Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/snTGsaHLFaLnMi34-zKwXS_MVzE.roa
File: snTGsaHLFaLnMi34-zKwXS_MVzE.roa (raw, json)
Hash identifier: 3zO11GmYlTWdZqU6PAEysySP5IRsLnNQBsefywtFQ80=
Subject key identifier: B2:74:C6:B1:A1:CB:15:A2:E7:32:2D:F8:FB:32:B0:5D:2F:CC:57:31
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019EC11446285A4CEBAE3E25464AC158A68E
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/snTGsaHLFaLnMi34-zKwXS_MVzE.roa
Signing time: Sat 13 Jun 2026 13:03:11 +0000
ROA not before: Sat 13 Jun 2026 13:03:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 23470
IP address blocks: 77.67.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 05:46:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:14:46:28:5a:4c:eb:ae:3e:25:46:4a:c1:58:a6:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jun 13 13:03:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b274c6b1a1cb15a2e7322df8fb32b05d2fcc5731
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:49:4a:f3:bf:44:9f:01:65:13:1a:c4:81:05:
2d:b2:64:19:aa:94:aa:d2:3d:9b:fa:a6:7a:a5:d4:
01:5d:c7:a5:51:63:a7:4a:57:f7:f1:7e:92:3f:bc:
c4:4f:ad:45:d1:4e:40:05:15:ba:1d:f7:b5:dc:16:
a6:20:0f:eb:75:dc:f9:8d:00:ac:ff:ae:e8:29:25:
81:3f:89:27:70:d1:77:9c:55:4a:48:4b:92:03:d8:
93:97:7e:f4:e9:69:e6:21:d2:21:8d:d3:0a:e7:15:
27:b9:69:2e:fd:5f:13:64:0b:70:13:ab:ba:0a:14:
16:ec:6e:69:81:28:54:47:56:92:6a:9a:6a:d5:1c:
c2:91:28:7a:09:07:87:d5:eb:ee:9f:df:17:4f:73:
86:47:c0:b7:98:21:18:30:4c:83:f7:e0:4c:0b:d5:
c8:4b:f3:05:e1:70:e0:0e:05:3d:f4:22:d2:c2:f5:
c6:ea:39:e0:c2:46:f2:4a:55:2a:67:16:1e:ad:da:
9a:60:50:23:ca:6c:05:79:76:0d:c8:1b:f9:87:6f:
a5:d6:0a:dc:28:bd:ad:46:14:e1:37:52:27:38:33:
50:cf:e8:9e:a7:5c:ec:24:6a:78:2b:1b:72:be:94:
7e:f7:c0:9f:8e:79:98:b5:93:57:3c:76:98:80:6b:
0c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:74:C6:B1:A1:CB:15:A2:E7:32:2D:F8:FB:32:B0:5D:2F:CC:57:31
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/snTGsaHLFaLnMi34-zKwXS_MVzE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.67.58.0/24
Signature Algorithm: sha256WithRSAEncryption
65:3c:71:78:85:ef:8a:12:6d:f7:3b:29:ba:cd:08:47:40:6a:
24:7f:15:15:0c:4f:38:3e:05:80:e5:ce:0f:33:e1:9f:73:76:
ce:e2:7f:f6:ab:94:5f:b9:ed:9d:ec:40:13:35:38:17:9e:8b:
2b:30:f8:97:ea:43:a5:da:11:ab:d9:18:be:e6:cb:79:fa:ee:
27:25:58:fa:6c:34:1c:8b:f6:de:41:1e:e9:20:5d:43:4c:88:
af:0e:fb:e6:3c:01:4b:55:46:c2:8f:10:40:69:05:21:08:00:
b3:87:0a:cc:54:d0:3e:95:18:49:9a:d9:11:86:41:74:cb:71:
13:55:a1:e0:70:f0:3e:2e:60:28:8c:14:50:dd:f9:e3:11:be:
1c:5b:a3:ae:13:d4:f2:63:90:52:f2:90:a1:0d:d4:20:bb:9e:
2d:7f:cf:74:23:e5:fb:c5:31:4e:44:af:2a:be:51:d9:1e:d8:
0b:8a:4d:c6:61:a0:77:d6:cf:b5:48:a9:02:1e:fe:47:ed:e9:
99:f3:42:7a:f2:c2:2a:12:a6:63:f5:7f:40:72:7a:23:ec:50:
0d:c2:ad:29:96:06:45:a5:d4:96:5e:bf:a7:2b:bb:17:81:03:
3f:cd:b2:9e:81:26:86:5b:6f:e2:e4:c9:ed:f7:85:1b:df:3c:
60:17:03:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 12:25:27 2026 by rpki-client