Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/9mcCz1BF0nXdnaTlQ3QcSreUiPo.roa
File: 9mcCz1BF0nXdnaTlQ3QcSreUiPo.roa (raw, json)
Hash identifier: rRcvwbRRs/wuWNbtdMrKFp1XLC4v+K5i/ai2GW5ni0c=
Subject key identifier: F6:67:02:CF:50:45:D2:75:DD:9D:A4:E5:43:74:1C:4A:B7:94:88:FA
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 019E21CDD04A897A9CBCEB7028CE0A013D65
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/9mcCz1BF0nXdnaTlQ3QcSreUiPo.roa
Signing time: Wed 13 May 2026 14:46:36 +0000
ROA not before: Wed 13 May 2026 14:46:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3319
IP address blocks: 77.47.142.0/24 maxlen: 24
77.47.152.0/22 maxlen: 24
77.47.178.0/24 maxlen: 24
77.47.210.0/24 maxlen: 24
77.47.211.0/24 maxlen: 24
77.47.242.0/24 maxlen: 24
77.47.248.0/22 maxlen: 24
77.47.252.0/22 maxlen: 24
185.143.56.0/22 maxlen: 24
185.143.57.0/24 maxlen: 24
195.178.128.0/22 maxlen: 24
195.178.132.0/24 maxlen: 24
195.178.133.0/24 maxlen: 24
195.178.134.0/24 maxlen: 24
195.178.135.0/24 maxlen: 24
195.178.136.0/24 maxlen: 24
195.178.139.0/24 maxlen: 24
195.178.144.0/23 maxlen: 23
195.178.146.0/24 maxlen: 24
195.178.147.0/24 maxlen: 24
195.178.148.0/24 maxlen: 24
195.178.149.0/24 maxlen: 24
195.178.154.0/24 maxlen: 24
195.178.156.0/24 maxlen: 24
212.111.194.0/24 maxlen: 24
212.111.200.0/24 maxlen: 24
212.111.207.0/24 maxlen: 24
212.111.216.0/24 maxlen: 24
212.111.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Jun 2026 14:52:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:21:cd:d0:4a:89:7a:9c:bc:eb:70:28:ce:0a:01:3d:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: May 13 14:46:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f66702cf5045d275dd9da4e543741c4ab79488fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:38:9f:a1:8c:ca:f6:11:de:44:1c:c5:f5:d4:
cf:5e:92:b0:9a:82:d2:a0:be:c0:02:4b:e5:d6:91:
ac:42:95:6d:35:e2:f3:b0:f0:bf:9e:f0:83:73:5c:
f2:90:4a:16:54:74:61:b4:f7:1c:7c:22:2c:2d:5d:
52:54:fb:67:7c:85:08:39:88:1a:4c:07:0d:13:92:
32:ed:1e:23:0c:92:40:b2:1d:61:fa:d8:af:18:12:
c3:42:2c:64:aa:e5:4d:3d:4f:a6:64:55:9e:de:fb:
5c:61:dd:42:5f:cb:1c:cd:04:7e:fe:65:1b:39:4c:
1a:35:4d:c0:3b:4f:3a:07:84:66:bb:7f:54:ed:22:
08:7b:3d:94:af:00:97:15:46:4a:9d:1e:23:62:ce:
aa:14:66:a0:57:af:99:b5:49:8c:d1:73:eb:08:b2:
4a:01:22:80:74:67:40:c7:ef:56:b8:5c:fc:39:b6:
02:fe:6a:9d:87:41:91:dc:1f:47:5b:cc:cc:2c:e8:
d4:be:75:18:19:26:f9:c1:e8:2e:6e:27:5f:d9:d0:
5a:f5:94:fc:33:f0:5f:05:72:48:a6:a0:ca:ea:e2:
d9:24:88:a0:5c:67:a7:c6:55:0e:71:37:31:2b:2a:
91:6a:34:95:4f:5c:a1:62:5d:97:b0:34:bf:0e:98:
e2:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:67:02:CF:50:45:D2:75:DD:9D:A4:E5:43:74:1C:4A:B7:94:88:FA
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/9mcCz1BF0nXdnaTlQ3QcSreUiPo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.142.0/24
77.47.152.0/22
77.47.178.0/24
77.47.210.0/23
77.47.242.0/24
77.47.248.0/21
185.143.56.0/22
195.178.128.0-195.178.136.255
195.178.139.0/24
195.178.144.0-195.178.149.255
195.178.154.0/24
195.178.156.0/24
212.111.194.0/24
212.111.200.0/24
212.111.207.0/24
212.111.216.0/23
Signature Algorithm: sha256WithRSAEncryption
c8:ea:46:32:40:42:f7:08:85:c9:13:62:c5:64:78:2a:e7:84:
48:51:5e:1f:0b:b0:67:3a:8f:25:68:f5:89:e4:07:84:b6:4a:
42:31:fb:da:ba:70:f5:7e:6c:9a:e3:d2:91:5e:1a:c2:2a:5e:
0f:e1:0f:18:3a:f9:79:5c:73:2a:c9:22:40:8f:63:88:68:ac:
df:3a:83:e8:b7:93:7c:a1:14:66:66:7c:cc:0b:57:09:b2:5a:
43:1b:73:20:54:51:14:53:ea:a5:93:1d:a1:72:da:61:fd:22:
62:1a:fb:7e:31:d4:aa:d8:8f:37:6b:03:bf:12:b5:ef:72:30:
be:74:6b:ca:05:05:bf:78:f4:0a:78:8a:e1:c9:6a:a2:12:b8:
d6:35:81:a0:80:09:ca:1e:df:b3:a8:40:00:e0:81:b8:ba:d7:
6f:b4:ea:0e:65:91:f2:50:26:83:82:f9:31:5a:3d:60:80:1c:
22:09:aa:44:25:9b:ac:9c:d4:4f:7b:1a:6c:3d:de:f6:a4:a8:
b1:fd:b8:6f:dd:4b:b6:55:90:72:cb:49:a3:f6:45:f6:a0:66:
ba:d2:1c:24:1c:20:fe:12:c5:df:27:43:dc:c7:5c:b7:a0:63:
a4:78:35:76:1f:a1:df:34:31:b0:a2:e2:a4:b8:5f:93:76:db:
64:1c:ee:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 8 22:48:10 2026 by rpki-client