Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/2pIKGVVs_fNWYkfePgnH0HhdLnE.roa
File: 2pIKGVVs_fNWYkfePgnH0HhdLnE.roa (raw, json)
Hash identifier: 3l+UH1KBw86zTwHYg+1x5M9NbVVmmlSaZoIrAbfIe10=
Subject key identifier: DA:92:0A:19:55:6C:FD:F3:56:62:47:DE:3E:09:C7:D0:78:5D:2E:71
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 019CBD75F82B51B0EAC5BAF6D41228ABEADC
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/2pIKGVVs_fNWYkfePgnH0HhdLnE.roa
Signing time: Thu 05 Mar 2026 10:05:50 +0000
ROA not before: Thu 05 Mar 2026 10:05:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3319
IP address blocks: 77.47.142.0/24 maxlen: 24
77.47.210.0/24 maxlen: 24
77.47.211.0/24 maxlen: 24
77.47.252.0/22 maxlen: 24
185.143.56.0/22 maxlen: 24
185.143.57.0/24 maxlen: 24
195.178.128.0/22 maxlen: 24
195.178.132.0/24 maxlen: 24
195.178.133.0/24 maxlen: 24
195.178.134.0/24 maxlen: 24
195.178.135.0/24 maxlen: 24
195.178.136.0/24 maxlen: 24
195.178.139.0/24 maxlen: 24
195.178.144.0/23 maxlen: 23
195.178.147.0/24 maxlen: 24
195.178.154.0/24 maxlen: 24
195.178.156.0/24 maxlen: 24
212.111.194.0/24 maxlen: 24
212.111.207.0/24 maxlen: 24
212.111.216.0/24 maxlen: 24
212.111.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Mar 2026 15:04:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:bd:75:f8:2b:51:b0:ea:c5:ba:f6:d4:12:28:ab:ea:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Mar 5 10:05:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=da920a19556cfdf3566247de3e09c7d0785d2e71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:92:b0:4f:d8:7d:3f:69:a5:f9:24:76:19:f0:
e3:44:00:c7:dd:9b:94:c6:6e:85:e3:a7:46:46:8d:
a3:67:16:82:2a:e0:cd:65:37:cb:c5:89:28:4d:bc:
d6:73:95:d0:18:4f:ec:81:18:33:8d:05:80:3a:f3:
58:c7:67:0f:ed:66:c9:b3:29:05:5d:f1:ee:a9:38:
e7:55:7e:75:7d:1c:d9:b8:af:7f:25:9a:d4:6e:07:
41:bc:63:a0:06:56:e6:83:f4:d0:c0:8c:6b:5f:1a:
f6:9d:bb:67:13:87:e4:7d:79:6c:b2:30:68:25:b9:
10:6a:51:65:71:82:c6:09:6c:66:b3:7f:af:6b:69:
1f:97:8f:1b:d0:03:5c:3f:7a:63:4e:cc:99:7c:7b:
10:9d:54:cc:86:32:38:db:12:38:c3:60:57:ac:33:
7c:04:22:b5:76:43:0b:4d:ca:6a:e5:f1:53:6a:46:
a9:61:f6:40:39:7b:77:49:07:cc:0f:72:ea:82:f7:
4d:a4:52:8e:5d:4d:15:93:32:8b:fd:bb:01:3d:d5:
d9:31:04:c8:34:17:29:7f:fb:59:02:42:b6:27:8a:
eb:31:b0:f0:c2:e5:03:7f:a8:30:57:fa:cf:67:71:
d2:7a:ba:7f:71:37:1e:83:63:3a:ad:91:ff:3e:0b:
4c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:92:0A:19:55:6C:FD:F3:56:62:47:DE:3E:09:C7:D0:78:5D:2E:71
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/2pIKGVVs_fNWYkfePgnH0HhdLnE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.142.0/24
77.47.210.0/23
77.47.252.0/22
185.143.56.0/22
195.178.128.0-195.178.136.255
195.178.139.0/24
195.178.144.0/23
195.178.147.0/24
195.178.154.0/24
195.178.156.0/24
212.111.194.0/24
212.111.207.0/24
212.111.216.0/23
Signature Algorithm: sha256WithRSAEncryption
3a:93:f1:0a:fa:e7:f8:5e:48:f7:e7:7d:b7:80:61:0b:77:d0:
ec:60:84:59:44:ce:2b:c0:f9:55:4d:d4:a2:87:5b:07:66:68:
0b:05:05:0c:e9:e6:40:31:87:0b:95:15:30:16:2c:3f:dc:14:
45:bd:64:9d:7f:d7:19:b8:64:95:30:6b:51:b6:84:18:4d:ad:
70:24:fd:38:40:81:bd:01:a5:6c:51:9d:74:a5:2e:89:f9:cb:
cb:da:0a:53:52:3b:90:c8:df:d0:4d:b8:95:79:91:59:82:d5:
ee:55:a8:be:6f:80:3b:fe:7d:ae:43:64:87:f2:cf:db:50:fe:
12:44:3e:41:65:3f:ea:0a:ae:2d:05:e0:36:ca:bc:4b:56:bb:
5a:cc:0e:3f:9f:64:39:55:b5:ea:3f:79:1e:80:e5:33:88:83:
1d:f0:82:5b:00:5d:24:b1:a8:54:a9:b7:a5:d5:b5:d3:57:ad:
fc:55:41:1e:02:95:ef:44:8c:58:ab:90:4a:58:e4:f0:e3:fc:
40:aa:2e:96:d3:62:da:64:a1:71:3d:f7:ee:5f:39:23:e5:43:
1e:2e:10:c1:c7:5b:f5:80:3f:ff:eb:3a:e7:39:f4:74:c4:0d:
f6:94:46:a5:63:4a:e1:db:2d:6d:7b:f6:a0:c1:20:32:a4:b4:
c2:ed:4c:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 10 21:23:38 2026 by rpki-client