Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/31d238-944b-4283-b710-337133abb3e0/1/fJfk9udARV5inAKL917bZTd1EeQ.roa
File: fJfk9udARV5inAKL917bZTd1EeQ.roa (raw, json)
Hash identifier: +ZHDuvPpsboDixA57iFt3QrxGUysB/3TF0CL20bof8s=
Subject key identifier: 7C:97:E4:F6:E7:40:45:5E:62:9C:02:8B:F7:5E:DB:65:37:75:11:E4
Certificate issuer: /CN=03db95b436f531c4e602f39610ad53e26fdff153
Certificate serial: 01A04F85EE98E406334CB4D63EC9091232F9
Authority key identifier: 03:DB:95:B4:36:F5:31:C4:E6:02:F3:96:10:AD:53:E2:6F:DF:F1:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A9uVtDb1McTmAvOWEK1T4m_f8VM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/31d238-944b-4283-b710-337133abb3e0/1/fJfk9udARV5inAKL917bZTd1EeQ.roa
Signing time: Sat 29 Aug 2026 21:56:12 +0000
ROA not before: Sat 29 Aug 2026 21:56:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213877
IP address blocks: 77.91.84.0/24 maxlen: 24
77.91.85.0/24 maxlen: 24
77.91.86.0/24 maxlen: 24
77.91.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/31d238-944b-4283-b710-337133abb3e0/1/A9uVtDb1McTmAvOWEK1T4m_f8VM.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/31d238-944b-4283-b710-337133abb3e0/1/A9uVtDb1McTmAvOWEK1T4m_f8VM.mft
rsync://rpki.ripe.net/repository/DEFAULT/A9uVtDb1McTmAvOWEK1T4m_f8VM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:4f:85:ee:98:e4:06:33:4c:b4:d6:3e:c9:09:12:32:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03db95b436f531c4e602f39610ad53e26fdff153
Validity
Not Before: Aug 29 21:56:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7c97e4f6e740455e629c028bf75edb65377511e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:2a:de:13:2e:3a:c3:61:35:e2:b2:97:4b:d2:
2b:d8:43:f8:73:5c:f3:e7:24:fd:fd:16:96:10:4a:
58:b1:41:cc:08:28:8a:6e:3b:60:0b:b5:65:ce:74:
58:28:1a:a9:81:f5:85:02:51:b2:12:d2:d9:1e:3e:
ed:b1:5f:13:53:a5:fe:d6:6d:fe:4a:bd:c3:21:08:
01:70:50:86:1f:61:5d:5b:b7:d7:21:d4:39:70:3f:
19:eb:54:28:7e:ff:39:ad:2a:a2:47:01:ea:28:14:
ff:e9:89:fc:41:d5:89:c8:e0:63:ee:9e:70:e3:6d:
4a:85:c8:f4:48:45:cb:60:c4:e6:e1:5a:4c:b4:0f:
35:26:7a:d7:cb:48:ef:83:aa:77:09:12:9a:7a:b8:
5f:3d:cc:4c:f3:33:53:9a:2c:c7:9e:44:85:14:df:
e1:53:32:92:e1:b1:6f:8c:1d:3c:d2:b3:25:eb:38:
d3:8c:97:f4:58:5c:49:ad:21:7e:91:44:71:ac:c4:
8f:0f:a4:4c:98:2e:2f:52:f8:1f:9e:40:cf:05:65:
20:78:2d:e1:95:78:2e:a7:60:be:ce:e3:97:ca:e2:
39:5b:46:6b:85:3a:5b:26:8a:ec:f2:1b:bd:f9:c8:
90:d3:74:53:49:c5:46:80:79:38:93:f1:b7:ab:31:
60:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:97:E4:F6:E7:40:45:5E:62:9C:02:8B:F7:5E:DB:65:37:75:11:E4
X509v3 Authority Key Identifier:
