Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/F71hE2pAoDJBEjf_4yqomM0QX2Q.roa
File: F71hE2pAoDJBEjf_4yqomM0QX2Q.roa (raw, json)
Hash identifier: ow7El02WCl7BpdOHCC5aO0LgMrB0JBWQfABTLvVS18o=
Subject key identifier: 17:BD:61:13:6A:40:A0:32:41:12:37:FF:E3:2A:A8:98:CD:10:5F:64
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019EC992A7D816C798AD6F21F965A92E602A
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/F71hE2pAoDJBEjf_4yqomM0QX2Q.roa
Signing time: Mon 15 Jun 2026 04:38:12 +0000
ROA not before: Mon 15 Jun 2026 04:38:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62240
IP address blocks: 77.67.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Jun 2026 13:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c9:92:a7:d8:16:c7:98:ad:6f:21:f9:65:a9:2e:60:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jun 15 04:38:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=17bd61136a40a032411237ffe32aa898cd105f64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d0:f4:59:52:84:eb:3e:7a:1b:4c:63:c1:5e:
e1:7a:0c:db:13:b7:dc:9e:ee:96:12:0c:f0:be:c2:
a4:c2:62:db:2c:d7:fd:d5:2e:45:7a:38:29:50:86:
ad:29:d2:f1:52:fc:5c:b0:a2:61:44:6c:56:04:b5:
ae:a8:2c:31:3e:4b:25:3e:14:8f:6e:cc:3a:49:53:
bf:ef:19:8f:a8:8c:25:21:a0:12:0d:f3:fb:c1:10:
75:1b:a9:06:da:99:d9:1d:66:ad:00:74:83:a9:59:
c8:5a:e1:a6:11:f9:2a:1f:de:f6:50:b6:35:d4:96:
3a:c4:94:cc:41:5e:7a:d5:6e:a5:92:a3:8e:8d:28:
7d:4d:39:8f:0e:a9:17:40:30:06:8c:36:db:14:3e:
01:38:c3:5d:a3:db:60:08:e0:df:cc:47:1b:29:3d:
51:58:c7:9d:ee:f9:37:82:ea:f2:b4:e9:8e:0f:af:
57:90:a2:c1:4f:56:b5:30:df:7e:14:4a:7b:9b:1e:
68:06:7d:c8:0c:a5:a6:25:f6:d9:9e:43:37:2d:b3:
64:2d:fa:16:3e:be:8a:6d:f3:53:c7:9f:02:90:bc:
53:ef:02:74:53:68:03:9a:71:60:2e:0a:47:01:df:
b4:91:b0:35:e2:6f:2f:66:7f:8a:2b:b6:ea:c1:59:
6e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:BD:61:13:6A:40:A0:32:41:12:37:FF:E3:2A:A8:98:CD:10:5F:64
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/F71hE2pAoDJBEjf_4yqomM0QX2Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.67.11.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:3e:a3:0c:07:36:4e:ab:05:71:2a:5e:38:1c:38:f4:e1:12:
07:67:3e:ad:66:85:9b:77:9b:f8:d4:89:0f:b5:03:b1:3a:d7:
05:ef:2f:9f:45:12:4f:55:91:13:ba:6e:e8:6e:90:1e:5c:a1:
f6:17:89:9f:3f:a8:01:da:10:f6:89:b3:1e:e8:a4:8c:5a:76:
18:d3:8d:c3:f2:51:48:0d:0c:8c:67:eb:9c:62:ca:d8:d3:f9:
55:84:96:17:de:80:4d:e3:ec:2b:8a:ee:07:02:72:4c:8c:1e:
a0:09:be:f5:79:42:96:46:91:ac:f2:5c:2d:aa:0c:d5:1b:e1:
3a:a6:42:6f:bd:31:f7:e3:09:67:15:0e:04:fe:73:92:99:00:
2d:e1:56:3d:b8:5b:70:15:c1:55:42:dd:d5:7f:8d:13:2f:11:
0f:11:e8:ea:b1:00:17:0f:a8:c2:d1:b5:4b:06:e4:1e:be:4d:
fe:79:ba:89:43:30:08:db:cc:49:23:4e:18:5e:62:4b:56:0a:
b8:2a:4b:2e:5b:94:00:9f:68:6c:78:f3:dd:59:b7:b0:f1:a8:
26:3d:5e:e9:81:56:39:35:01:40:4e:04:ac:f0:f9:b7:e3:f1:
6b:f1:b4:ba:85:18:17:4f:45:5a:64:4a:6c:a0:35:9a:ea:91:
8f:87:19:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 17:40:30 2026 by rpki-client