Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/IpfE1mL-38f5akTbeAPVwy05mk0.roa
File: IpfE1mL-38f5akTbeAPVwy05mk0.roa (raw, json)
Hash identifier: kLYRX+mbddq+7WRo5Camg96G1acQdRmAKKZ+QtY7/1g=
Subject key identifier: 22:97:C4:D6:62:FE:DF:C7:F9:6A:44:DB:78:03:D5:C3:2D:39:9A:4D
Certificate issuer: /CN=29078d22698cdd1e6a23d70c17fffe321def3b30
Certificate serial: 019F23694CD371EF426213E2F667EE3F1459
Authority key identifier: 29:07:8D:22:69:8C:DD:1E:6A:23:D7:0C:17:FF:FE:32:1D:EF:3B:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/IpfE1mL-38f5akTbeAPVwy05mk0.roa
Signing time: Thu 02 Jul 2026 15:18:51 +0000
ROA not before: Thu 02 Jul 2026 15:18:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206070
IP address blocks: 77.36.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 15 Jul 2026 06:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:4c:d3:71:ef:42:62:13:e2:f6:67:ee:3f:14:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29078d22698cdd1e6a23d70c17fffe321def3b30
Validity
Not Before: Jul 2 15:18:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2297c4d662fedfc7f96a44db7803d5c32d399a4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ca:bc:bf:8c:cd:8d:0e:a8:30:12:11:bd:22:
f3:ed:7a:36:2b:7d:9f:5b:01:d7:7f:7a:6c:45:f9:
84:44:03:dc:bd:87:7b:ff:e4:ac:b2:d6:a3:0b:7b:
1c:b5:b1:e2:19:06:86:16:6d:c2:90:22:fc:aa:e3:
17:c4:e6:3e:89:3c:09:15:79:b4:d8:8b:4f:69:69:
10:66:cc:bc:5c:c0:a6:2e:b1:03:34:b8:b0:84:fb:
fb:fa:73:5e:d9:0a:da:36:78:f3:fb:d1:32:40:83:
bf:a0:56:23:2a:ae:62:2e:56:59:b2:e9:29:0d:cf:
f6:fb:94:9d:2c:62:8a:35:c3:63:99:e3:bb:1a:52:
2b:78:5b:96:35:78:38:3f:d7:6a:b8:de:bd:1e:e0:
4e:01:a6:f1:2b:84:35:08:5b:7c:c8:15:89:2d:77:
33:55:62:ac:e0:6d:cc:a2:f9:28:29:c1:02:10:b8:
84:22:ff:a1:df:71:aa:6c:59:58:cc:a7:15:34:1f:
f2:5a:ef:0d:06:c9:8f:f2:1e:8f:cf:e8:32:b9:b8:
8e:69:b8:91:03:7d:bf:ba:45:0c:dc:bb:d9:ae:4e:
ee:77:88:21:58:80:f3:9d:30:85:d8:33:32:a9:51:
55:09:1c:7d:16:33:28:f1:b0:6c:ab:d8:c9:75:61:
df:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:97:C4:D6:62:FE:DF:C7:F9:6A:44:DB:78:03:D5:C3:2D:39:9A:4D
X509v3 Authority Key Identifier:
keyid:29:07:8D:22:69:8C:DD:1E:6A:23:D7:0C:17:FF:FE:32:1D:EF:3B:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/IpfE1mL-38f5akTbeAPVwy05mk0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.36.63.0/24
Signature Algorithm: sha256WithRSAEncryption
37:0d:e6:7c:35:76:6c:44:fe:af:30:da:c4:ac:37:ed:81:29:
3f:60:07:72:b6:2c:fa:85:9b:02:d3:9c:d9:f4:3e:f8:f7:0f:
aa:c2:35:7b:17:7b:07:28:f2:fd:d2:14:fe:76:e2:be:39:3d:
ad:2e:a6:2d:55:2c:27:5e:20:1e:ed:81:3f:30:75:67:08:d1:
57:98:22:d8:e3:84:79:87:50:89:bf:cb:b5:44:7b:85:d5:9a:
2d:17:53:b3:fe:a5:9c:26:02:64:49:cc:78:8a:78:8b:eb:56:
39:78:4a:49:51:9d:9b:39:d7:9d:9b:81:6b:71:61:5e:35:1c:
f7:90:51:e3:b3:83:9f:ca:0a:64:1e:e4:ae:b5:3a:cf:f0:fb:
66:d7:93:c8:24:8e:28:12:ea:5c:df:fe:15:87:98:09:dd:0b:
b4:e5:b2:a7:57:b4:5c:3c:0b:39:46:b6:8f:15:ac:43:b8:43:
ee:67:93:b1:5f:ec:17:d4:f8:7d:fa:3b:72:19:33:36:fe:52:
aa:bd:94:6b:9e:99:cf:db:73:6f:74:ba:8b:99:38:3d:8d:e5:
b5:4c:27:c9:a8:66:39:4a:67:a1:ef:9f:7b:fc:2f:2c:30:e3:
35:7c:77:59:71:9b:6f:6b:65:2c:78:ca:0e:5a:4b:49:50:1d:
33:76:03:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 15:22:29 2026 by rpki-client