Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/cyYps3pZPvi7RKyO0Mv8fS4X_TE.roa
File: cyYps3pZPvi7RKyO0Mv8fS4X_TE.roa (raw, json)
Hash identifier: sOjqFjBwuXesmcvcg6TEumQs/ICBjxRgHst6LOdls98=
Subject key identifier: 73:26:29:B3:7A:59:3E:F8:BB:44:AC:8E:D0:CB:FC:7D:2E:17:FD:31
Certificate issuer: /CN=29078d22698cdd1e6a23d70c17fffe321def3b30
Certificate serial: 019F23694AA81258FC6E75DA51B6E4052973
Authority key identifier: 29:07:8D:22:69:8C:DD:1E:6A:23:D7:0C:17:FF:FE:32:1D:EF:3B:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/cyYps3pZPvi7RKyO0Mv8fS4X_TE.roa
Signing time: Thu 02 Jul 2026 15:18:50 +0000
ROA not before: Thu 02 Jul 2026 15:18:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202183
IP address blocks: 77.36.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 15 Jul 2026 06:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:4a:a8:12:58:fc:6e:75:da:51:b6:e4:05:29:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29078d22698cdd1e6a23d70c17fffe321def3b30
Validity
Not Before: Jul 2 15:18:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=732629b37a593ef8bb44ac8ed0cbfc7d2e17fd31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:22:fe:7d:37:5c:5e:1a:4e:d0:06:47:a6:fe:
6c:cf:d9:d1:f7:7b:fa:36:05:bb:88:92:76:99:d2:
c5:cd:7d:93:b5:f5:aa:4d:b5:99:b8:de:27:aa:8b:
bb:da:44:6b:e2:23:52:0a:9a:e1:5e:c6:0f:f1:1e:
f0:97:5c:64:a6:bb:31:25:5d:5e:31:36:c3:31:89:
d8:41:a8:54:ae:17:7b:46:32:0c:64:1b:8a:aa:41:
48:f8:27:c1:51:40:4b:81:ac:76:3e:cc:d7:76:ea:
7b:71:8f:9f:63:3d:dc:66:5a:ee:21:51:3a:a9:cb:
68:49:3e:21:01:da:52:f8:b8:be:32:2c:68:af:78:
81:11:d6:0d:a5:5e:4b:0e:d0:31:25:1c:a2:27:45:
cc:8d:d0:74:c1:42:45:8c:73:1b:88:fa:f5:52:47:
79:3e:26:65:83:68:b9:27:4a:3b:61:16:08:63:49:
d8:b6:d6:20:ca:b3:f8:94:90:32:a0:95:ea:8c:5f:
6e:02:00:d5:ae:95:ac:8e:bc:11:62:5a:2b:c0:2e:
51:48:60:c9:26:d5:33:76:68:cf:34:d1:03:2e:cb:
39:33:08:39:03:55:b1:0a:a9:f8:9a:14:85:f3:06:
df:e4:9d:81:97:f8:5a:2b:b8:7c:e0:76:e6:7e:e4:
46:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:26:29:B3:7A:59:3E:F8:BB:44:AC:8E:D0:CB:FC:7D:2E:17:FD:31
X509v3 Authority Key Identifier:
keyid:29:07:8D:22:69:8C:DD:1E:6A:23:D7:0C:17:FF:FE:32:1D:EF:3B:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/cyYps3pZPvi7RKyO0Mv8fS4X_TE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.36.31.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:12:58:4e:fc:73:85:8f:92:3c:75:b8:d7:b7:c5:e5:54:5f:
