Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/gYgvpA1jsNNDeGW43tPNOrMyYRU.roa
File: gYgvpA1jsNNDeGW43tPNOrMyYRU.roa (raw, json)
Hash identifier: JsKdJqBiKSM73KstZeIWsdLbnA/CPkZamzZQG4dyQnM=
Subject key identifier: 81:88:2F:A4:0D:63:B0:D3:43:78:65:B8:DE:D3:CD:3A:B3:32:61:15
Certificate issuer: /CN=29078d22698cdd1e6a23d70c17fffe321def3b30
Certificate serial: 01A1728B1B2190F149537AD10E89C27F55F7
Authority key identifier: 29:07:8D:22:69:8C:DD:1E:6A:23:D7:0C:17:FF:FE:32:1D:EF:3B:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/gYgvpA1jsNNDeGW43tPNOrMyYRU.roa
Signing time: Sun 25 Oct 2026 10:11:21 +0000
ROA not before: Sun 25 Oct 2026 10:11:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49453
IP address blocks: 77.36.58.0/24 maxlen: 24
176.116.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:72:8b:1b:21:90:f1:49:53:7a:d1:0e:89:c2:7f:55:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29078d22698cdd1e6a23d70c17fffe321def3b30
Validity
Not Before: Oct 25 10:11:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=81882fa40d63b0d3437865b8ded3cd3ab3326115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:8c:ec:73:df:a6:91:f5:c6:9f:8f:81:91:cf:
98:52:74:94:a3:f9:1f:9a:77:fa:b1:9e:1e:04:37:
e0:00:74:41:d3:a0:71:81:2a:bf:6a:91:b0:08:5b:
ab:89:42:2b:2c:a4:0b:39:52:2d:89:2c:34:21:ca:
1c:7f:1e:dd:5d:6a:86:1d:d2:73:3a:fe:b4:81:d3:
f9:7a:9e:09:c4:4e:52:22:12:35:80:94:aa:1b:3d:
3e:d6:e0:28:e1:5a:81:9d:58:d5:15:04:e0:d4:17:
9e:0f:9e:bc:a2:06:58:5e:d6:a0:c3:f3:36:d2:5b:
eb:95:69:b3:bc:21:f4:a5:c7:a6:c4:8b:3a:7c:ad:
77:98:1a:52:5f:e4:61:65:be:c1:33:34:c0:97:05:
51:63:9b:2a:46:29:0b:02:05:53:8e:34:e7:0b:fe:
45:b8:db:35:31:2e:92:9c:cb:49:a1:b5:ea:d7:b5:
0b:13:0c:7d:dd:20:c3:42:c3:85:18:52:d3:4d:7e:
9b:00:11:33:48:e4:e6:cf:6d:f4:ef:3d:b3:dc:8b:
47:e0:85:4b:5c:b0:03:b7:8d:9f:6d:c7:61:36:12:
06:a3:2d:64:23:fd:a1:69:98:ab:b1:6e:c9:6b:07:
cd:dc:d9:b2:62:1f:e0:16:e2:22:cf:1f:e9:4f:34:
61:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:88:2F:A4:0D:63:B0:D3:43:78:65:B8:DE:D3:CD:3A:B3:32:61:15
X509v3 Authority Key Identifier:
keyid:29:07:8D:22:69:8C:DD:1E:6A:23:D7:0C:17:FF:FE:32:1D:EF:3B:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/gYgvpA1jsNNDeGW43tPNOrMyYRU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.36.58.0/24
176.116.236.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:c9:da:4d:0e:db:81:04:6e:1e:fa:e2:84:39:75:5a:ae:f4:
aa:a3:90:c8:ce:e6:f4:51:42:1c:87:11:02:08:c3:2b:e3:3a:
20:71:43:5a:0c:29:39:57:02:21:99:43:97:6a:41:e3:5c:83:
82:62:98:50:60:d7:03:41:41:0b:11:7d:d5:ac:da:d0:73:02:
c2:69:a2:fd:57:28:b9:41:f8:83:2b:42:9f:01:49:6f:36:a7:
1b:d7:8b:ac:1e:cf:90:a5:8e:f6:ea:e6:3c:e4:74:a5:32:83:
7c:cc:2b:61:fe:70:52:7a:d8:f9:f1:71:bb:00:48:1a:dc:db:
a2:4d:9b:2a:15:78:8d:d7:68:40:b2:ba:93:2d:32:2a:d9:d0:
23:d6:ee:94:05:a7:bd:0b:fb:1a:b1:cf:9e:a8:b7:88:3d:9e:
59:c5:52:31:fb:a4:2f:44:da:4c:59:24:09:19:53:82:5a:62:
dc:0c:f6:35:db:43:ab:e1:44:b8:3c:e6:c5:2f:fb:4d:39:0b:
7c:2b:e5:24:a4:4e:4e:dd:ee:35:fe:84:55:61:42:6c:23:d2:
03:75:44:c2:d1:02:7d:8c:78:eb:90:f1:67:48:33:1d:ac:31:
37:f6:dd:06:38:2d:a6:ae:f3:25:f1:00:aa:12:9b:7d:c3:23:
8f:e4:67:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:34:07 2026 by rpki-client