Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/31d238-944b-4283-b710-337133abb3e0/1/lACClWJozZ2tD2fNvzjVVMhwmwI.roa
File: lACClWJozZ2tD2fNvzjVVMhwmwI.roa (raw, json)
Hash identifier: IjdsAeFrshBWpjF/8m+vmuGJHcJ+aPot1Nr+V0xwglE=
Subject key identifier: 94:00:82:95:62:68:CD:9D:AD:0F:67:CD:BF:38:D5:54:C8:70:9B:02
Certificate issuer: /CN=03db95b436f531c4e602f39610ad53e26fdff153
Certificate serial: 01A04F85EF0873D61B4B6F82EA1EF64B0325
Authority key identifier: 03:DB:95:B4:36:F5:31:C4:E6:02:F3:96:10:AD:53:E2:6F:DF:F1:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A9uVtDb1McTmAvOWEK1T4m_f8VM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/31d238-944b-4283-b710-337133abb3e0/1/lACClWJozZ2tD2fNvzjVVMhwmwI.roa
Signing time: Sat 29 Aug 2026 21:56:12 +0000
ROA not before: Sat 29 Aug 2026 21:56:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216127
IP address blocks: 77.91.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/31d238-944b-4283-b710-337133abb3e0/1/A9uVtDb1McTmAvOWEK1T4m_f8VM.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/31d238-944b-4283-b710-337133abb3e0/1/A9uVtDb1McTmAvOWEK1T4m_f8VM.mft
rsync://rpki.ripe.net/repository/DEFAULT/A9uVtDb1McTmAvOWEK1T4m_f8VM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:4f:85:ef:08:73:d6:1b:4b:6f:82:ea:1e:f6:4b:03:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03db95b436f531c4e602f39610ad53e26fdff153
Validity
Not Before: Aug 29 21:56:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=940082956268cd9dad0f67cdbf38d554c8709b02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c6:71:ba:9c:18:1b:eb:78:98:0c:d6:89:fa:
3c:88:95:89:8f:55:fe:43:51:6f:10:bf:a9:29:54:
46:1c:aa:d1:8b:76:43:35:0b:65:ca:f1:2d:a5:38:
24:e1:2a:ac:d8:99:4a:ec:05:e9:ea:43:80:50:74:
94:01:d8:62:c7:2e:70:78:7d:fd:07:f8:db:dd:a8:
fe:a4:1a:fb:79:fc:5c:8d:40:f0:5c:9e:dc:17:e5:
04:52:2c:34:d9:99:c1:f6:32:c8:16:31:1f:f4:1d:
e4:21:35:06:f8:35:92:7d:b6:01:b2:82:81:2b:08:
8a:44:cb:7c:67:88:70:93:34:22:1c:6d:2c:93:05:
06:16:78:4c:d3:ae:a2:07:08:3d:58:70:b9:9a:15:
af:53:8e:97:c1:45:25:a0:60:5b:97:05:05:77:12:
7d:9c:79:0a:32:08:09:53:eb:bd:dd:97:72:f1:f2:
ba:d5:7e:58:e2:eb:e3:ec:0f:f0:10:06:ec:9d:26:
49:27:63:df:22:98:c5:d3:12:f8:f4:53:10:ef:a4:
86:58:ad:87:4d:d9:82:49:fb:b8:56:78:91:ce:f8:
f0:4b:fb:8e:86:b9:05:78:c1:d5:df:94:31:f9:dd:
be:ed:44:00:c9:03:6b:5c:b0:df:f5:d6:06:c5:11:
9a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:00:82:95:62:68:CD:9D:AD:0F:67:CD:BF:38:D5:54:C8:70:9B:02
X509v3 Authority Key Identifier:
keyid:03:DB:95:B4:36:F5:31:C4:E6:02:F3:96:10:AD:53:E2:6F:DF:F1:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9uVtDb1McTmAvOWEK1T4m_f8VM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/31d238-944b-4283-b710-337133abb3e0/1/lACClWJozZ2tD2fNvzjVVMhwmwI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/31d238-944b-4283-b710-337133abb3e0/1/A9uVtDb1McTmAvOWEK1T4m_f8VM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.91.78.0/24
