Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/iD2U4zdxDUNknM2DneaTcrtFQLw.roa
File: iD2U4zdxDUNknM2DneaTcrtFQLw.roa (raw, json)
Hash identifier: LAqlPOPV90FVI8CYgJRQIl/gI3NnpV/QqgGPF9uYOSU=
Subject key identifier: 88:3D:94:E3:37:71:0D:43:64:9C:CD:83:9D:E6:93:72:BB:45:40:BC
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019FDC8FFD46A39C1EE7BF5494B5B0665EA2
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/iD2U4zdxDUNknM2DneaTcrtFQLw.roa
Signing time: Fri 07 Aug 2026 14:10:51 +0000
ROA not before: Fri 07 Aug 2026 14:10:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6079
IP address blocks: 77.67.36.0/22 maxlen: 24
194.77.12.0/22 maxlen: 24
194.77.28.0/22 maxlen: 24
194.77.32.0/22 maxlen: 24
194.77.72.0/22 maxlen: 24
194.77.93.0/24 maxlen: 24
194.77.188.0/22 maxlen: 24
194.77.196.0/24 maxlen: 24
194.77.199.0/24 maxlen: 24
194.77.221.0/24 maxlen: 24
194.77.223.0/24 maxlen: 24
194.122.86.0/24 maxlen: 24
194.231.192.0/23 maxlen: 24
195.21.130.0/24 maxlen: 24
195.162.255.0/24 maxlen: 24
212.168.48.0/20 maxlen: 24
212.168.128.0/19 maxlen: 24
212.168.172.0/22 maxlen: 24
212.168.208.0/20 maxlen: 24
212.168.224.0/19 maxlen: 24
217.8.204.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 07:42:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:dc:8f:fd:46:a3:9c:1e:e7:bf:54:94:b5:b0:66:5e:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Aug 7 14:10:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=883d94e337710d43649ccd839de69372bb4540bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:89:5d:f3:29:51:24:05:43:04:99:e4:e5:8f:
d0:44:62:c7:88:6f:fc:cd:d5:83:fd:ad:43:d2:07:
1d:11:7a:00:21:21:71:2d:30:ca:5e:ba:a3:a1:00:
48:81:2c:31:48:dd:cc:a5:36:e5:1d:72:6f:6d:63:
68:c0:f3:cf:d3:2e:2f:9b:5f:c5:04:30:27:7a:ce:
72:8f:1a:5f:c8:90:cd:30:b1:a4:b9:ed:4f:ab:ea:
05:0d:eb:06:e2:80:55:90:91:03:e4:12:06:fa:a3:
36:00:63:cd:3a:cb:ab:3f:41:13:71:48:d8:46:64:
94:4a:d8:aa:19:7c:21:d8:c1:4a:87:b0:69:c1:13:
3b:9b:ad:80:c6:0a:b0:e4:82:ce:6a:8c:8a:db:c1:
31:b3:5a:7e:5b:1f:d7:d8:32:7e:ab:cf:2b:00:66:
29:9c:ac:b6:00:70:67:5d:ec:06:63:6b:66:5a:da:
f9:ca:86:c9:80:71:79:16:b1:08:b4:11:8d:79:ec:
50:35:9b:6a:34:e5:05:d4:83:93:c6:26:c1:f2:08:
64:41:1d:da:44:cc:c0:3e:3f:82:8f:5d:5c:e2:78:
be:7b:15:d3:60:1d:62:db:5a:08:c4:48:03:ad:73:
9f:6e:fa:48:09:40:02:66:e9:81:1c:cb:ea:70:d3:
28:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:3D:94:E3:37:71:0D:43:64:9C:CD:83:9D:E6:93:72:BB:45:40:BC
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/iD2U4zdxDUNknM2DneaTcrtFQLw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.67.36.0/22
194.77.12.0/22
194.77.28.0-194.77.35.255
194.77.72.0/22
194.77.93.0/24
194.77.188.0/22
194.77.196.0/24
194.77.199.0/24
194.77.221.0/24
194.77.223.0/24
194.122.86.0/24
194.231.192.0/23
195.21.130.0/24
195.162.255.0/24
212.168.48.0/20
212.168.128.0/19
212.168.172.0/22
212.168.208.0-212.168.255.255
217.8.204.0/22
Signature Algorithm: sha256WithRSAEncryption
34:e1:a2:6b:da:b0:46:9a:31:12:99:b4:00:f7:2f:a9:dd:82:
06:90:b4:0d:df:22:4f:03:b8:e9:f4:81:19:fa:59:18:9b:04:
6c:42:db:4a:ae:b5:e8:b0:45:09:ba:8b:e6:dd:3c:e8:12:aa:
49:a9:6b:e8:25:62:00:d6:fd:49:a4:1f:40:fe:7f:e7:9d:89:
d7:4c:c5:e1:aa:7a:09:13:0a:6c:23:7d:d1:4b:41:8f:9b:0a:
27:1b:ee:ef:61:2c:b3:b2:19:3b:85:8f:05:c3:75:64:9c:6e:
81:b6:24:be:47:24:ed:aa:ce:b8:7a:5f:45:dc:c8:14:26:fb:
e0:f2:93:5e:99:c5:ae:4b:93:c2:7f:72:4a:46:11:e9:38:5e:
a1:9c:5b:90:98:1c:94:cb:84:c2:06:54:4d:aa:99:f7:68:1f:
22:3f:65:41:a6:36:a4:af:d3:b3:26:71:92:b3:29:9d:7d:97:
4f:be:aa:8f:0a:bc:09:0d:50:29:5b:78:a1:41:28:c8:75:47:
26:f3:cf:70:04:82:c5:a4:10:f0:4c:30:67:d2:1d:7f:b7:b5:
09:aa:67:6d:22:69:9f:ba:4a:81:e0:c6:28:98:1e:ff:83:ca:
5e:86:b2:85:57:28:aa:96:9c:fe:f3:a4:2e:29:66:3c:0d:fb:
75:d9:67:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 14:50:33 2026 by rpki-client