f3-2421-41b0-be2e-82a107c4a7e2/1/vWSXBH8g1vcI19tCVXtpj7-z2Ps.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/5833f3-2421-41b0-be2e-82a107c4a7e2/1/vWSXBH8g1vcI19tCVXtpj7-z2Ps.mft
rsync://rpki.ripe.net/repository/DEFAULT/vWSXBH8g1vcI19tCVXtpj7-z2Ps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c6:4d:ce:6c:6f:06:56:f4:e9:9e:63:12:2f:7c:2e:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd6497047f20d6f708d7db42557b698fbfb3d8fb
Validity
Not Before: Aug 3 06:26:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fdfbbc1d50b34af46dd0d91e2b6ca3296bacb961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:bb:c7:97:0a:6b:49:a5:9d:31:e1:d8:1a:1c:
60:94:48:a9:af:8c:1e:d9:50:3b:c3:b1:ee:8e:2e:
0f:a7:e2:a2:57:c1:d2:80:4d:8f:c5:42:0c:19:c6:
cf:1f:50:a5:cf:21:d7:a1:7b:dd:79:11:bf:6d:3b:
8a:84:68:22:8e:7f:54:0f:29:93:7d:0d:21:4c:a6:
86:bf:0b:1b:cd:65:4a:6e:a8:8c:dd:57:b1:de:dd:
e2:d9:58:a1:ce:98:da:04:6d:ed:1d:2d:44:9b:d2:
a7:f8:00:5e:e6:c2:c3:cc:9f:cd:2a:29:fd:07:68:
16:e2:f4:e7:44:5c:10:f7:b9:56:11:5c:d7:09:e9:
65:1e:62:ff:43:d0:23:53:8e:7e:a1:74:84:d7:c3:
0a:dd:65:ee:c6:50:6a:f7:52:73:9f:9e:7e:7e:46:
df:33:b3:c4:f1:ef:59:bd:97:b0:5e:a6:57:2b:c6:
00:f4:af:f6:fd:1a:94:ed:0a:0e:12:76:d6:5d:24:
0a:43:61:a4:a9:32:9e:1b:c8:ff:71:ac:8d:b9:d9:
0c:f6:30:d1:17:da:d3:5e:e8:13:41:e2:c7:24:11:
05:5b:8d:ad:ba:e2:1e:16:37:73:4c:7c:a6:01:74:
9c:1d:39:ec:74:14:8f:c6:e1:50:e5:24:db:51:94:
55:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:FB:BC:1D:50:B3:4A:F4:6D:D0:D9:1E:2B:6C:A3:29:6B:AC:B9:61
X509v3 Authority Key Identifier:
keyid:BD:64:97:04:7F:20:D6:F7:08:D7:DB:42:55:7B:69:8F:BF:B3:D8:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vWSXBH8g1vcI19tCVXtpj7-z2Ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/5833f3-2421-41b0-be2e-82a107c4a7e2/1/_fu8HVCzSvRt0NkeK2yjKWusuWE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/5833f3-2421-41b0-be2e-82a107c4a7e2/1/vWSXBH8g1vcI19tCVXtpj7-z2Ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.240.32.0/24
77.240.34.0/24
77.240.36.0/23
77.240.40.0/22
88.151.176.0/21
Signature Algorithm: sha256WithRSAEncryption
2c:07:6b:25:73:4c:79:d7:b1:11:74:bb:95:b8:1f:1a:35:21:
5c:8d:ba:71:df:84:e9:2d:c5:00:74:7f:73:96:23:99:2c:6e:
1a:7e:e2:f0:37:43:26:57:1b:43:73:8b:d3:be:ff:c4:8a:53:
86:67:c6:4d:a4:6c:ce:b9:3d:c6:dd:37:02:c4:6a:a2:e8:49:
