Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/0p0fIfuXTazqPXkq9HuhfT2nQc0.roa
File: 0p0fIfuXTazqPXkq9HuhfT2nQc0.roa (raw, json)
Hash identifier: A7pUsQ1minL0kDox7J4uEyrSjsZpy2Td5KKaa3dxrd0=
Subject key identifier: D2:9D:1F:21:FB:97:4D:AC:EA:3D:79:2A:F4:7B:A1:7D:3D:A7:41:CD
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 01A0E3636CA393879F392E819345A47D0BF9
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/0p0fIfuXTazqPXkq9HuhfT2nQc0.roa
Signing time: Sun 27 Sep 2026 15:02:18 +0000
ROA not before: Sun 27 Sep 2026 15:02:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208185
IP address blocks: 77.47.144.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 12:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e3:63:6c:a3:93:87:9f:39:2e:81:93:45:a4:7d:0b:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Sep 27 15:02:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d29d1f21fb974dacea3d792af47ba17d3da741cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5e:de:2d:5a:cc:f8:08:e4:8b:3a:17:97:2b:
3d:25:d8:51:89:0f:94:1d:95:c0:8b:e6:b8:e6:eb:
4c:0d:92:cd:2a:da:83:d2:ce:ff:52:88:7c:d1:5e:
0a:d2:48:c5:aa:3c:dc:2e:f6:92:98:63:6e:dc:64:
90:ba:1b:0c:20:a1:96:cc:6a:73:fb:a2:43:7a:6d:
a8:ac:bf:2e:c1:e6:57:33:c0:77:70:34:ba:b2:9f:
75:d6:50:bf:24:d8:a9:41:48:55:01:3f:2a:fc:23:
09:0d:ef:61:76:47:85:17:93:3b:74:e1:44:41:96:
f4:42:d9:71:b3:73:58:77:b8:86:70:92:31:36:56:
8e:f5:2e:1c:4e:1e:af:52:cd:1d:5b:e8:c7:20:95:
15:7d:43:a8:52:a0:91:5b:60:62:5c:e5:b9:c6:8a:
76:4a:c2:01:ce:aa:fd:1c:b6:cd:0c:f6:cd:44:96:
e7:eb:4e:f1:e9:82:93:c6:a8:8a:93:43:ff:87:85:
11:80:71:4b:8a:d1:61:4c:b4:1e:fb:a4:4a:60:98:
02:4e:2b:bf:f7:94:2f:33:e8:69:61:94:2f:55:16:
f4:59:b5:da:4f:a5:d2:68:9c:8f:a6:6b:07:0d:f2:
e8:54:4e:7b:5e:00:d9:80:3e:dd:7f:4b:fd:31:70:
cb:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:9D:1F:21:FB:97:4D:AC:EA:3D:79:2A:F4:7B:A1:7D:3D:A7:41:CD
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/0p0fIfuXTazqPXkq9HuhfT2nQc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.144.0/22
Signature Algorithm: sha256WithRSAEncryption
89:e7:c3:e9:5f:0c:14:9a:2c:8d:b8:51:77:96:55:b9:a6:f5:
3d:f6:1a:4f:d4:42:10:82:9b:42:40:49:6d:17:3d:6a:a9:ce:
7b:6e:01:21:c6:48:80:37:8f:5b:dd:0e:7d:d4:d5:9d:3d:99:
be:34:19:05:fb:5c:80:a3:f8:27:89:19:2d:c3:ea:c7:02:e0:
0c:7c:90:4e:e2:03:4d:0f:ad:81:8d:bc:01:c6:fc:57:10:7a:
3b:0b:2a:11:b9:04:70:2e:81:8b:94:f3:45:87:01:71:95:52:
27:4d:64:1f:21:08:9a:ba:c5:62:3e:29:1c:03:57:7b:af:36:
cb:27:97:e3:29:24:5f:a0:da:fe:28:3c:7e:60:58:ee:61:b9:
8e:fc:84:66:d5:89:5e:4c:3f:ea:1f:6e:08:ab:6b:21:cc:ca:
bf:a7:13:b3:0a:94:37:74:8d:d9:38:ab:6f:6b:ad:66:ee:36:
23:3f:d0:9c:47:e1:a2:62:8d:e8:8c:43:2f:59:66:97:f2:c3:
8f:c3:bb:fd:22:6a:1a:7b:ff:cc:36:ba:d1:9c:5b:db:00:09:
0c:a4:bb:2b:62:82:f1:2a:3a:cf:3b:91:89:a8:be:bb:13:93:
45:94:50:f5:fd:c2:d4:5a:01:33:51:50:43:8b:16:c2:53:c0:
b4:2d:0d:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 23:23:36 2026 by rpki-client