Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/Rz9L-fsw4a_mbNQNxF8L8eBmEHM.roa
File: Rz9L-fsw4a_mbNQNxF8L8eBmEHM.roa (raw, json)
Hash identifier: vftAEz3x91u1Hc7eUFmPCsiTfON2YdeF+0OPnpeRYCs=
Subject key identifier: 47:3F:4B:F9:FB:30:E1:AF:E6:6C:D4:0D:C4:5F:0B:F1:E0:66:10:73
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 01A042418F3DFBF3CF8E788F3AC0D8E2E3C9
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/Rz9L-fsw4a_mbNQNxF8L8eBmEHM.roa
Signing time: Thu 27 Aug 2026 08:06:27 +0000
ROA not before: Thu 27 Aug 2026 08:06:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209194
IP address blocks: 77.47.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 21:38:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:42:41:8f:3d:fb:f3:cf:8e:78:8f:3a:c0:d8:e2:e3:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Aug 27 08:06:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=473f4bf9fb30e1afe66cd40dc45f0bf1e0661073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d2:d1:5d:d2:94:87:60:d7:47:ed:ab:33:f5:
7e:4c:e3:2e:42:78:da:58:30:41:2a:69:36:b9:45:
24:a3:84:8f:a8:90:dc:e3:5e:15:91:11:c8:e1:c8:
ce:17:9c:3e:63:b9:e9:9d:04:57:3b:e6:2f:bd:65:
50:2b:96:d8:82:24:8d:eb:94:02:43:33:3a:a2:b2:
0e:da:58:08:13:83:52:81:a3:9e:83:66:bf:44:92:
ed:5a:84:e3:3e:6b:49:2e:25:d8:58:7e:08:a8:5e:
aa:e4:44:a4:4d:52:47:ae:db:ad:67:be:61:42:54:
81:f9:c5:31:d0:6a:4a:ea:ad:35:58:c6:a0:68:27:
01:c3:4a:13:8e:2c:d2:ae:21:37:44:44:54:9b:27:
c5:4f:1b:c3:a3:01:ea:40:03:76:df:c6:21:76:96:
c6:4c:46:6f:75:90:d8:8e:f5:49:cb:8f:e2:fe:2f:
d9:85:5c:fc:b2:59:ca:fd:57:70:8f:89:03:49:a7:
fb:90:eb:0b:32:e6:f1:f8:8e:6d:58:1f:27:1f:c6:
08:d3:ce:e7:85:21:36:9a:3e:e3:95:30:4e:12:f4:
cb:bb:69:64:66:10:72:8d:86:6c:1e:9f:85:05:79:
49:47:2a:be:c4:d9:8f:6e:b5:35:4e:3f:e5:d3:53:
47:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:3F:4B:F9:FB:30:E1:AF:E6:6C:D4:0D:C4:5F:0B:F1:E0:66:10:73
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/Rz9L-fsw4a_mbNQNxF8L8eBmEHM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.178.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:9e:9b:49:01:ac:e0:87:80:af:a5:b1:20:0e:75:1e:7c:3e:
50:88:bb:f5:0e:80:b8:51:f4:ba:5a:0d:3c:3f:92:fc:8a:e4:
6f:cb:a5:5f:10:7f:0b:fb:ff:e3:5f:ba:6d:e0:ea:a7:32:78:
cf:c3:48:a7:3c:a7:fd:b8:49:42:15:04:e6:d8:be:16:97:ea:
0f:c4:9e:09:da:70:3e:93:f2:36:c0:8d:31:a3:94:85:c0:fd:
84:1e:83:eb:a7:ad:5a:4a:dd:ff:bd:2a:05:10:24:30:fb:b8:
f1:bb:8d:1c:c7:28:0e:25:a7:a2:68:da:3f:24:8e:26:9d:58:
af:fa:0c:ba:56:23:08:f3:ce:9c:7a:eb:73:f3:06:e4:4b:0a:
a1:8c:4a:b8:35:35:80:e1:d1:d5:0f:24:95:98:c5:39:bc:24:
bf:9f:ac:0d:b1:be:fe:a5:2d:11:58:3d:7a:7f:1e:5b:51:9c:
47:81:82:bc:dc:59:b0:64:75:47:4c:54:d6:f7:52:5b:b4:f7:
5f:ff:e6:b6:38:58:03:70:a0:cd:08:2f:96:77:16:4b:47:2f:
39:4e:77:f1:10:21:b6:a2:b8:20:b0:e6:46:c6:72:9c:12:65:
cf:92:89:3f:68:af:42:a5:3b:bd:87:f1:d3:30:b7:ac:a8:b9:
d4:96:9b:c6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaBCQY89+/PPjniPOsDY4uPJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5NDI2MzI1YWNiOGNlNjA5YTY4NmZhNjU1YjA1ODk2ODgw
OWIzNDYwHhcNMjYwODI3MDgwNjI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NzNmNGJmOWZiMzBlMWFmZTY2Y2Q0MGRjNDVmMGJmMWUwNjYxMDczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdLRXdKUh2DXR+2rM/V+TOMuQnja
WDBBKmk2uUUko4SPqJDc414VkRHI4cjOF5w+Y7npnQRXO+YvvWVQK5bYgiSN65QC
QzM6orIO2lgIE4NSgaOeg2a/RJLtWoTjPmtJLiXYWH4IqF6q5ESkTVJHrtutZ75h
QlSB+cUx0GpK6q01WMagaCcBw0oTjizSriE3RERUmyfFTxvDowHqQAN238YhdpbG
TEZvdZDYjvVJy4/i/i/ZhVz8slnK/Vdwj4kDSaf7kOsLMubx+I5tWB8nH8YI087n
hSE2mj7jlTBOEvTLu2lkZhByjYZsHp+FBXlJRyq+xNmPbrU1Tj/l01NHgwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEc/S/n7MOGv5mzUDcRfC/HgZhBzMB8GA1UdIwQY
MBaAFBlCYyWsuM5gmmhvplWwWJaICbNGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQt
MDNmNGM3MTEzYzM0LzEvUno5TC1mc3c0YV9tYk5RTnhGOEw4ZUJtRUhNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQtMDNmNGM3MTEzYzM0
LzEvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATS+yMA0G
CSqGSIb3DQEBCwUAA4IBAQCPnptJAazgh4CvpbEgDnUefD5QiLv1DoC4UfS6Wg08
P5L8iuRvy6VfEH8L+//jX7pt4OqnMnjPw0inPKf9uElCFQTm2L4Wl+oPxJ4J2nA+
k/I2wI0xo5SFwP2EHoPrp61aSt3/vSoFECQw+7jxu40cxygOJaeiaNo/JI4mnViv
+gy6ViMI886ceutz8wbkSwqhjEq4NTWA4dHVDySVmMU5vCS/n6wNsb7+pS0RWD16
fx5bUZxHgYK83FmwZHVHTFTW91JbtPdf/+a2OFgDcKDNCC+WdxZLRy85TnfxECG2
orggsOZGxnKcEmXPkok/aK9CpTu9h/HTMLesqLnUlpvG
-----END CERTIFICATE-----
Generated at Tue Sep 1 05:50:47 2026 by rpki-client