Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/7O9HN1swQBxrhiN5WDJCffmYG4A.roa
File: 7O9HN1swQBxrhiN5WDJCffmYG4A.roa (raw, json)
Hash identifier: cyuORsMYv49rZJ1+i6mNvGqCLEMBY2lEJVK1kw112u4=
Subject key identifier: EC:EF:47:37:5B:30:40:1C:6B:86:23:79:58:32:42:7D:F9:98:1B:80
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A1706148FFA9A5D2E419D4324AF7278072
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/7O9HN1swQBxrhiN5WDJCffmYG4A.roa
Signing time: Sun 25 Oct 2026 00:06:26 +0000
ROA not before: Sun 25 Oct 2026 00:06:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25369
IP address blocks: 77.67.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 05:25:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:70:61:48:ff:a9:a5:d2:e4:19:d4:32:4a:f7:27:80:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Oct 25 00:06:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ecef47375b30401c6b8623795832427df9981b80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1e:a7:d8:ce:56:2d:20:83:b5:1b:ab:26:14:
ec:08:83:62:cd:be:29:38:1f:8e:31:70:49:37:7e:
33:49:88:b1:61:fa:e2:21:e7:64:82:da:3a:c1:63:
14:6e:04:86:ac:4e:36:66:b6:d2:fa:1b:c9:fe:fc:
68:ea:dd:41:66:50:b5:84:f9:27:05:2f:4b:ed:3b:
eb:ef:6f:b6:54:1c:30:8b:0c:f1:37:67:74:27:a5:
70:58:79:85:84:24:76:8c:10:41:27:79:f0:8d:b1:
a3:01:78:1b:e1:48:ff:60:9a:ca:bf:40:66:60:6c:
4f:cf:c1:59:4b:d3:df:dc:1c:7d:b0:40:33:d5:98:
d3:77:72:56:e2:78:bf:e0:24:b7:d7:69:29:e4:28:
f1:29:24:b5:f7:5c:86:11:b7:e1:9b:7f:16:8d:c5:
4c:59:f8:3f:05:f2:e3:46:40:a5:19:1c:3f:86:c0:
e7:ea:f8:f4:fb:27:f6:33:35:28:d8:69:2a:64:db:
77:95:13:1e:04:f3:87:ee:9e:64:e8:17:aa:ef:66:
22:60:b5:07:69:99:83:18:59:92:aa:39:c8:0d:ae:
76:b3:64:67:4d:97:13:1e:c7:09:c9:86:3b:d3:d3:
14:d7:47:14:da:85:e6:5c:55:d3:31:81:a2:74:74:
da:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:EF:47:37:5B:30:40:1C:6B:86:23:79:58:32:42:7D:F9:98:1B:80
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/7O9HN1swQBxrhiN5WDJCffmYG4A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.67.26.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:21:6d:32:b3:12:c0:0a:49:0a:3a:ca:7d:ea:77:ea:d8:1f:
43:10:82:5c:e9:e0:f3:01:7b:83:2d:c1:5c:a6:c8:59:90:13:
32:0f:9e:41:82:78:61:19:f8:a2:97:d7:84:08:58:35:d7:56:
44:76:80:3e:38:24:99:0c:4f:d4:16:72:d3:0b:c7:3b:af:4d:
41:e6:4d:a7:40:f3:c9:70:4b:8e:b4:2b:2c:3a:4b:06:34:f4:
41:be:04:03:33:98:dc:09:91:1b:bc:f7:3b:3d:08:a3:39:51:
9c:c0:c5:8d:48:98:bb:eb:d5:b8:89:cb:5d:a2:33:4d:98:be:
fe:23:b9:8a:12:f2:63:fa:fc:5e:17:c1:83:dc:57:21:25:93:
72:1c:43:e7:27:7b:23:b3:65:c7:e6:9e:0b:aa:00:73:af:d2:
9f:71:2a:b3:1b:08:0c:66:28:d0:2a:0e:8a:d1:8e:dd:61:03:
57:f1:5d:6c:31:a4:76:fa:bb:3f:f0:c8:d6:a4:38:00:9f:2f:
03:03:5b:d1:11:a1:06:49:ee:49:b3:07:bf:c0:da:35:0c:f8:
df:cf:0e:85:7a:08:0c:08:20:72:85:a7:a8:c8:96:6c:21:fb:
e2:fa:27:48:82:6b:e8:e6:23:32:0e:dc:76:86:e2:40:45:a7:
a8:8e:34:d3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaFwYUj/qaXS5BnUMkr3J4ByMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0
NmQxNzEwHhcNMjYxMDI1MDAwNjI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlY2VmNDczNzViMzA0MDFjNmI4NjIzNzk1ODMyNDI3ZGY5OTgxYjgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuB6n2M5WLSCDtRurJhTsCINizb4p
OB+OMXBJN34zSYixYfriIedkgto6wWMUbgSGrE42ZrbS+hvJ/vxo6t1BZlC1hPkn
BS9L7Tvr72+2VBwwiwzxN2d0J6VwWHmFhCR2jBBBJ3nwjbGjAXgb4Uj/YJrKv0Bm
YGxPz8FZS9Pf3Bx9sEAz1ZjTd3JW4ni/4CS312kp5CjxKSS191yGEbfhm38WjcVM
Wfg/BfLjRkClGRw/hsDn6vj0+yf2MzUo2GkqZNt3lRMeBPOH7p5k6Beq72YiYLUH
aZmDGFmSqjnIDa52s2RnTZcTHscJyYY709MU10cU2oXmXFXTMYGidHTaNwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOzvRzdbMEAca4YjeVgyQn35mBuAMB8GA1UdIwQY
MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt
MGNmMTA5M2Q0NTQ4LzEvN085SE4xc3dRQnhyaGlONVdESkNmZm1ZRzRBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4
LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATUMaMA0G
CSqGSIb3DQEBCwUAA4IBAQCfIW0ysxLACkkKOsp96nfq2B9DEIJc6eDzAXuDLcFc
pshZkBMyD55BgnhhGfiil9eECFg111ZEdoA+OCSZDE/UFnLTC8c7r01B5k2nQPPJ
cEuOtCssOksGNPRBvgQDM5jcCZEbvPc7PQijOVGcwMWNSJi769W4ictdojNNmL7+
I7mKEvJj+vxeF8GD3FchJZNyHEPnJ3sjs2XH5p4LqgBzr9KfcSqzGwgMZijQKg6K
0Y7dYQNX8V1sMaR2+rs/8MjWpDgAny8DA1vREaEGSe5Jswe/wNo1DPjfzw6FeggM
CCByhaeoyJZsIfvi+idIgmvo5iMyDtx2huJARaeojjTT
-----END CERTIFICATE-----
Generated at Sun Oct 25 14:37:52 2026 by rpki-client