Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/t77l9J1AVKa-JkU7GCYZmMTYsDU.roa
File: t77l9J1AVKa-JkU7GCYZmMTYsDU.roa (raw, json)
Hash identifier: GwzjmUwEnQhMhlDnNX0tjd0PMVwqf5FP6kl1nqCgQTE=
Subject key identifier: B7:BE:E5:F4:9D:40:54:A6:BE:26:45:3B:18:26:19:98:C4:D8:B0:35
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019ECCBB66B0DBBE0BFBB1204FA609353EDE
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/t77l9J1AVKa-JkU7GCYZmMTYsDU.roa
Signing time: Mon 15 Jun 2026 19:21:34 +0000
ROA not before: Mon 15 Jun 2026 19:21:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402456
IP address blocks: 77.67.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:cc:bb:66:b0:db:be:0b:fb:b1:20:4f:a6:09:35:3e:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jun 15 19:21:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b7bee5f49d4054a6be26453b18261998c4d8b035
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:71:9d:fb:ff:d1:82:f5:3a:76:ca:e1:56:a8:
69:a9:27:50:d2:61:f4:0e:d6:a8:cb:9a:f0:ea:ba:
b4:9c:c9:ac:17:ff:df:82:24:5c:95:6a:98:55:2a:
af:ba:21:3f:ba:15:2b:7d:92:28:25:71:f6:b8:58:
db:b4:d4:89:9b:8e:6c:3e:58:f5:61:ca:75:ad:13:
7b:04:77:ff:29:57:44:06:ee:7f:d4:52:39:59:4c:
dd:9c:5f:31:94:1f:03:b2:d5:82:76:07:5a:4a:40:
6e:10:d7:b4:4e:47:1b:88:b1:82:f3:eb:e6:41:9d:
b3:03:04:c8:e0:aa:23:07:40:cf:5f:e6:d5:14:6f:
8e:d9:8a:b8:f7:4c:a9:7a:1d:d0:1f:6c:3d:4a:57:
83:4a:88:31:2e:81:6d:64:64:0e:3c:e6:67:eb:7a:
e1:90:ca:2c:aa:10:64:68:33:95:15:5b:5a:95:25:
97:42:4a:a4:eb:a9:ed:04:55:88:8a:36:5c:5e:10:
b0:68:84:82:6a:06:6b:45:f2:4e:25:da:3d:8b:8f:
8f:5c:b4:1f:a9:d9:a2:90:61:01:04:1d:1f:b6:9f:
77:bb:a1:9e:b0:a0:bb:a5:bd:56:73:83:5c:d2:9f:
3c:83:43:32:9f:2e:d5:1a:14:8c:59:70:71:87:57:
71:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:BE:E5:F4:9D:40:54:A6:BE:26:45:3B:18:26:19:98:C4:D8:B0:35
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/t77l9J1AVKa-JkU7GCYZmMTYsDU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.67.22.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:e0:ea:bb:c6:34:d3:4c:6c:0b:25:ab:5c:05:be:7a:58:c4:
bf:74:7d:64:8f:19:46:c1:90:c5:a7:f9:50:ba:e0:d1:34:09:
4f:b2:18:2e:96:8d:3e:88:29:a9:6e:5f:5f:ac:ce:c5:13:42:
f5:fd:40:d8:c9:f3:94:df:7b:c2:9c:7a:4e:49:51:e2:b2:24:
51:8c:1f:80:54:f9:26:db:85:f0:be:2b:b3:5b:b9:a6:c5:ee:
a5:34:34:f3:60:ab:61:11:1a:e4:85:02:c3:18:73:14:7a:0f:
2e:ff:46:4d:75:9c:38:d6:52:5e:28:d6:d0:1a:12:1f:5c:c0:
1f:c4:33:25:75:5c:43:8d:74:82:38:5f:dc:e3:75:d4:36:63:
b4:c3:c9:5f:dc:0f:3e:6d:d1:58:c4:c8:fb:05:67:8a:f5:2a:
66:c1:52:b7:43:70:ee:24:cd:1f:21:e6:99:32:9a:56:97:ae:
16:de:bd:e8:b6:34:f8:90:29:25:33:b8:b5:8a:d5:5e:24:3b:
a4:84:62:a5:d7:01:8c:b1:3d:03:db:cd:7a:8e:f9:7f:83:45:
e6:44:31:a8:9d:9d:34:10:7c:47:d9:94:bb:9a:c0:f5:fa:ed:
72:8c:49:ed:b8:4c:18:f3:72:bd:9d:2d:a6:92:bc:c3:03:c5:
a3:f5:ad:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 18:14:15 2026 by rpki-client