Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/FFju9ra6d-LGWH3FstRTRLU1zlk.roa
File: FFju9ra6d-LGWH3FstRTRLU1zlk.roa (raw, json)
Hash identifier: hmIzY/PlXb3Z1MUmEpmP9E+JL+hBgIPE6Ur/D186q+g=
Subject key identifier: 14:58:EE:F6:B6:BA:77:E2:C6:58:7D:C5:B2:D4:53:44:B5:35:CE:59
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 019F47912B909E072A2ACECD810FD9FC6B9F
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/FFju9ra6d-LGWH3FstRTRLU1zlk.roa
Signing time: Thu 09 Jul 2026 15:48:43 +0000
ROA not before: Thu 09 Jul 2026 15:48:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44620
IP address blocks: 77.92.151.0/24 maxlen: 24
78.135.77.0/24 maxlen: 24
188.132.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:47:91:2b:90:9e:07:2a:2a:ce:cd:81:0f:d9:fc:6b:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jul 9 15:48:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1458eef6b6ba77e2c6587dc5b2d45344b535ce59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:db:10:d5:16:d0:a6:df:d6:fc:7d:ec:59:4d:
ad:29:5b:1c:4e:97:3e:58:2f:5b:d3:90:1d:18:7e:
a3:c5:c0:10:5f:6c:9c:90:87:53:3c:63:68:29:66:
fc:cb:bf:6b:77:c4:61:f8:67:c9:05:18:08:a7:56:
1c:50:ca:de:ed:a6:aa:02:76:94:fe:71:14:b3:a1:
78:f4:d1:d4:81:af:99:34:dd:05:90:e8:cf:a6:f6:
20:ee:b7:e4:2c:c3:d8:78:fd:06:ce:ec:f3:84:14:
1b:2d:e6:49:cd:48:a2:65:64:8f:ae:76:df:b1:64:
3f:72:c7:43:a5:51:90:f8:de:d2:3b:be:e5:22:3f:
ff:ad:f1:67:2d:0f:72:98:e9:f8:51:e0:71:66:4b:
96:b9:17:43:a2:c2:2a:9f:f0:cd:13:22:8c:df:7f:
63:28:0b:dd:45:84:80:55:77:c1:d0:53:ad:32:c0:
41:c7:13:7d:cd:18:97:e9:d9:19:fb:55:05:53:54:
48:ef:d0:af:38:f1:03:11:7a:cc:3d:db:6b:e7:45:
2c:ec:ac:64:27:24:c2:cc:38:a7:d7:1d:63:02:24:
43:35:e4:03:7c:dd:10:cd:66:30:ee:23:9e:65:da:
1b:15:c8:64:68:15:3c:0e:45:12:08:7d:ff:a8:5b:
c7:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:58:EE:F6:B6:BA:77:E2:C6:58:7D:C5:B2:D4:53:44:B5:35:CE:59
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/FFju9ra6d-LGWH3FstRTRLU1zlk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.92.151.0/24
78.135.77.0/24
188.132.174.0/24
Signature Algorithm: sha256WithRSAEncryption
48:1a:c2:f0:04:ca:2f:da:99:51:74:b4:07:1f:7f:33:23:7d:
db:20:d7:21:cd:eb:6e:1f:cd:3c:46:aa:4e:d5:ac:c9:b1:f4:
99:76:fb:4f:53:25:86:f1:5b:0f:67:70:02:46:54:41:1e:24:
79:5e:d3:1b:6d:65:8c:66:31:ba:d2:06:46:d9:d4:74:bf:71:
f4:66:e2:24:f8:a7:33:b0:5f:f9:ca:63:ee:2d:e5:22:8c:dd:
19:b0:1e:8d:6a:e5:a9:5f:c7:f8:e0:d6:0f:ef:1a:92:a9:28:
df:65:7d:2d:21:69:b5:0a:0d:1c:a2:03:4b:40:3e:e1:ba:ce:
44:5d:a2:c3:75:68:0c:71:3b:c8:5c:1d:2c:31:d3:64:ea:be:
cf:e4:ac:c7:65:f6:fa:6b:bd:5b:c0:d4:63:1e:67:5a:ff:c3:
5e:cc:c5:62:26:fc:cf:82:ac:d8:04:ed:d8:e8:6a:bc:0d:18:
82:f1:8a:d4:80:7c:24:3e:af:8e:2e:4d:29:c6:ab:ec:b1:c9:
ee:f7:09:43:ea:76:55:be:ea:3e:da:1f:ae:81:a3:75:b3:6f:
0f:9b:4d:97:47:33:b3:fd:db:b7:93:e3:af:69:12:48:9d:c7:
de:cd:c0:b6:f0:96:c2:49:20:e6:eb:da:16:ae:9c:6c:98:52:
76:ba:2d:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:02:30 2026 by rpki-client