Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/MYAYZrK_5Xy3kogDyS-Tjd7s76U.roa
File: MYAYZrK_5Xy3kogDyS-Tjd7s76U.roa (raw, json)
Hash identifier: A668awC6KYBb2eyQ1FgLhdERBN3oE8hYBC5LeNfqJhU=
Subject key identifier: 31:80:18:66:B2:BF:E5:7C:B7:92:88:03:C9:2F:93:8D:DE:EC:EF:A5
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A08DC5D90D6F9276D9FD6CDA6759907ADC
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/MYAYZrK_5Xy3kogDyS-Tjd7s76U.roa
Signing time: Fri 11 Sep 2026 00:02:28 +0000
ROA not before: Fri 11 Sep 2026 00:02:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 77.67.28.0/24 maxlen: 24
194.77.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:c5:d9:0d:6f:92:76:d9:fd:6c:da:67:59:90:7a:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Sep 11 00:02:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=31801866b2bfe57cb7928803c92f938ddeecefa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:50:c0:4b:9d:5b:2d:31:fa:de:04:1b:48:35:
cc:b5:f9:2e:70:02:a1:35:88:b5:2a:6d:c4:b0:8d:
50:21:b2:70:e5:54:e4:35:f3:70:3e:89:c1:8e:b1:
01:30:4b:29:82:d0:b5:a4:96:b7:0b:16:ad:9a:47:
da:1e:2e:17:ff:e7:da:f4:ee:e4:89:ba:27:7c:72:
e0:44:cb:6f:d4:67:ba:ae:f3:24:95:8b:4d:1f:fb:
f7:9b:61:2f:9d:df:fb:4d:bd:a9:42:2e:6f:83:54:
11:e4:a8:53:99:65:86:e8:54:23:79:b0:3c:c6:3c:
c0:2a:08:c9:7b:6c:b6:f3:10:61:fb:d8:39:16:e4:
08:08:74:d7:df:d2:b4:93:ab:ab:e7:ca:89:22:5b:
b8:7e:68:ac:ec:8a:43:5b:b5:c5:a2:27:67:35:94:
48:bb:64:db:ba:8b:f1:eb:57:d4:a7:24:c5:c4:77:
b8:0e:fc:af:e3:47:13:ef:64:d4:e6:20:3c:e1:8f:
03:6f:82:c0:08:44:2b:ef:36:51:26:71:57:18:92:
bf:ed:3e:51:99:8b:a7:ce:cd:9b:b5:9b:d9:a7:fb:
ab:a9:f4:7a:4c:ec:3a:f4:18:58:89:4b:03:e8:81:
5f:30:fa:8c:a9:08:36:f5:59:b2:0e:27:99:f2:9f:
60:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:80:18:66:B2:BF:E5:7C:B7:92:88:03:C9:2F:93:8D:DE:EC:EF:A5
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/MYAYZrK_5Xy3kogDyS-Tjd7s76U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.67.28.0/24
194.77.220.0/24
Signature Algorithm: sha256WithRSAEncryption
85:20:d9:c8:68:11:14:28:5d:23:ad:f5:b7:41:4d:d8:ca:7b:
a2:4f:5b:38:b1:a7:f4:aa:99:bb:ea:df:6c:73:25:e6:27:74:
38:74:ef:16:7a:2b:55:8d:0e:7d:2b:30:dc:8c:32:65:12:23:
91:45:e5:3a:4f:65:ca:59:db:36:3f:70:e2:a3:e4:89:90:c0:
c4:ab:96:01:3c:f7:4f:fa:a7:c7:a3:67:86:c3:14:de:2d:2a:
51:4b:b9:21:89:29:04:e1:a3:7c:db:86:19:1a:d8:90:74:fd:
27:de:da:0c:cd:2a:86:7a:b4:0b:4e:9d:73:77:f0:68:cc:2c:
4c:be:6c:76:b0:88:1a:f6:b7:00:ef:39:7b:8c:13:95:3f:92:
f7:9a:ff:54:3a:2b:1c:82:85:d4:77:29:da:64:08:8a:b0:7a:
33:d2:d6:6a:5b:e8:6f:3b:11:c2:b6:7f:cc:42:2f:c2:72:f2:
d8:89:0d:89:7f:59:19:d6:9c:50:d0:3b:b7:df:e8:57:52:fc:
a4:31:5d:77:6c:6c:c7:3f:b3:7e:a1:81:69:a3:fd:73:bd:38:
44:c4:fd:3f:80:7c:8b:80:68:8a:75:1d:89:29:3d:18:5b:42:
bb:8d:90:10:1f:ef:4b:86:8e:27:29:e5:e7:54:d3:1f:25:49:
da:c5:d4:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 15:31:07 2026 by rpki-client