Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/bih7K8JBPlCx0QMssDppjenS2Kg.roa
File: bih7K8JBPlCx0QMssDppjenS2Kg.roa (raw, json)
Hash identifier: ZZUdG1P9vhoPLmJtzKhgRXTTqDaj56u1xQZLUwjR+co=
Subject key identifier: 6E:28:7B:2B:C2:41:3E:50:B1:D1:03:2C:B0:3A:69:8D:E9:D2:D8:A8
Certificate issuer: /CN=ad5eda0a1e7479c4ca78fe41c58d17e9d13b67aa
Certificate serial: 019F18F25A63A8EC65642785DED608398744
Authority key identifier: AD:5E:DA:0A:1E:74:79:C4:CA:78:FE:41:C5:8D:17:E9:D1:3B:67:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/bih7K8JBPlCx0QMssDppjenS2Kg.roa
Signing time: Tue 30 Jun 2026 14:32:43 +0000
ROA not before: Tue 30 Jun 2026 14:32:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25229
IP address blocks: 77.120.0.0/20 maxlen: 24
77.120.4.0/24 maxlen: 24
77.120.6.0/24 maxlen: 24
77.120.8.0/23 maxlen: 24
77.120.9.0/24 maxlen: 24
77.120.16.0/20 maxlen: 21
77.120.32.0/20 maxlen: 24
77.120.52.0/22 maxlen: 23
77.120.60.0/22 maxlen: 23
77.120.64.0/21 maxlen: 22
77.120.72.0/21 maxlen: 22
77.120.80.0/20 maxlen: 21
77.120.96.0/19 maxlen: 20
77.120.112.0/22 maxlen: 22
77.120.128.0/18 maxlen: 24
77.120.192.0/21 maxlen: 24
77.120.208.0/21 maxlen: 24
77.120.211.0/24 maxlen: 24
77.120.212.0/23 maxlen: 24
77.120.214.0/23 maxlen: 24
77.120.216.0/22 maxlen: 23
77.120.220.0/22 maxlen: 24
77.120.224.0/20 maxlen: 21
77.120.240.0/20 maxlen: 24
77.120.248.0/21 maxlen: 22
77.121.0.0/21 maxlen: 22
77.121.8.0/22 maxlen: 23
77.121.12.0/24 maxlen: 24
77.121.13.0/24 maxlen: 24
77.121.15.0/24 maxlen: 24
77.121.16.0/24 maxlen: 24
77.121.17.0/24 maxlen: 24
77.121.18.0/24 maxlen: 24
77.121.19.0/24 maxlen: 24
77.121.20.0/24 maxlen: 24
77.121.21.0/24 maxlen: 24
77.121.22.0/24 maxlen: 24
77.121.23.0/24 maxlen: 24
77.121.24.0/24 maxlen: 24
77.121.25.0/24 maxlen: 24
77.121.26.0/24 maxlen: 24
77.121.27.0/24 maxlen: 24
77.121.28.0/24 maxlen: 24
77.121.29.0/24 maxlen: 24
77.121.30.0/24 maxlen: 24
77.121.64.0/21 maxlen: 24
77.121.70.0/23 maxlen: 24
77.121.72.0/21 maxlen: 22
77.121.80.0/20 maxlen: 21
77.121.96.0/19 maxlen: 20
77.121.96.0/20 maxlen: 21
77.121.100.0/24 maxlen: 24
77.121.101.0/24 maxlen: 24
77.121.112.0/20 maxlen: 21
77.121.127.0/24 maxlen: 24
77.123.128.0/19 maxlen: 20
77.123.144.0/22 maxlen: 22
77.244.32.0/20 maxlen: 21
82.144.192.0/19 maxlen: 20
109.201.224.0/24 maxlen: 24
109.201.225.0/24 maxlen: 24
109.201.226.0/24 maxlen: 24
109.201.227.0/24 maxlen: 24
109.201.228.0/22 maxlen: 23
109.201.232.0/22 maxlen: 23
109.201.236.0/23 maxlen: 24
109.201.238.0/23 maxlen: 24
