Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/JY5sHPB3o8C8r8F3-ANhiUBRhic.roa
File: JY5sHPB3o8C8r8F3-ANhiUBRhic.roa (raw, json)
Hash identifier: 1HBsxC1l75qikkD+9c9YXYldti8xJmUTeeGvasnXSnE=
Subject key identifier: 25:8E:6C:1C:F0:77:A3:C0:BC:AF:C1:77:F8:03:61:89:40:51:86:27
Certificate issuer: /CN=29078d22698cdd1e6a23d70c17fffe321def3b30
Certificate serial: 01A1679B9053CC2B2F85C0266B44235B6E1F
Authority key identifier: 29:07:8D:22:69:8C:DD:1E:6A:23:D7:0C:17:FF:FE:32:1D:EF:3B:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/JY5sHPB3o8C8r8F3-ANhiUBRhic.roa
Signing time: Fri 23 Oct 2026 07:13:30 +0000
ROA not before: Fri 23 Oct 2026 07:13:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3561
IP address blocks: 77.36.124.0/22 maxlen: 22
81.161.4.0/22 maxlen: 24
93.120.96.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Nov 2026 19:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:67:9b:90:53:cc:2b:2f:85:c0:26:6b:44:23:5b:6e:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29078d22698cdd1e6a23d70c17fffe321def3b30
Validity
Not Before: Oct 23 07:13:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=258e6c1cf077a3c0bcafc177f803618940518627
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:dc:75:24:0a:85:b8:bb:ad:f4:22:60:7e:4e:
55:09:c3:bb:41:d1:ed:2f:a9:e6:65:88:59:4e:fa:
fe:b6:6a:2b:04:c7:c3:34:dc:e0:12:83:66:43:9c:
57:0d:7c:93:c2:5e:a4:5a:4b:1d:c3:d8:ec:65:47:
01:f9:f2:11:83:1e:04:31:f7:93:c1:c3:50:49:10:
1d:7c:1b:c5:c3:a0:a5:06:91:4b:0b:4b:28:c9:07:
b7:04:f7:a1:80:1b:8c:da:53:17:d7:11:ca:bc:5c:
e3:9f:20:7d:3b:e5:ad:d3:3e:1f:89:05:aa:da:07:
c5:c4:25:93:c0:b9:f1:68:6b:06:f0:b7:34:9b:40:
e7:1e:d4:46:5b:f5:2b:d7:1f:ab:8e:10:bf:0e:6e:
89:6b:26:73:c2:13:c4:16:e2:a6:92:97:21:e3:d5:
f4:d5:be:da:ca:31:d3:88:1c:0f:b0:65:ba:c9:5a:
92:15:5b:da:04:0b:7e:bf:8e:8c:fa:af:7f:a5:ab:
a3:bf:a1:d8:b8:aa:2d:4b:59:0b:05:b5:df:54:75:
84:5a:d1:5f:31:81:e2:c8:b3:25:54:53:a1:48:0e:
ea:da:0d:2d:8e:95:40:aa:f4:64:37:aa:6a:cb:56:
cc:34:d0:1d:5c:4d:45:78:09:c4:66:89:8c:4e:1e:
4a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:8E:6C:1C:F0:77:A3:C0:BC:AF:C1:77:F8:03:61:89:40:51:86:27
X509v3 Authority Key Identifier:
keyid:29:07:8D:22:69:8C:DD:1E:6A:23:D7:0C:17:FF:FE:32:1D:EF:3B:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/JY5sHPB3o8C8r8F3-ANhiUBRhic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.36.124.0/22
81.161.4.0/22
93.120.96.0/22
Signature Algorithm: sha256WithRSAEncryption
