Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/L6pA6dqo4JBMSuF5ROGNzwk-AWM.roa
File: L6pA6dqo4JBMSuF5ROGNzwk-AWM.roa (raw, json)
Hash identifier: eZHdi1uoI4O0n9vGs1id6DxX8FOaQEq3LrkqkgiYU50=
Subject key identifier: 2F:AA:40:E9:DA:A8:E0:90:4C:4A:E1:79:44:E1:8D:CF:09:3E:01:63
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 019F1CC24DF7B35F919520E897B2015B14B5
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/L6pA6dqo4JBMSuF5ROGNzwk-AWM.roa
Signing time: Wed 01 Jul 2026 08:18:43 +0000
ROA not before: Wed 01 Jul 2026 08:18:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3319
IP address blocks: 77.47.142.0/24 maxlen: 24
77.47.152.0/22 maxlen: 24
77.47.178.0/24 maxlen: 24
77.47.210.0/24 maxlen: 24
77.47.211.0/24 maxlen: 24
77.47.242.0/24 maxlen: 24
77.47.248.0/22 maxlen: 24
77.47.252.0/22 maxlen: 24
185.143.56.0/22 maxlen: 24
185.143.57.0/24 maxlen: 24
195.178.128.0/22 maxlen: 24
195.178.129.0/24 maxlen: 24
195.178.130.0/24 maxlen: 24
195.178.136.0/24 maxlen: 24
195.178.139.0/24 maxlen: 24
195.178.144.0/23 maxlen: 23
195.178.146.0/24 maxlen: 24
195.178.147.0/24 maxlen: 24
195.178.148.0/24 maxlen: 24
195.178.149.0/24 maxlen: 24
195.178.154.0/24 maxlen: 24
195.178.156.0/24 maxlen: 24
212.111.194.0/24 maxlen: 24
212.111.200.0/24 maxlen: 24
212.111.207.0/24 maxlen: 24
212.111.216.0/24 maxlen: 24
212.111.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 13:45:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1c:c2:4d:f7:b3:5f:91:95:20:e8:97:b2:01:5b:14:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Jul 1 08:18:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2faa40e9daa8e0904c4ae17944e18dcf093e0163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4f:38:5e:15:d2:03:bc:25:ca:88:ea:5a:e5:
96:2f:db:8d:55:4d:b5:5d:2c:86:16:49:0a:11:25:
f6:fa:07:44:91:fd:98:6a:a7:d0:d1:9a:0f:26:ef:
63:45:d4:33:95:7e:9b:d6:d8:12:b9:92:cb:e5:e8:
3b:7a:a7:5d:93:3a:7f:ad:cc:ed:9a:a4:64:94:4b:
c0:c4:1f:c3:cd:d4:37:36:12:54:82:43:fd:28:a2:
c1:7e:25:87:fe:67:f1:5b:43:45:16:b7:b0:de:43:
e2:ed:14:fe:e6:51:ca:b6:57:4a:51:07:2e:2f:52:
74:46:13:7e:4a:b1:21:df:3b:ca:47:78:6d:92:f7:
7c:14:19:0c:77:38:54:b0:34:dd:eb:8b:8f:39:8d:
f1:4a:40:b7:9a:be:ba:fc:74:91:e6:a3:a0:68:c8:
ea:29:5d:a9:15:54:7e:8d:7e:74:4d:d2:70:a2:14:
9f:0b:19:d3:b3:c5:fe:29:40:61:21:1c:fb:10:fd:
66:26:ec:cb:57:ff:f8:cb:01:7f:78:33:51:e5:be:
78:8d:3a:5a:de:f4:b9:61:3f:f4:80:19:bb:24:4e:
e1:b9:45:b0:61:e6:04:b4:41:68:43:2a:91:eb:8c:
c8:07:d2:ac:f5:81:e9:67:83:25:20:d3:e5:20:09:
8c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:AA:40:E9:DA:A8:E0:90:4C:4A:E1:79:44:E1:8D:CF:09:3E:01:63
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/L6pA6dqo4JBMSuF5ROGNzwk-AWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.142.0/24
77.47.152.0/22
77.47.178.0/24
77.47.210.0/23
77.47.242.0/24
77.47.248.0/21
185.143.56.0/22
195.178.128.0/22
195.178.136.0/24
195.178.139.0/24
195.178.144.0-195.178.149.255
195.178.154.0/24
195.178.156.0/24
212.111.194.0/24
212.111.200.0/24
212.111.207.0/24
212.111.216.0/23
Signature Algorithm: sha256WithRSAEncryption
a9:7d:71:09:54:94:17:00:15:72:f0:08:90:0d:5b:b2:e6:e4:
26:62:c9:4f:fa:67:bb:b2:74:cd:74:e6:e8:7f:76:60:ee:03:
d0:82:00:2e:bb:74:4e:f6:75:a9:fe:90:d5:4c:1c:eb:35:34:
4e:d9:c6:aa:9c:72:80:7e:d4:11:ef:13:64:eb:c7:49:aa:05:
0f:df:09:d9:dd:6c:9f:07:2f:8c:d9:25:0a:5a:56:38:ac:59:
71:a9:db:3c:bc:61:15:b2:63:01:cb:d6:ed:c6:a2:7a:ae:68:
b3:13:c9:17:ed:07:34:b9:dc:1f:6f:a5:40:da:6e:23:a5:c0:
3f:ed:d9:11:36:cd:d6:a1:67:98:4a:5a:d2:f9:99:a5:cb:93:
e2:e4:81:55:b3:a6:f1:fb:45:bc:15:4e:dd:7f:63:6f:92:20:
eb:67:dc:4a:08:d6:38:a2:af:d0:c4:43:b3:35:65:60:61:b7:
7d:fa:e2:92:14:45:b2:cb:4b:28:8c:2f:ea:af:07:0a:8a:99:
75:2e:e4:ed:ac:4a:46:6f:76:5d:d1:a2:54:6c:84:b1:ac:2f:
18:dc:1d:43:ae:83:05:ec:39:8d:7c:0a:f6:42:b4:b2:e9:94:
e7:bc:71:bd:df:f6:67:90:90:22:e7:fe:f2:12:4e:48:ab:81:
03:18:b4:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 22:37:52 2026 by rpki-client