109.201.240.0/20 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:f2:5a:63:a8:ec:65:64:27:85:de:d6:08:39:87:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad5eda0a1e7479c4ca78fe41c58d17e9d13b67aa
Validity
Not Before: Jun 30 14:32:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6e287b2bc2413e50b1d1032cb03a698de9d2d8a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:de:7a:d0:7e:a0:6a:3d:d3:bd:a2:31:62:02:
38:6a:b2:10:4b:9a:a1:10:05:5c:a2:42:30:aa:f2:
14:28:04:41:05:92:cb:bc:e7:0b:e6:bf:ad:c2:5a:
76:ca:d2:fc:da:67:66:4e:b8:c1:09:5e:52:66:57:
6f:a1:47:c5:92:86:b9:c4:52:d2:d7:f3:a0:9b:44:
bf:af:00:f3:0e:9d:79:85:ba:64:f9:2f:06:29:33:
e4:e5:04:eb:25:12:4d:ef:23:51:ba:95:03:d0:e3:
f8:ce:84:d9:b5:6b:89:49:3a:e9:06:15:a3:84:0f:
3e:fe:f0:5c:f3:6e:40:c7:8c:d7:99:f8:c2:fe:f0:
33:4c:8c:4e:90:23:6d:48:bd:46:d8:c8:e1:f0:2d:
89:97:24:eb:19:1c:c4:ce:6d:81:ef:fe:a0:43:bb:
3e:cc:7c:be:76:e0:d6:69:70:e1:1f:5d:99:c0:59:
f1:f8:10:7b:4b:96:d3:41:47:ab:0c:00:81:4e:3b:
c0:87:22:9f:0b:73:95:6d:50:93:e5:cd:29:f6:a3:
b8:d9:82:02:18:88:22:76:4d:17:08:59:d6:73:0d:
7e:0c:70:63:09:f4:76:9a:be:0b:72:8e:47:5c:10:
1a:65:02:db:14:5c:5e:da:ed:00:a3:02:01:a4:92:
7f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:28:7B:2B:C2:41:3E:50:B1:D1:03:2C:B0:3A:69:8D:E9:D2:D8:A8
X509v3 Authority Key Identifier:
keyid:AD:5E:DA:0A:1E:74:79:C4:CA:78:FE:41:C5:8D:17:E9:D1:3B:67:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/bih7K8JBPlCx0QMssDppjenS2Kg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.120.0.0-77.120.47.255
77.120.52.0/22
77.120.60.0-77.120.199.255
77.120.208.0-77.121.13.255
77.121.15.0-77.121.30.255
77.121.64.0/18
77.123.128.0/19
77.244.32.0/20
82.144.192.0/19
109.201.224.0/19
Signature Algorithm: sha256WithRSAEncryption
b8:da:45:2b:62:6f:b4:5a:89:19:24:3d:99:0a:a7:fb:84:90:
45:39:96:6f:1c:4b:fb:07:4f:aa:78:f1:76:70:24:ab:d5:34:
54:c6:b3:40:19:74:fd:28:9e:b8:03:88:1d:85:b2:fb:24:7d:
57:44:62:48:5a:e7:3e:fd:07:14:b2:d4:a7:d5:6c:0a:b7:b3:
fb:23:7b:a2:17:62:3f:e6:1d:bb:73:fa:d6:aa:4d:86:94:9e:
5f:d1:07:bf:d0:91:24:c9:df:c7:1d:ca:5d:f9:79:7b:7f:69:
07:ff:1f:53:b6:0c:3a:78:96:ed:59:e4:5f:31:69:ed:d2:03:
1a:b8:d2:00:f5:c7:c1:bf:e8:2f:b9:44:b4:0c:41:55:f9:ff:
70:2b:af:13:b8:bd:f7:57:10:9d:7d:d5:49:a0:b2:08:1b:39:
66:ea:d6:a3:61:ac:aa:6b:1d:7f:e3:8b:d0:89:7f:6a:23:79:
d0:d1:cf:86:83:97:1e:f2:20:4b:a8:dc:b3:ad:ae:02:e6:d7:
7c:17:38:31:70:7e:97:6c:90:43:3b:59:11:5d:20:f0:e6:e8:
fa:96:16:9e:fa:dd:9a:83:c4:30:3a:0a:61:cc:74:dd:48:71:
3a:d6:99:4f:33:65:dd:0f:06:30:aa:07:26:08:c1:6d:70:8b:
6e:6b:10:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 21:32:37 2026 by rpki-client