Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/uV54egboR00aRhO_Bnoo4EHTJeA.roa
File: uV54egboR00aRhO_Bnoo4EHTJeA.roa (raw, json)
Hash identifier: +yjEhdFd8VFjJ6XQMATsYd7tYPTpykmVw3/MOq/e+lk=
Subject key identifier: B9:5E:78:7A:06:E8:47:4D:1A:46:13:BF:06:7A:28:E0:41:D3:25:E0
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019FFD07B376593C1F1818EB88C351F04724
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/uV54egboR00aRhO_Bnoo4EHTJeA.roa
Signing time: Thu 13 Aug 2026 21:29:28 +0000
ROA not before: Thu 13 Aug 2026 21:29:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 397373
IP address blocks: 77.67.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fd:07:b3:76:59:3c:1f:18:18:eb:88:c3:51:f0:47:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Aug 13 21:29:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b95e787a06e8474d1a4613bf067a28e041d325e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a9:23:61:ef:0b:7d:a3:74:bf:20:ba:5c:35:
d4:21:cd:14:17:f0:08:f5:23:24:08:39:74:d6:f4:
d6:4d:af:9a:e3:40:13:aa:06:3c:0b:64:d8:0a:63:
ab:06:55:f1:96:b2:2f:ae:7b:cb:cd:4d:df:07:ae:
04:f4:96:83:8d:a6:de:c6:1c:7e:92:2e:6a:21:08:
84:23:8d:d0:18:22:cb:99:03:ed:d5:66:ea:45:86:
82:cf:1c:d6:b0:b4:0a:f8:e9:26:b5:bf:2d:6c:48:
af:82:96:e3:0d:93:55:69:8a:be:bb:89:8f:51:41:
b9:a3:e7:52:34:fc:85:3e:a7:83:4b:3e:ec:56:9a:
38:ec:98:de:4b:40:00:ae:6c:37:8f:09:37:a1:57:
e2:c0:17:a0:33:44:74:c0:1b:cd:01:bc:20:09:01:
1f:e3:6f:5b:e5:6d:4f:ba:b2:23:49:50:41:f9:f5:
f2:69:77:45:3c:6f:eb:80:40:57:6d:e9:45:a3:9f:
b7:0f:e8:d0:da:78:e1:28:1e:cf:e0:40:98:3f:01:
bc:4d:2e:f1:56:24:40:8c:a7:b9:14:d1:88:81:70:
31:fd:db:55:0f:a6:f9:b4:ba:bc:e1:6c:73:b9:58:
78:33:ff:a3:39:4a:19:cd:c7:b6:70:86:a8:87:c8:
c5:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:5E:78:7A:06:E8:47:4D:1A:46:13:BF:06:7A:28:E0:41:D3:25:E0
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/uV54egboR00aRhO_Bnoo4EHTJeA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.67.6.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:3c:0f:1d:a2:bc:f7:2e:ce:8c:4d:c5:55:71:fa:89:0c:4e:
97:0c:b0:e5:37:11:01:4a:44:7b:36:fd:a6:13:fe:53:68:c0:
ea:f2:e0:d3:5e:0e:95:e5:5a:56:59:5c:5e:63:82:21:24:81:
43:23:c2:d0:d7:bd:58:3d:56:e1:55:e9:c9:68:ed:f7:dd:69:
73:6a:be:ae:d8:1a:ed:89:6d:ea:5f:13:01:3f:35:fd:a4:69:
31:25:d0:45:5e:3c:b7:e8:a4:75:e8:b8:30:e6:43:c1:5d:8e:
28:56:a3:24:bf:c1:78:68:37:0f:e5:97:2e:00:48:e1:f3:bb:
15:59:ca:8f:69:32:69:16:4b:04:cd:82:f7:86:64:7b:f9:06:
4e:2d:07:92:82:5a:32:5a:ff:fe:45:12:f6:bd:a6:8d:c8:68:
29:a3:4c:43:b2:47:70:bb:a3:ac:b5:18:0a:a1:f0:a4:83:72:
a4:da:a3:4b:17:00:04:4a:71:53:cd:e7:c1:fb:4b:7a:e6:59:
aa:d0:e9:e0:35:c1:ed:3d:29:45:52:ac:60:c4:c0:f4:31:94:
d5:95:f8:0b:1c:45:bf:2f:42:09:0f:f5:e3:96:37:1e:27:b7:
4f:d5:66:8d:81:a7:ed:87:6f:7a:33:30:31:49:63:a3:68:fb:
1c:38:d7:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 23:30:41 2026 by rpki-client