Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/XVBftT0WblS94gHOwDDqmzJNTUE.roa
File: XVBftT0WblS94gHOwDDqmzJNTUE.roa (raw, json)
Hash identifier: Ww9qGwgMXKOJQ0gidxXnIej+KbVKkv6ARbgW+Iogp34=
Subject key identifier: 5D:50:5F:B5:3D:16:6E:54:BD:E2:01:CE:C0:30:EA:9B:32:4D:4D:41
Certificate issuer: /CN=6d088cef28e02af7d00f297816c55f8e3c43d535
Certificate serial: 019EE5014FA721AB094D8ECBDE49AE02B422
Authority key identifier: 6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/XVBftT0WblS94gHOwDDqmzJNTUE.roa
Signing time: Sat 20 Jun 2026 12:28:48 +0000
ROA not before: Sat 20 Jun 2026 12:28:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44477
IP address blocks: 77.91.73.0/24 maxlen: 24
77.91.74.0/24 maxlen: 24
77.91.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 03:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e5:01:4f:a7:21:ab:09:4d:8e:cb:de:49:ae:02:b4:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d088cef28e02af7d00f297816c55f8e3c43d535
Validity
Not Before: Jun 20 12:28:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5d505fb53d166e54bde201cec030ea9b324d4d41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:85:66:62:93:18:fd:31:87:25:fd:c3:9c:55:
73:97:73:c8:b5:04:74:cd:7a:2a:ae:ac:ea:37:43:
30:d4:46:42:25:07:3f:6b:97:7e:10:57:36:b7:d6:
39:cd:88:bc:10:b5:61:09:a5:91:97:54:3a:70:66:
50:9c:b8:fb:61:9d:be:71:b8:43:15:0d:9b:52:9e:
90:97:34:c3:0d:a9:fd:e9:71:ab:c8:59:87:91:ec:
99:54:54:71:c8:ea:2c:87:15:d2:05:f2:9a:39:2f:
54:45:ed:8d:bb:08:9f:c7:f8:f9:d3:71:66:c9:bd:
c8:7e:00:db:59:e2:a1:90:f9:c8:86:97:2f:03:2b:
e3:d1:e3:05:76:2b:43:16:5d:4b:bc:a2:cb:5a:7d:
d4:a0:6a:57:e7:cd:07:52:78:cc:34:9a:c7:42:bb:
c3:e3:2b:ae:68:1a:10:d8:e6:a8:b6:09:15:22:f9:
7a:9a:18:b3:8e:d2:3f:14:94:49:f4:27:79:61:28:
86:65:7b:21:25:2f:f7:c5:8b:8e:10:3a:4d:3f:13:
0d:1a:04:cf:28:3b:2f:4f:e1:eb:d4:8e:2e:64:0b:
ee:8b:32:fb:a7:96:f3:1b:77:ae:3e:3d:e9:1c:38:
7c:47:b3:14:c5:6f:c2:2d:de:04:41:a3:0e:0a:d5:
6a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:50:5F:B5:3D:16:6E:54:BD:E2:01:CE:C0:30:EA:9B:32:4D:4D:41
X509v3 Authority Key Identifier:
keyid:6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/XVBftT0WblS94gHOwDDqmzJNTUE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.91.73.0-77.91.75.255
Signature Algorithm: sha256WithRSAEncryption
2e:d4:d4:26:c7:7d:3c:3a:95:96:0b:ff:ac:37:21:7a:7f:a2:
ae:2e:3c:f0:fd:94:2c:cd:e9:d5:31:61:f3:d5:45:14:3a:33:
