Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/shH8ND44CjNm_lC6OtdnQ90ZV38.roa
File: shH8ND44CjNm_lC6OtdnQ90ZV38.roa (raw, json)
Hash identifier: mW2XGA6fQ4i48up0/zlTmMPN+U/6dDUB9ip1diC9c38=
Subject key identifier: B2:11:FC:34:3E:38:0A:33:66:FE:50:BA:3A:D7:67:43:DD:19:57:7F
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A0011E276573EF415F8F7CE9FC2C08D7D4
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/shH8ND44CjNm_lC6OtdnQ90ZV38.roa
Signing time: Fri 14 Aug 2026 16:32:28 +0000
ROA not before: Fri 14 Aug 2026 16:32:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152368
IP address blocks: 77.67.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 13:46:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:1e:27:65:73:ef:41:5f:8f:7c:e9:fc:2c:08:d7:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Aug 14 16:32:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b211fc343e380a3366fe50ba3ad76743dd19577f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0a:f0:7d:32:80:71:ce:81:e8:09:72:2f:88:
c2:69:fa:27:0e:73:c2:6e:d5:b4:c8:1d:55:e3:a2:
e0:51:7b:ea:1f:ef:c6:a7:56:8b:59:37:f4:5d:b2:
54:90:01:c7:f6:09:73:00:54:28:1c:6a:12:7d:28:
28:ea:ad:1f:42:4d:2b:71:5e:1d:6d:ac:33:bd:d1:
db:61:b8:7c:35:82:a8:60:52:5f:2d:12:93:58:33:
d6:cf:36:8f:0d:0f:7c:21:3c:dd:88:02:93:02:11:
65:b6:5d:18:07:09:46:0e:55:54:22:ba:1c:db:0f:
dc:7d:20:3f:27:f5:fe:d6:24:0c:6b:53:97:0d:f0:
0a:56:a1:34:5c:57:78:8d:20:74:4d:7c:7f:31:12:
db:8c:1f:d8:5f:78:f6:21:89:dd:34:29:cb:46:96:
ba:22:fd:76:27:0f:21:a5:61:60:14:fb:1c:d6:96:
da:21:a6:71:ca:d1:c9:56:d7:cf:d5:11:c1:52:3a:
7a:9e:14:88:df:70:33:29:68:0a:e5:a1:7e:3c:03:
97:4e:cb:d1:59:9b:3d:83:06:7b:8b:9a:0a:8c:a5:
12:3d:bc:8e:c2:66:70:04:fc:b2:cd:78:2a:4b:e5:
23:5c:55:58:c3:45:c1:00:b0:80:d8:24:13:d9:b2:
57:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:11:FC:34:3E:38:0A:33:66:FE:50:BA:3A:D7:67:43:DD:19:57:7F
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/shH8ND44CjNm_lC6OtdnQ90ZV38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.67.16.0/24
Signature Algorithm: sha256WithRSAEncryption
86:5a:52:6b:50:9c:6f:77:65:84:e4:7a:a4:fa:c6:26:ff:24:
fa:4a:39:53:d0:70:57:8a:f3:32:81:06:41:08:29:d8:42:6f:
a3:b7:b2:8e:f9:7f:c1:14:52:89:19:30:8f:c7:49:84:29:49:
5b:5a:60:a7:3b:88:44:35:09:ae:84:42:08:62:53:1f:45:a8:
25:63:d6:c5:f8:be:32:74:80:21:4c:04:f9:aa:c3:83:59:6e:
de:83:75:fe:22:b3:af:e2:fd:95:3c:87:ef:18:8c:47:9d:10:
2a:dc:6d:62:c9:d4:66:1c:12:46:c0:fa:da:08:24:f5:58:54:
c1:c3:0e:95:6a:16:7f:b1:51:98:9c:c3:6f:11:b4:f9:13:be:
c3:2b:c8:23:98:24:4f:c1:9e:ea:85:4c:ac:42:76:93:9c:28:
74:53:a4:ee:63:8c:1e:db:2d:b3:f9:03:f3:70:25:53:49:4c:
f1:21:50:2e:91:c1:be:ba:10:be:1c:10:e5:92:b9:f3:aa:d3:
4a:50:9b:e3:b6:f0:65:e3:a7:84:5b:2f:b6:be:b6:cb:9a:bf:
9a:31:bb:82:7a:26:bf:fb:b8:57:8d:22:4f:2a:11:6e:cc:7c:
61:76:f2:b9:1c:15:e8:c2:da:28:fe:9d:41:ad:68:63:42:9a:
da:2f:25:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 18:18:08 2026 by rpki-client