Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/wTgu1L67exff_psjb2HrxT10958.roa
File: wTgu1L67exff_psjb2HrxT10958.roa (raw, json)
Hash identifier: /R8S3QVgmQV10GHZ96Co3SNXthbrSMOg/Xx3GAE1140=
Subject key identifier: C1:38:2E:D4:BE:BB:7B:17:DF:FE:9B:23:6F:61:EB:C5:3D:74:F7:9F
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A13EC59A7C672F7FA588B02E9AA264359F
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/wTgu1L67exff_psjb2HrxT10958.roa
Signing time: Thu 15 Oct 2026 08:54:59 +0000
ROA not before: Thu 15 Oct 2026 08:54:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21859
IP address blocks: 77.67.17.0/24 maxlen: 24
77.67.100.0/24 maxlen: 24
212.168.4.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:c5:9a:7c:67:2f:7f:a5:88:b0:2e:9a:a2:64:35:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Oct 15 08:54:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c1382ed4bebb7b17dffe9b236f61ebc53d74f79f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:3c:3a:d6:2e:b9:6b:c8:46:4e:fd:64:d2:4f:
08:cf:e0:c9:3d:0b:52:81:84:b5:44:18:0a:9c:24:
00:64:95:1a:e3:13:2d:23:4f:3c:5b:aa:67:c6:5f:
cc:a2:4c:1d:08:44:85:da:ef:5d:4e:48:4d:52:75:
70:c6:3c:de:e8:98:23:6c:f8:b2:48:f1:a5:aa:d6:
1b:df:a9:dc:a6:c0:7c:07:ae:6c:4c:24:b8:8c:ca:
b8:d1:3c:34:a9:b7:81:9f:97:cd:e1:8a:ca:85:fd:
68:ef:da:29:9d:45:b4:a6:51:a9:f0:29:3a:b7:b0:
8a:19:90:b4:c7:d7:69:b1:7f:f9:d7:c9:76:ee:a3:
79:5b:3b:4a:10:fb:cb:40:6d:fb:37:cc:26:0a:b4:
ba:78:3c:d0:bf:5a:e6:a6:0b:5c:a4:fa:3a:da:5d:
74:d2:c2:88:46:ed:21:a4:f8:7b:b4:ba:75:f1:16:
62:c9:01:b9:d9:33:25:c6:ab:b4:00:b4:50:83:30:
a8:7b:7f:02:9a:82:e0:7b:58:53:8b:d8:85:52:55:
e0:d7:b9:59:9a:7c:b0:5b:57:b5:e8:54:05:aa:73:
e9:65:ed:e4:d9:53:eb:bb:26:74:4c:72:7d:53:d6:
6e:c4:2b:13:ed:c2:8e:c9:05:96:67:ce:19:f9:47:
62:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:38:2E:D4:BE:BB:7B:17:DF:FE:9B:23:6F:61:EB:C5:3D:74:F7:9F
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/wTgu1L67exff_psjb2HrxT10958.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.67.17.0/24
77.67.100.0/24
212.168.4.0/22
Signature Algorithm: sha256WithRSAEncryption
31:2c:46:8b:9d:aa:dd:6f:e4:3c:59:36:0a:7f:5c:69:67:3e:
0b:50:3d:4e:40:15:20:b7:8e:45:37:f7:7f:97:0c:69:8a:a0:
9f:09:9f:f6:64:d4:a2:8d:97:de:1f:52:a7:b7:cb:3a:78:b3:
31:f1:52:cf:6a:ce:9d:b0:00:8b:ca:b6:07:70:b4:cb:bf:d8:
ba:5e:b9:e7:99:23:43:7d:f7:5a:66:52:58:81:da:77:9a:b1:
25:53:a9:5c:20:fb:33:37:4a:d0:d2:65:81:d0:6a:28:93:2a:
5b:8a:47:02:04:ea:a8:74:e0:8b:21:6f:13:32:57:58:64:0a:
03:a3:bb:e3:4f:c5:8c:33:b1:47:32:f8:ff:15:8d:4e:00:be:
a2:63:5f:ee:25:a5:55:30:a8:0a:cf:f0:f4:f6:1c:18:3e:6c:
bc:5c:4d:9d:58:dc:07:c2:73:96:e2:ab:51:86:49:89:b0:39:
ff:cc:bc:d6:1c:9c:62:43:ff:61:78:0f:9c:5b:65:16:30:0f:
e7:25:cf:e9:f8:cd:06:c7:2f:80:c0:6d:3b:76:08:fd:1c:d5:
72:85:1f:85:34:9b:a0:40:39:32:29:c0:7c:c8:1e:ab:a4:1a:
ac:3b:68:33:af:17:4d:77:a0:83:47:06:cb:e7:b2:98:b4:76:
09:8c:b0:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 02:16:18 2026 by rpki-client