34:cc:ca:f3:34:a9:70:00:ec:b9:65:fa:98:1f:dc:49:d9:04:
26:91:fd:ed:01:cb:0b:16:e7:bb:df:ea:0c:26:f0:ca:3f:4c:
6a:e9:9e:5b:41:ed:53:dd:46:5d:12:d2:a1:04:8a:ce:d2:3d:
39:42:04:4c:92:45:d8:f5:49:1b:77:96:cc:c1:ef:b9:a4:b2:
bf:20:19:a7:6f:e1:2d:77:56:cc:5a:4e:d4:47:3f:65:bb:8a:
f0:56:0a:b5:c6:ae:6b:24:e8:30:67:dc:1b:cd:7b:69:28:01:
ea:73:57:e7:98:24:9b:33:02:d5:5d:7f:97:b3:a9:fc:20:10:
94:78:e1:41:a5:ae:b9:47:28:dc:e7:ea:18:15:71:ba:51:3c:
e8:fd:c0:94:85:e4:32:c5:53:87:0e:e8:75:40:0e:dc:6a:22:
3c:71:bd:a0:06:2c:a3:32:24:ca:0e:10:66:13:ee:e8:86:68:
7a:c4:91:27:5d:03:ac:64:73:2d:8f:d2:41:f6:f1:18:dd:27:
69:60:8c:8d:d0:da:17:74:9f:67:75:7f:4a:38:42:cf:91:9d:
00:76:48:ac:6d:cd:89:38:ac:9b:a8:70:26:da:05:2c:ce:1e:
37:81:df:2c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaUqoElj8bnXaUbbkBSlzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5MDc4ZDIyNjk4Y2RkMWU2YTIzZDcwYzE3ZmZmZTMyMWRl
ZjNiMzAwHhcNMjYwNzAyMTUxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MzI2MjliMzdhNTkzZWY4YmI0NGFjOGVkMGNiZmM3ZDJlMTdmZDMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiL+fTdcXhpO0AZHpv5sz9nR93v6
NgW7iJJ2mdLFzX2TtfWqTbWZuN4nqou72kRr4iNSCprhXsYP8R7wl1xkprsxJV1e
MTbDMYnYQahUrhd7RjIMZBuKqkFI+CfBUUBLgax2PszXdup7cY+fYz3cZlruIVE6
qctoST4hAdpS+Li+Mixor3iBEdYNpV5LDtAxJRyiJ0XMjdB0wUJFjHMbiPr1Ukd5
PiZlg2i5J0o7YRYIY0nYttYgyrP4lJAyoJXqjF9uAgDVrpWsjrwRYlorwC5RSGDJ
JtUzdmjPNNEDLss5Mwg5A1WxCqn4mhSF8wbf5J2Bl/haK7h84HbmfuRGbQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHMmKbN6WT74u0SsjtDL/H0uF/0xMB8GA1UdIwQY
MBaAFCkHjSJpjN0eaiPXDBf//jId7zswMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1FlTkltbU0zUjVxSTljTUZfXy1NaDN2T3pBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUt
ZGMwNmRkODA1OTYwLzEvY3lZcHMzcFpQdmk3Ukt5TzBNdjhmUzRYX1RFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUtZGMwNmRkODA1OTYw
LzEvS1FlTkltbU0zUjVxSTljTUZfXy1NaDN2T3pBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATSQfMA0G
CSqGSIb3DQEBCwUAA4IBAQB9ElhO/HOFj5I8dbjXt8XlVF80zMrzNKlwAOy5ZfqY
H9xJ2QQmkf3tAcsLFue73+oMJvDKP0xq6Z5bQe1T3UZdEtKhBIrO0j05QgRMkkXY
9Ukbd5bMwe+5pLK/IBmnb+Etd1bMWk7URz9lu4rwVgq1xq5rJOgwZ9wbzXtpKAHq
c1fnmCSbMwLVXX+Xs6n8IBCUeOFBpa65Ryjc5+oYFXG6UTzo/cCUheQyxVOHDuh1
QA7caiI8cb2gBiyjMiTKDhBmE+7ohmh6xJEnXQOsZHMtj9JB9vEY3SdpYIyN0NoX
dJ9ndX9KOELPkZ0Adkisbc2JOKybqHAm2gUszh43gd8s
-----END CERTIFICATE-----
Generated at Tue Jul 14 15:22:28 2026 by rpki-client