Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/r5Q57-DhRNFcFwX24k8APzkHkK4.roa
File: r5Q57-DhRNFcFwX24k8APzkHkK4.roa (raw, json)
Hash identifier: B/UWA5RGX6YbsaFU+9K+GqMhQJ3VeHC10Sfxhs1y/qM=
Subject key identifier: AF:94:39:EF:E0:E1:44:D1:5C:17:05:F6:E2:4F:00:3F:39:07:90:AE
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 01A15E2AB049E6492589A8179A5D65447ED1
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/r5Q57-DhRNFcFwX24k8APzkHkK4.roa
Signing time: Wed 21 Oct 2026 11:13:38 +0000
ROA not before: Wed 21 Oct 2026 11:13:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3319
IP address blocks: 77.47.142.0/24 maxlen: 24
77.47.152.0/22 maxlen: 24
77.47.210.0/24 maxlen: 24
77.47.211.0/24 maxlen: 24
77.47.242.0/24 maxlen: 24
77.47.248.0/24 maxlen: 24
77.47.249.0/24 maxlen: 24
77.47.252.0/22 maxlen: 24
185.143.56.0/22 maxlen: 24
185.143.57.0/24 maxlen: 24
195.178.128.0/22 maxlen: 24
195.178.128.0/24 maxlen: 24
195.178.129.0/24 maxlen: 24
195.178.130.0/24 maxlen: 24
195.178.132.0/22 maxlen: 24
195.178.132.0/24 maxlen: 24
195.178.133.0/24 maxlen: 24
195.178.136.0/24 maxlen: 24
195.178.139.0/24 maxlen: 24
195.178.143.0/24 maxlen: 24
195.178.144.0/23 maxlen: 23
195.178.146.0/24 maxlen: 24
195.178.147.0/24 maxlen: 24
195.178.148.0/24 maxlen: 24
195.178.149.0/24 maxlen: 24
195.178.154.0/24 maxlen: 24
195.178.156.0/24 maxlen: 24
212.111.194.0/24 maxlen: 24
212.111.200.0/24 maxlen: 24
212.111.207.0/24 maxlen: 24
212.111.215.0/24 maxlen: 24
212.111.216.0/24 maxlen: 24
212.111.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 11:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5e:2a:b0:49:e6:49:25:89:a8:17:9a:5d:65:44:7e:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Oct 21 11:13:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=af9439efe0e144d15c1705f6e24f003f390790ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d8:c1:d1:70:3f:32:d3:25:fd:5d:30:c7:e5:
01:e7:a7:cc:92:53:a8:05:cf:5b:ba:d3:1d:97:cd:
1f:f7:e4:76:57:a2:ed:5f:b4:7f:e8:a8:1d:33:27:
60:72:8d:12:16:a6:e0:4c:71:43:6e:3f:9a:00:5d:
ef:ec:dd:75:47:7d:95:a4:6a:97:61:59:e9:6c:4e:
30:8e:8a:d7:c3:df:25:0b:39:cf:a0:99:a6:f2:03:
fa:9d:ad:00:11:e3:5d:27:ee:03:5a:8e:04:17:62:
bf:f8:cd:14:96:fb:b5:16:9a:af:94:c0:69:40:4e:
d6:07:2b:fe:83:36:3c:d1:fb:48:a1:1a:3b:e0:82:
1e:3e:ed:22:e5:8a:20:51:de:3b:d2:11:33:9a:89:
c5:a0:30:5c:5d:5f:23:26:81:c7:d5:ac:43:be:56:
27:4b:b7:d4:aa:02:a1:7c:61:60:49:ca:06:2a:c2:
d1:b1:62:e5:ed:e7:d4:5f:d0:a2:d7:29:bd:7e:a2:
ef:f0:01:40:06:c5:98:66:f3:c5:fc:f7:f4:b3:02:
fc:d7:03:55:df:5a:ea:20:fb:b1:90:c3:3f:1b:ab:
a9:cd:23:d2:35:42:f8:30:bf:92:71:25:60:ec:55:
aa:17:7c:b5:ba:0b:b7:e9:bb:3c:fa:cc:35:38:2f:
0f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:94:39:EF:E0:E1:44:D1:5C:17:05:F6:E2:4F:00:3F:39:07:90:AE
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/r5Q57-DhRNFcFwX24k8APzkHkK4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.142.0/24
77.47.152.0/22
77.47.210.0/23
77.47.242.0/24
77.47.248.0/23
77.47.252.0/22
185.143.56.0/22
195.178.128.0-195.178.136.255
195.178.139.0/24
195.178.143.0-195.178.149.255
195.178.154.0/24
195.178.156.0/24
212.111.194.0/24
212.111.200.0/24
212.111.207.0/24
212.111.215.0-212.111.217.255
Signature Algorithm: sha256WithRSAEncryption
cb:07:59:89:34:e1:8b:26:b1:a5:03:d0:1f:fb:77:7f:60:c9:
60:17:36:69:31:c6:6e:9f:25:38:af:16:18:d8:58:48:54:86:
52:c5:e7:4a:85:0d:62:9b:08:56:e5:99:db:07:1d:a3:7f:b6:
10:1a:b2:bc:69:25:30:6f:59:02:2b:3a:d0:b8:96:1b:4b:c3:
88:3c:3d:7e:da:92:d6:92:ae:f5:1e:7e:42:55:61:cf:a2:4d:
d4:9e:ba:19:da:54:5c:ac:bd:fb:11:d8:31:fb:0f:45:31:25:
b5:3b:e1:ba:b7:03:7c:e8:22:f3:8b:08:c2:1b:45:9a:61:15:
57:01:73:d9:1b:43:40:7f:ac:e5:f7:64:11:cd:0b:f9:ce:a8:
2a:14:9b:6a:e6:0c:e7:0d:52:c3:88:4c:bf:da:7e:35:da:7f:
a5:75:9e:c9:27:af:c8:f1:ca:d4:00:e8:3a:50:17:af:e7:4c:
03:4b:a2:e1:f7:4f:72:bf:f2:c8:97:1d:c7:d2:bb:99:c1:83:
c4:96:9a:5e:c7:b0:2c:06:76:6f:a9:3f:6d:8c:8a:6d:9c:b3:
16:0a:76:72:2c:63:7d:f0:68:d4:18:27:f0:c2:53:23:82:7a:
fa:fe:64:e6:78:14:e2:79:46:ef:9f:d1:1c:ff:0a:0e:d5:2c:
58:61:3c:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 18:14:33 2026 by rpki-client