97:dc:8a:d1:6b:ba:5f:7e:51:0a:90:dd:9a:62:56:e6:ad:8f:
b5:43:45:0c:47:97:d8:c4:9f:86:2f:8f:9e:cf:0e:65:e6:db:
90:9d:51:0a:c5:76:b8:f9:17:4a:77:17:e1:fc:f2:1b:7a:8c:
d8:85:c0:62:ac:20:8c:89:2a:a7:fb:8c:54:b2:c7:af:14:df:
07:9f:ee:80:e3:e3:3b:23:94:18:75:a9:41:f8:99:c5:e5:a7:
f1:58:b5:a9:b5:57:78:20:8a:2c:95:de:0d:33:e5:0d:20:bf:
cd:4c:0a:ec:53:e0:df:01:15:be:a4:ef:5c:2e:b1:5f:03:38:
f1:13:3a:18:1e:29:6d:66:08:6c:c0:9d:08:57:d3:88:85:26:
a9:f6:8c:af:77:5c:7d:de:30:b8:78:a2:7d:5a:07:d5:31:ea:
cd:b7:3a:03:79:e0:49:77:ae:f7:f9:04:26:f6:27:ec:b1:3d:
08:18:05:25:e0:4c:33:b7:36:39:98:0e:a0:75:42:2c:cf:6b:
aa:72:c0:91:94:80:28:7c:33:7f:94:c3:bf:bc:44:95:1e:77:
98:db:1b:e5
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZ7lAU+nIasJTY7L3kmuArQiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkMDg4Y2VmMjhlMDJhZjdkMDBmMjk3ODE2YzU1ZjhlM2M0
M2Q1MzUwHhcNMjYwNjIwMTIyODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZDUwNWZiNTNkMTY2ZTU0YmRlMjAxY2VjMDMwZWE5YjMyNGQ0ZDQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIVmYpMY/TGHJf3DnFVzl3PItQR0
zXoqrqzqN0Mw1EZCJQc/a5d+EFc2t9Y5zYi8ELVhCaWRl1Q6cGZQnLj7YZ2+cbhD
FQ2bUp6QlzTDDan96XGryFmHkeyZVFRxyOoshxXSBfKaOS9URe2Nuwifx/j503Fm
yb3IfgDbWeKhkPnIhpcvAyvj0eMFditDFl1LvKLLWn3UoGpX580HUnjMNJrHQrvD
4yuuaBoQ2OaotgkVIvl6mhizjtI/FJRJ9Cd5YSiGZXshJS/3xYuOEDpNPxMNGgTP
KDsvT+Hr1I4uZAvuizL7p5bzG3euPj3pHDh8R7MUxW/CLd4EQaMOCtVqZQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFF1QX7U9Fm5UveIBzsAw6psyTU1BMB8GA1UdIwQY
MBaAFG0IjO8o4Cr30A8peBbFX448Q9U1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlFpTTd5amdLdmZRRHlsNEZzVmZqanhEMVRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9kNTdhNjQtYmQzMi00YzkxLWJlMDYt
ZmVlOGVhZjczYjBkLzEvWFZCZnRUMFdibFM5NGdIT3dERHFtekpOVFVFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi9kNTdhNjQtYmQzMi00YzkxLWJlMDYtZmVlOGVhZjczYjBk
LzEvYlFpTTd5amdLdmZRRHlsNEZzVmZqanhEMVRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABNW0kD
BAJNW0gwDQYJKoZIhvcNAQELBQADggEBAC7U1CbHfTw6lZYL/6w3IXp/oq4uPPD9
lCzN6dUxYfPVRRQ6M5fcitFrul9+UQqQ3ZpiVuatj7VDRQxHl9jEn4Yvj57PDmXm
25CdUQrFdrj5F0p3F+H88ht6jNiFwGKsIIyJKqf7jFSyx68U3wef7oDj4zsjlBh1
qUH4mcXlp/FYtam1V3ggiiyV3g0z5Q0gv81MCuxT4N8BFb6k71wusV8DOPETOhge
KW1mCGzAnQhX04iFJqn2jK93XH3eMLh4on1aB9Ux6s23OgN54El3rvf5BCb2J+yx
PQgYBSXgTDO3NjmYDqB1QizPa6pywJGUgCh8M3+Uw7+8RJUed5jbG+U=
-----END CERTIFICATE-----
Generated at Wed Jul 8 09:08:11 2026 by rpki-client