Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/dXJx4dK8ZEaZFkf2HvPQ_BKku_c.roa
File: dXJx4dK8ZEaZFkf2HvPQ_BKku_c.roa (raw, json)
Hash identifier: xxmOZVSWpnayyu1BmFI9+MLq01yx4gC/aV4bZ9x0fQs=
Subject key identifier: 75:72:71:E1:D2:BC:64:46:99:16:47:F6:1E:F3:D0:FC:12:A4:BB:F7
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 019CBD660AA4C22180C43A3DF5D52E9C5389
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/dXJx4dK8ZEaZFkf2HvPQ_BKku_c.roa
Signing time: Thu 05 Mar 2026 09:48:27 +0000
ROA not before: Thu 05 Mar 2026 09:48:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 55154
IP address blocks: 77.47.152.0/22 maxlen: 24
77.47.242.0/24 maxlen: 24
195.178.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 10:49:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:bd:66:0a:a4:c2:21:80:c4:3a:3d:f5:d5:2e:9c:53:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Mar 5 09:48:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=757271e1d2bc6446991647f61ef3d0fc12a4bbf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:57:41:b4:6b:55:21:a2:14:f9:bc:65:5f:b1:
55:8f:01:2b:86:37:5b:e4:b0:8c:8f:e9:78:2b:98:
7a:15:0b:2f:c8:b1:4d:d2:5c:7e:99:12:dc:f5:c0:
24:d7:2e:50:eb:9d:c0:32:b1:35:f4:7d:de:a5:e4:
13:c4:34:98:81:b1:14:d1:c8:f3:6b:6f:10:21:44:
66:02:a2:de:b6:70:cc:e6:06:89:7f:96:f1:5a:5f:
24:32:0a:71:db:a4:12:2f:c2:25:ee:3b:cc:64:17:
0a:7b:be:8a:12:6f:49:91:b2:16:f3:6c:bb:81:0c:
54:f7:92:25:e9:d2:cb:65:f7:0b:bc:08:80:2c:81:
8d:4d:be:ba:7f:59:dd:af:62:3d:35:5d:7a:b5:40:
7b:b8:4d:8d:b4:a1:52:d1:4a:80:e8:90:5e:94:b3:
97:3e:56:64:6d:10:48:ea:aa:d8:99:78:15:31:d7:
ce:37:50:58:0f:80:80:b7:f7:77:91:c3:47:9a:dc:
5e:97:02:f1:b7:d9:13:d1:dd:02:80:7d:91:34:c1:
8e:be:0d:3d:59:bf:8d:59:24:5d:db:b5:32:bd:91:
b9:08:d1:07:89:46:2c:43:36:06:1c:2e:2e:1f:fe:
a3:12:66:ec:f9:90:fd:15:04:a0:f2:59:36:9b:58:
19:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:72:71:E1:D2:BC:64:46:99:16:47:F6:1E:F3:D0:FC:12:A4:BB:F7
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/dXJx4dK8ZEaZFkf2HvPQ_BKku_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.152.0/22
77.47.242.0/24
195.178.149.0/24
Signature Algorithm: sha256WithRSAEncryption
43:ba:d7:a1:cb:72:68:53:43:0f:8e:07:af:42:54:4c:3b:e6:
62:d2:bf:bc:76:e4:c0:73:e0:45:40:12:25:80:ba:2f:dc:87:
94:6d:6b:29:27:05:4f:38:cb:cf:5d:93:ec:ba:20:2e:8f:af:
e5:5c:58:32:b4:87:ac:da:64:37:e4:64:3f:a1:96:38:4b:72:
7b:18:87:dc:1c:a2:cd:ee:86:0e:a4:24:32:37:74:da:de:27:
0a:f2:e8:10:b5:76:39:5f:86:63:82:36:22:ac:b5:9d:c4:56:
1d:53:b6:61:0a:d7:6c:95:02:f9:4b:22:bd:ab:9d:b4:9f:fb:
2d:b5:37:04:f2:60:f6:58:fa:35:6d:1d:0e:9e:d7:f9:78:f5:
73:0f:fb:77:b8:15:ac:21:a2:d7:47:a2:24:44:d0:6e:96:07:
b8:1a:b0:a9:28:7c:08:6e:b8:24:76:2b:ee:0d:6c:7d:cf:a5:
aa:e6:f1:a5:a3:53:a5:74:45:82:c5:62:6b:24:34:01:c5:c7:
c7:85:bd:ec:65:46:4d:b9:6c:e8:f3:07:5d:9b:14:f6:54:c8:
a3:54:d9:76:3a:d6:79:67:2f:92:68:6f:c3:ca:30:5f:b0:f4:
d6:e1:f2:97:6b:1d:b0:9d:77:3a:7e:56:15:b9:3f:0b:13:12:
eb:de:fa:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 17:25:14 2026 by rpki-client