Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/1-3loGfd8vld0Rda4OoJzrymHzkA.roa
File: 1-3loGfd8vld0Rda4OoJzrymHzkA.roa (raw, json)
Hash identifier: Ro6BmCBRhEcIsHxFR1+QfcI1nb3hCaY633f1sM7avXE=
Subject key identifier: FB:79:68:19:F7:7C:BE:57:74:45:D6:B8:3A:82:73:AF:29:87:CE:40
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A031E41D3EAA2817DA1CDAD17F85A6BFF3
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/1-3loGfd8vld0Rda4OoJzrymHzkA.roa
Signing time: Mon 24 Aug 2026 03:50:28 +0000
ROA not before: Mon 24 Aug 2026 03:50:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401362
IP address blocks: 77.67.11.0/24 maxlen: 24
195.21.134.0/24 maxlen: 24
212.189.69.0/24 maxlen: 24
217.8.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 12:39:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:31:e4:1d:3e:aa:28:17:da:1c:da:d1:7f:85:a6:bf:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Aug 24 03:50:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fb796819f77cbe577445d6b83a8273af2987ce40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d8:e6:c0:16:b8:16:f9:34:b1:f2:ad:a4:b3:
ad:29:c6:2e:19:9c:56:de:73:39:aa:3d:13:eb:f3:
c2:93:f9:c4:b0:95:07:a1:1a:de:30:7a:ab:d3:6e:
3d:46:37:85:ad:a2:23:50:ca:f4:d6:35:4b:d8:8a:
5a:bc:68:0f:c0:4e:55:52:fb:09:61:6a:75:bf:19:
44:68:4c:57:5e:25:73:ba:f7:ff:bc:61:bd:12:4b:
5e:4a:6b:e3:f2:9e:70:11:e5:60:df:88:8d:45:1d:
e4:97:54:1b:20:43:83:45:a2:4c:b6:fc:45:49:5c:
06:28:df:df:0e:ba:3c:68:ed:b5:2b:97:89:fc:05:
5b:ad:13:17:96:b5:4c:f2:50:fc:e2:73:62:a1:4a:
73:11:7c:ad:84:56:a3:13:3d:60:e3:33:cd:69:25:
ed:7c:5b:50:44:19:d2:0a:d7:ad:1c:32:ea:c6:60:
c3:58:2a:9c:23:31:57:2e:ea:39:27:38:fd:24:12:
10:40:ce:06:cb:ab:9f:bf:84:93:c3:67:be:e4:b9:
93:04:e4:8c:a6:41:d9:3a:7e:4d:e7:11:b0:e0:b1:
07:95:5f:8e:a1:5b:55:0a:9a:dd:12:37:d1:79:25:
99:70:7b:75:c1:42:fb:8a:02:3a:7e:cd:ad:27:b0:
e7:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:79:68:19:F7:7C:BE:57:74:45:D6:B8:3A:82:73:AF:29:87:CE:40
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/1-3loGfd8vld0Rda4OoJzrymHzkA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.67.11.0/24
195.21.134.0/24
212.189.69.0/24
217.8.201.0/24
Signature Algorithm: sha256WithRSAEncryption
54:b5:32:63:0d:50:85:c8:01:00:31:11:c1:b4:e5:ae:be:00:
2a:9b:ba:66:c4:ee:8d:ba:02:59:bd:9d:71:e6:39:ef:e9:20:
d6:8d:11:f5:1d:be:50:1f:3c:d0:a0:76:e5:94:5e:1e:42:ee:
ed:cf:63:10:f2:d2:9d:50:8b:c9:46:0c:f2:4e:48:e2:fc:46:
e2:82:9b:d2:f3:c4:0e:a0:4e:58:6d:6d:b3:6b:8b:ff:16:65:
99:b6:11:24:87:92:c0:a6:bf:8c:ea:8b:66:23:88:18:84:1e:
2d:a3:ac:93:93:b7:96:c4:7e:e7:e3:b6:c2:f1:9c:f0:a0:e6:
65:3c:b2:4b:63:24:4c:79:17:8e:6a:9e:dc:14:63:87:71:96:
e9:ca:33:80:74:eb:db:ab:ea:52:42:a6:b1:d2:61:b5:70:f6:
5d:71:64:d9:df:11:6c:a8:5c:52:d9:00:0c:ba:f9:bf:71:71:
5a:f9:50:b8:cf:99:92:92:80:c8:df:d5:4f:af:c1:a7:7f:80:
10:2d:22:46:c3:c1:cb:2d:ab:90:1c:2b:82:a4:19:00:1e:11:
e5:38:e0:90:77:aa:32:11:91:77:0a:df:2e:79:99:fd:6c:17:
96:3f:69:e1:c5:b6:7c:75:ab:a1:e3:7b:4c:94:55:40:85:3e:
50:e1:b7:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 17:06:58 2026 by rpki-client