Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/31d238-944b-4283-b710-337133abb3e0/1/1tJAgJmhFm6tMKpDwmcSt62Wn2s.roa
File: 1tJAgJmhFm6tMKpDwmcSt62Wn2s.roa (raw, json)
Hash identifier: N0+o9csLGlYXJvMSXqhtYb68mdXEYITcI45kRR5Y4yY=
Subject key identifier: D6:D2:40:80:99:A1:16:6E:AD:30:AA:43:C2:67:12:B7:AD:96:9F:6B
Certificate issuer: /CN=03db95b436f531c4e602f39610ad53e26fdff153
Certificate serial: 01A12F1971960138E59DABA615EDA569D55A
Authority key identifier: 03:DB:95:B4:36:F5:31:C4:E6:02:F3:96:10:AD:53:E2:6F:DF:F1:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A9uVtDb1McTmAvOWEK1T4m_f8VM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/31d238-944b-4283-b710-337133abb3e0/1/1tJAgJmhFm6tMKpDwmcSt62Wn2s.roa
Signing time: Mon 12 Oct 2026 07:52:38 +0000
ROA not before: Mon 12 Oct 2026 07:52:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50867
IP address blocks: 77.91.72.0/24 maxlen: 24
77.91.73.0/24 maxlen: 24
77.91.74.0/24 maxlen: 24
77.91.75.0/24 maxlen: 24
77.91.91.0/24 maxlen: 24
77.91.92.0/24 maxlen: 24
77.91.93.0/24 maxlen: 24
77.91.94.0/24 maxlen: 24
77.91.95.0/24 maxlen: 24
185.149.144.0/24 maxlen: 24
185.149.145.0/24 maxlen: 24
185.149.146.0/24 maxlen: 24
185.149.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/31d238-944b-4283-b710-337133abb3e0/1/A9uVtDb1McTmAvOWEK1T4m_f8VM.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/31d238-944b-4283-b710-337133abb3e0/1/A9uVtDb1McTmAvOWEK1T4m_f8VM.mft
rsync://rpki.ripe.net/repository/DEFAULT/A9uVtDb1McTmAvOWEK1T4m_f8VM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 23:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2f:19:71:96:01:38:e5:9d:ab:a6:15:ed:a5:69:d5:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03db95b436f531c4e602f39610ad53e26fdff153
Validity
Not Before: Oct 12 07:52:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d6d2408099a1166ead30aa43c26712b7ad969f6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f8:5c:2e:e4:63:b9:f9:78:b4:29:d5:1c:fd:
e7:d4:c1:51:e6:a0:df:c8:26:64:9f:f6:0e:f0:3b:
f3:5c:f0:7d:98:a7:e0:4e:34:fe:e3:04:c6:67:c5:
5b:a5:ba:be:08:98:a7:8a:cd:80:bb:32:09:78:7c:
cf:9f:5c:20:8f:9b:00:ac:3e:1f:e0:ee:b3:bb:08:
43:f7:a1:98:5c:00:b9:6d:5d:ff:6f:af:de:3b:3d:
e0:4f:fd:24:f1:89:c2:9e:5d:81:47:40:2c:9b:b6:
3b:8b:00:42:e4:4a:bc:04:b4:79:2a:c8:fd:de:75:
c0:ab:3e:36:13:b2:f5:1b:25:6e:7e:b5:3c:6e:f1:
d3:80:e9:5e:7d:6f:25:72:e9:64:93:3b:37:a4:e9:
b9:2e:56:66:2c:ee:ae:7f:b9:d3:03:28:dd:14:07:
78:05:30:f5:f4:2c:c5:ef:bf:3f:d0:8d:f2:95:e2:
ac:c7:29:83:5d:34:4d:c2:49:bd:1b:98:cd:cc:4a:
12:33:07:20:11:bd:72:67:30:31:d3:5f:3f:fd:ca:
d7:57:6f:a0:32:c5:09:67:49:22:5a:f3:ea:14:ac:
80:81:ed:bf:51:c9:77:72:17:a2:0a:2f:0b:08:32:
be:7d:bc:0d:25:ca:4e:de:cb:77:cf:65:92:1e:e8:
50:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:D2:40:80:99:A1:16:6E:AD:30:AA:43:C2:67:12:B7:AD:96:9F:6B
X509v3 Authority Key Identifier:
keyid:03:DB:95:B4:36:F5:31:C4:E6:02:F3:96:10:AD:53:E2:6F:DF:F1:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9uVtDb1McTmAvOWEK1T4m_f8VM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/31d238-944b-4283-b710-337133abb3e0/1/1tJAgJmhFm6tMKpDwmcSt62Wn2s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/31d238-944b-4283-b710-337133abb3e0/1/A9uVtDb1McTmAvOWEK1T4m_f8VM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.91.72.0/22
77.91.91.0-77.91.95.255
185.149.144.0/22
Signature Algorithm: sha256WithRSAEncryption
3e:c8:f3:37:5d:d5:2a:3f:63:77:c1:a3:e5:30:ad:6b:97:34:
c1:1b:25:59:36:11:d1:d0:35:1c:6d:a7:1c:42:e3:cd:39:17:
3d:08:f4:08:f1:10:e4:4f:c7:79:2b:9c:1d:15:3e:66:75:1c:
be:13:ed:09:9b:5e:3a:65:3b:12:a3:7f:c0:9d:d1:7d:5c:6b:
b9:3b:3d:db:c4:97:ec:bd:43:62:c7:a9:ce:fb:ad:62:57:84:
64:e7:36:50:fe:38:06:a1:ce:46:e4:ab:46:08:df:22:74:80:
f3:a2:41:92:41:cc:f7:06:24:d1:fd:4d:16:01:e8:95:b2:fc:
e9:ba:45:16:de:11:74:00:cc:f1:85:c4:35:dc:9f:a0:05:b9:
b7:0a:2a:0b:4d:fd:cb:55:4e:d9:fe:bb:62:9a:22:bd:b3:e4:
b3:2a:95:b8:cd:47:96:4d:5c:23:df:e9:12:3c:8f:14:28:6e:
9c:ea:ce:a4:79:81:bf:73:47:73:3e:4d:ce:30:e3:4e:ea:c6:
e4:9a:d0:45:22:54:5f:a8:7b:b7:8f:24:2e:07:a5:4c:b8:8b:
78:b6:bb:25:8a:b5:af:3e:f7:24:c8:fc:54:06:ff:90:48:f1:
a2:17:2a:db:e0:18:04:52:32:f5:94:b7:c4:0d:db:4e:17:c7:
be:dd:eb:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 06:47:42 2026 by rpki-client