keyid:03:DB:95:B4:36:F5:31:C4:E6:02:F3:96:10:AD:53:E2:6F:DF:F1:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9uVtDb1McTmAvOWEK1T4m_f8VM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/31d238-944b-4283-b710-337133abb3e0/1/fJfk9udARV5inAKL917bZTd1EeQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/31d238-944b-4283-b710-337133abb3e0/1/A9uVtDb1McTmAvOWEK1T4m_f8VM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.91.84.0/22
Signature Algorithm: sha256WithRSAEncryption
05:2f:ee:12:30:22:3c:57:44:b2:56:66:2b:c4:91:46:24:da:
72:d3:94:4b:57:02:11:4f:e0:08:23:55:78:9e:9e:59:34:27:
bd:78:2a:f4:9a:e5:ee:fb:f5:51:0c:dc:c3:9d:00:97:e1:97:
28:e3:66:7c:af:73:ca:4e:22:e4:08:df:27:33:37:05:48:61:
ed:04:19:4d:bc:35:90:22:fe:eb:73:33:7f:ea:ea:c8:ed:c9:
70:c5:79:80:21:31:26:b8:1b:bf:a5:78:a0:1b:6f:c5:92:11:
d9:04:cb:0c:65:99:64:2d:69:e2:4a:5a:0e:46:60:bf:85:dc:
75:31:8b:6c:98:11:22:86:e9:48:87:66:04:42:95:e6:9e:ca:
64:3a:88:cf:2e:d8:57:53:19:b3:e6:fb:76:ec:85:da:45:54:
53:93:e3:1d:8b:91:2f:de:72:db:ba:96:30:20:e2:47:aa:a9:
2d:89:5c:b5:0d:28:c5:75:15:c6:63:b8:1b:77:c0:6e:fb:a8:
03:94:92:d8:17:02:d2:13:6f:cd:37:f3:f4:8c:19:33:d9:c6:
20:c2:6c:df:b0:94:23:84:e3:04:11:eb:86:0e:30:a3:e7:1a:
f9:55:27:4c:75:f3:eb:f1:94:45:b7:0f:09:e6:84:07:df:4e:
d6:e9:e3:80
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaBPhe6Y5AYzTLTWPskJEjL5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzZGI5NWI0MzZmNTMxYzRlNjAyZjM5NjEwYWQ1M2UyNmZk
ZmYxNTMwHhcNMjYwODI5MjE1NjEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3Yzk3ZTRmNmU3NDA0NTVlNjI5YzAyOGJmNzVlZGI2NTM3NzUxMWU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnyreEy46w2E14rKXS9Ir2EP4c1zz
5yT9/RaWEEpYsUHMCCiKbjtgC7VlznRYKBqpgfWFAlGyEtLZHj7tsV8TU6X+1m3+
Sr3DIQgBcFCGH2FdW7fXIdQ5cD8Z61Qofv85rSqiRwHqKBT/6Yn8QdWJyOBj7p5w
421Khcj0SEXLYMTm4VpMtA81JnrXy0jvg6p3CRKaerhfPcxM8zNTmizHnkSFFN/h
UzKS4bFvjB080rMl6zjTjJf0WFxJrSF+kURxrMSPD6RMmC4vUvgfnkDPBWUgeC3h
lXgup2C+zuOXyuI5W0ZrhTpbJors8hu9+ciQ03RTScVGgHk4k/G3qzFgfQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHyX5PbnQEVeYpwCi/de22U3dRHkMB8GA1UdIwQY
MBaAFAPblbQ29THE5gLzlhCtU+Jv3/FTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTl1VnREYjFNY1RtQXZPV0VLMVQ0bV9mOFZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8zMWQyMzgtOTQ0Yi00MjgzLWI3MTAt
MzM3MTMzYWJiM2UwLzEvZkpmazl1ZEFSVjVpbkFLTDkxN2JaVGQxRWVRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC8zMWQyMzgtOTQ0Yi00MjgzLWI3MTAtMzM3MTMzYWJiM2Uw
LzEvQTl1VnREYjFNY1RtQXZPV0VLMVQ0bV9mOFZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCTVtUMA0G
CSqGSIb3DQEBCwUAA4IBAQAFL+4SMCI8V0SyVmYrxJFGJNpy05RLVwIRT+AII1V4
np5ZNCe9eCr0muXu+/VRDNzDnQCX4Zco42Z8r3PKTiLkCN8nMzcFSGHtBBlNvDWQ
Iv7rczN/6urI7clwxXmAITEmuBu/pXigG2/FkhHZBMsMZZlkLWniSloORmC/hdx1
MYtsmBEihulIh2YEQpXmnspkOojPLthXUxmz5vt27IXaRVRTk+Mdi5Ev3nLbupYw
IOJHqqktiVy1DSjFdRXGY7gbd8Bu+6gDlJLYFwLSE2/NN/P0jBkz2cYgwmzfsJQj
hOMEEeuGDjCj5xr5VSdMdfPr8ZRFtw8J5oQH307W6eOA
-----END CERTIFICATE-----
Generated at Fri Sep 4 23:06:43 2026 by rpki-client