10:0b:9f:22:ee:5f:11:1b:ac:47:3c:eb:eb:ba:ce:10:65:fd:
85:81:d2:d3:6e:1e:60:80:61:08:c2:9d:c5:f1:53:db:13:2e:
51:c5:b5:92:1d:53:bf:d2:91:fd:19:e0:c3:da:11:f3:c4:67:
82:af:1f:2b:9a:4f:11:9d:96:70:d8:3c:e7:b3:da:8f:e5:1f:
22:53:90:f7:3a:b1:cb:f2:37:a7:64:c1:18:6c:a4:e8:42:90:
24:be:41:59:d7:04:14:a0:68:f9:dd:64:fc:5a:ff:72:fb:54:
ff:7c:85:69:cd:21:51:ce:2a:20:10:24:82:33:74:d3:6e:47:
e3:b6:ae:2f:e7:20:0d:53:30:fe:fb:0a:f1:c5:e0:da:81:04:
d9:c5:9a:dd:45:37:ff:fc:17:d4:05:41:3b:35:66:ab:f2:15:
d9:a4:11:0f:21:76:cf:a5:eb:04:7b:cf:b0:12:55:05:4e:24:
1a:e0:ec:93:c2:d9:ee:0d:88:34:73:71:8f:40:db:bf:7a:0d:
6d:c6:81:e0:51:b1:3c:58:46:61:f5:a2:13:c8:32:79:42:bf:
be:cf:92:6c:5e:5f:01:4f:bf:19:94:43:8f:68:09:b1:6e:55:
f8:60:4d:1a:84:08:85:f6:1b:64:c9:e6:72:16:eb:da:d4:14:
1b:74:75:ba
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAaFnm5BTzCsvhcAma0QjW24fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5MDc4ZDIyNjk4Y2RkMWU2YTIzZDcwYzE3ZmZmZTMyMWRl
ZjNiMzAwHhcNMjYxMDIzMDcxMzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNThlNmMxY2YwNzdhM2MwYmNhZmMxNzdmODAzNjE4OTQwNTE4NjI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNx1JAqFuLut9CJgfk5VCcO7QdHt
L6nmZYhZTvr+tmorBMfDNNzgEoNmQ5xXDXyTwl6kWksdw9jsZUcB+fIRgx4EMfeT
wcNQSRAdfBvFw6ClBpFLC0soyQe3BPehgBuM2lMX1xHKvFzjnyB9O+Wt0z4fiQWq
2gfFxCWTwLnxaGsG8Lc0m0DnHtRGW/Ur1x+rjhC/Dm6JayZzwhPEFuKmkpch49X0
1b7ayjHTiBwPsGW6yVqSFVvaBAt+v46M+q9/paujv6HYuKotS1kLBbXfVHWEWtFf
MYHiyLMlVFOhSA7q2g0tjpVAqvRkN6pqy1bMNNAdXE1FeAnEZomMTh5KcwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFCWObBzwd6PAvK/Bd/gDYYlAUYYnMB8GA1UdIwQY
MBaAFCkHjSJpjN0eaiPXDBf//jId7zswMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1FlTkltbU0zUjVxSTljTUZfXy1NaDN2T3pBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUt
ZGMwNmRkODA1OTYwLzEvSlk1c0hQQjNvOEM4cjhGMy1BTmhpVUJSaGljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUtZGMwNmRkODA1OTYw
LzEvS1FlTkltbU0zUjVxSTljTUZfXy1NaDN2T3pBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCTSR8AwQC
UaEEAwQCXXhgMA0GCSqGSIb3DQEBCwUAA4IBAQAQC58i7l8RG6xHPOvrus4QZf2F
gdLTbh5ggGEIwp3F8VPbEy5RxbWSHVO/0pH9GeDD2hHzxGeCrx8rmk8RnZZw2Dzn
s9qP5R8iU5D3OrHL8jenZMEYbKToQpAkvkFZ1wQUoGj53WT8Wv9y+1T/fIVpzSFR
ziogECSCM3TTbkfjtq4v5yANUzD++wrxxeDagQTZxZrdRTf//BfUBUE7NWar8hXZ
pBEPIXbPpesEe8+wElUFTiQa4OyTwtnuDYg0c3GPQNu/eg1txoHgUbE8WEZh9aIT
yDJ5Qr++z5JsXl8BT78ZlEOPaAmxblX4YE0ahAiF9htkyeZyFuva1BQbdHW6
-----END CERTIFICATE-----
Generated at Wed Nov 4 04:14:34 2026 by rpki-client