Signature Algorithm: sha256WithRSAEncryption
28:8e:37:d2:a1:a1:9d:2b:e6:a6:26:2a:23:b5:40:43:e1:d1:
22:e3:62:82:ea:ad:8f:0a:79:fa:5a:36:5d:16:07:5a:57:7e:
81:4c:a2:50:61:c0:07:80:55:f2:b8:e4:30:e0:d3:27:ee:55:
8e:2d:50:c3:31:62:90:11:8a:08:d2:95:8e:fb:0a:8f:e1:a5:
aa:dd:ba:68:ea:a3:ee:5f:c7:8e:31:99:a7:d6:69:31:43:0c:
cb:5a:1b:84:d1:51:c9:3d:50:4d:6a:41:2b:47:0b:01:74:a7:
97:86:99:95:1d:d0:f2:e3:4e:4e:b0:61:d1:a7:91:97:2c:af:
30:6f:e8:7e:9b:9b:12:c2:91:e4:3f:c1:03:22:98:33:d2:dc:
20:69:3b:cb:4e:ac:7d:62:10:ab:64:10:0b:3a:74:7c:15:87:
3a:33:fa:87:11:97:16:5f:39:3a:a1:bf:f0:39:36:cb:9e:ce:
a7:46:71:e1:6b:8e:e3:ed:1b:1a:99:d8:a0:0d:f5:55:14:4b:
9b:2a:64:c3:b2:50:fb:d6:16:73:70:07:b2:d2:c4:34:c3:99:
6e:45:01:d7:ef:22:5e:e0:83:e8:16:24:72:d3:74:b9:d6:a6:
5f:26:b7:8d:a6:28:c1:a5:e2:5c:50:42:c8:43:2c:b2:9d:d6:
dd:ca:e9:37
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaBPhe8Ic9YbS2+C6h72SwMlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzZGI5NWI0MzZmNTMxYzRlNjAyZjM5NjEwYWQ1M2UyNmZk
ZmYxNTMwHhcNMjYwODI5MjE1NjEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NDAwODI5NTYyNjhjZDlkYWQwZjY3Y2RiZjM4ZDU1NGM4NzA5YjAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1sZxupwYG+t4mAzWifo8iJWJj1X+
Q1FvEL+pKVRGHKrRi3ZDNQtlyvEtpTgk4Sqs2JlK7AXp6kOAUHSUAdhixy5weH39
B/jb3aj+pBr7efxcjUDwXJ7cF+UEUiw02ZnB9jLIFjEf9B3kITUG+DWSfbYBsoKB
KwiKRMt8Z4hwkzQiHG0skwUGFnhM066iBwg9WHC5mhWvU46XwUUloGBblwUFdxJ9
nHkKMggJU+u93Zdy8fK61X5Y4uvj7A/wEAbsnSZJJ2PfIpjF0xL49FMQ76SGWK2H
TdmCSfu4VniRzvjwS/uOhrkFeMHV35Qx+d2+7UQAyQNrXLDf9dYGxRGaCQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJQAgpViaM2drQ9nzb841VTIcJsCMB8GA1UdIwQY
MBaAFAPblbQ29THE5gLzlhCtU+Jv3/FTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTl1VnREYjFNY1RtQXZPV0VLMVQ0bV9mOFZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8zMWQyMzgtOTQ0Yi00MjgzLWI3MTAt
MzM3MTMzYWJiM2UwLzEvbEFDQ2xXSm96WjJ0RDJmTnZ6alZWTWh3bXdJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC8zMWQyMzgtOTQ0Yi00MjgzLWI3MTAtMzM3MTMzYWJiM2Uw
LzEvQTl1VnREYjFNY1RtQXZPV0VLMVQ0bV9mOFZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATVtOMA0G
CSqGSIb3DQEBCwUAA4IBAQAojjfSoaGdK+amJiojtUBD4dEi42KC6q2PCnn6WjZd
FgdaV36BTKJQYcAHgFXyuOQw4NMn7lWOLVDDMWKQEYoI0pWO+wqP4aWq3bpo6qPu
X8eOMZmn1mkxQwzLWhuE0VHJPVBNakErRwsBdKeXhpmVHdDy405OsGHRp5GXLK8w
b+h+m5sSwpHkP8EDIpgz0twgaTvLTqx9YhCrZBALOnR8FYc6M/qHEZcWXzk6ob/w
OTbLns6nRnHha47j7RsamdigDfVVFEubKmTDslD71hZzcAey0sQ0w5luRQHX7yJe
4IPoFiRy03S51qZfJreNpijBpeJcUELIQyyyndbdyuk3
-----END CERTIFICATE-----
Generated at Fri Sep 4 23:06:41 2026 by rpki-client