bc:19:5c:83:42:d3:b1:42:44:d8:0c:f4:74:38:fd:77:a9:86:
f5:b1:ce:18:d4:7f:0b:d2:6a:29:13:24:e5:7a:82:70:a2:d1:
80:b3:2d:85:f8:76:8f:f0:5e:17:49:78:72:70:6b:28:89:9f:
ef:d1:2e:46:55:a7:2b:aa:b3:d9:d0:96:43:5f:c7:06:64:8f:
b4:bd:9e:cc:07:ae:a4:4a:19:ad:12:8a:2f:21:0b:97:d4:cb:
90:b0:76:14:b1:4a:91:02:01:c3:05:6c:ca:13:d6:0d:cf:53:
b9:59:c7:b6:58:4a:ed:89:3b:a4:f6:15:06:a5:4f:22:ed:e7:
01:99:b3:26:57:6c:d5:ce:94:63:f0:59:71:27:ce:62:26:b1:
1f:06:bd:3b:b9:c5:08:55:21:5b:51:3a:e5:4c:0f:af:9a:5d:
e0:46:97:7f:be:2a:e3:f2:25:ae:ff:dd:2c:56:81:79:f0:74:
af:36:f2:e2
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZ/GTc5sbwZW9OmeYxIvfC5oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkNjQ5NzA0N2YyMGQ2ZjcwOGQ3ZGI0MjU1N2I2OThmYmZi
M2Q4ZmIwHhcNMjYwODAzMDYyNjU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZGZiYmMxZDUwYjM0YWY0NmRkMGQ5MWUyYjZjYTMyOTZiYWNiOTYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLvHlwprSaWdMeHYGhxglEipr4we
2VA7w7Huji4Pp+KiV8HSgE2PxUIMGcbPH1ClzyHXoXvdeRG/bTuKhGgijn9UDymT
fQ0hTKaGvwsbzWVKbqiM3Vex3t3i2VihzpjaBG3tHS1Em9Kn+ABe5sLDzJ/NKin9
B2gW4vTnRFwQ97lWEVzXCellHmL/Q9AjU45+oXSE18MK3WXuxlBq91Jzn55+fkbf
M7PE8e9ZvZewXqZXK8YA9K/2/RqU7QoOEnbWXSQKQ2GkqTKeG8j/cayNudkM9jDR
F9rTXugTQeLHJBEFW42tuuIeFjdzTHymAXScHTnsdBSPxuFQ5STbUZRVewIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFP37vB1Qs0r0bdDZHitsoylrrLlhMB8GA1UdIwQY
MBaAFL1klwR/INb3CNfbQlV7aY+/s9j7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdldTWEJIOGcxdmNJMTl0Q1ZYdHBqNy16MlBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC81ODMzZjMtMjQyMS00MWIwLWJlMmUt
ODJhMTA3YzRhN2UyLzEvX2Z1OEhWQ3pTdlJ0ME5rZUsyeWpLV3VzdVdFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC81ODMzZjMtMjQyMS00MWIwLWJlMmUtODJhMTA3YzRhN2Uy
LzEvdldTWEJIOGcxdmNJMTl0Q1ZYdHBqNy16MlBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQATfAgAwQA
TfAiAwQBTfAkAwQCTfAoAwQDWJewMA0GCSqGSIb3DQEBCwUAA4IBAQAsB2slc0x5
17ERdLuVuB8aNSFcjbpx34TpLcUAdH9zliOZLG4afuLwN0MmVxtDc4vTvv/EilOG
Z8ZNpGzOuT3G3TcCxGqi6Em8GVyDQtOxQkTYDPR0OP13qYb1sc4Y1H8L0mopEyTl
eoJwotGAsy2F+HaP8F4XSXhycGsoiZ/v0S5GVacrqrPZ0JZDX8cGZI+0vZ7MB66k
ShmtEoovIQuX1MuQsHYUsUqRAgHDBWzKE9YNz1O5Wce2WErtiTuk9hUGpU8i7ecB
mbMmV2zVzpRj8FlxJ85iJrEfBr07ucUIVSFbUTrlTA+vml3gRpd/virj8iWu/90s
VoF58HSvNvLi
-----END CERTIFICATE-----
Generated at Thu Aug 13 07:56:27 2026 by rpki-client