Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/5240a6-cd61-4e0c-88b6-f59d20ef27b4/1/_AagLPAueiuDBeYRdom7EN56fNw.roa
File: _AagLPAueiuDBeYRdom7EN56fNw.roa (raw, json)
Hash identifier: RYpoI8akQLPQRt1Jr8bhDk903oGBzg146WXehFAB1cg=
Subject key identifier: FC:06:A0:2C:F0:2E:7A:2B:83:05:E6:11:76:89:BB:10:DE:7A:7C:DC
Certificate issuer: /CN=d37969f5d253210b0abe8e07a086f608d6f2a0af
Certificate serial: 019FD15A00F4E85198FB18C60C9154633AA9
Authority key identifier: D3:79:69:F5:D2:53:21:0B:0A:BE:8E:07:A0:86:F6:08:D6:F2:A0:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/03lp9dJTIQsKvo4HoIb2CNbyoK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/5240a6-cd61-4e0c-88b6-f59d20ef27b4/1/_AagLPAueiuDBeYRdom7EN56fNw.roa
Signing time: Wed 05 Aug 2026 09:56:04 +0000
ROA not before: Wed 05 Aug 2026 09:56:04 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43030
IP address blocks: 77.95.0.0/21 maxlen: 21
77.95.0.0/24 maxlen: 24
77.95.1.0/24 maxlen: 24
77.95.2.0/24 maxlen: 24
77.95.3.0/24 maxlen: 24
77.95.4.0/24 maxlen: 24
77.95.5.0/24 maxlen: 24
77.95.6.0/24 maxlen: 24
77.95.7.0/24 maxlen: 24
2a0b:ae80::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/5240a6-cd61-4e0c-88b6-f59d20ef27b4/1/03lp9dJTIQsKvo4HoIb2CNbyoK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/5240a6-cd61-4e0c-88b6-f59d20ef27b4/1/03lp9dJTIQsKvo4HoIb2CNbyoK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/03lp9dJTIQsKvo4HoIb2CNbyoK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d1:5a:00:f4:e8:51:98:fb:18:c6:0c:91:54:63:3a:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d37969f5d253210b0abe8e07a086f608d6f2a0af
Validity
Not Before: Aug 5 09:56:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fc06a02cf02e7a2b8305e6117689bb10de7a7cdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a8:9a:bb:a2:a0:b0:79:05:1b:26:be:49:25:
50:fe:bb:c8:b1:85:7b:3b:b9:36:ef:af:e7:eb:da:
5c:1b:65:c5:54:03:a8:c3:66:2f:41:9d:05:f8:ac:
ff:8e:70:45:92:e8:df:6d:66:9f:0f:a2:df:b8:71:
b1:54:f6:f1:e0:d8:69:51:e3:00:a9:35:ae:49:8c:
75:02:3b:55:c8:f1:37:88:40:61:5b:43:04:20:db:
3e:bf:57:49:c2:e5:47:12:9c:10:26:c8:63:8f:0c:
4c:21:27:83:04:25:43:99:70:2a:b1:5b:c5:32:6e:
d1:da:0d:1a:7c:2d:30:c1:93:44:cf:e5:a2:65:7a:
ec:1e:91:64:8d:56:40:95:55:5d:54:88:50:8c:aa:
1e:f5:2d:e6:96:a4:d7:56:68:04:a0:fa:51:f0:73:
d9:05:27:1e:73:f8:09:61:f5:e8:5b:de:07:ed:e3:
5b:e5:04:5c:a0:ab:7c:ed:ef:66:47:79:8b:8d:13:
84:3e:5c:78:ae:db:56:c4:f2:3f:ec:ba:77:93:5c:
fe:37:cf:88:68:63:53:59:c5:09:19:97:2c:1a:15:
ef:45:64:c8:b5:2e:22:c7:ab:1c:9c:59:2f:5d:fa:
96:a6:2b:95:f5:c0:46:99:04:7d:9e:2a:f2:d7:9b:
49:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:06:A0:2C:F0:2E:7A:2B:83:05:E6:11:76:89:BB:10:DE:7A:7C:DC
X509v3 Authority Key Identifier:
keyid:D3:79:69:F5:D2:53:21:0B:0A:BE:8E:07:A0:86:F6:08:D6:F2:A0:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/03lp9dJTIQsKvo4HoIb2CNbyoK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5240a6-cd61-4e0c-88b6-f59d20ef27b4/1/_AagLPAueiuDBeYRdom7EN56fNw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5240a6-cd61-4e0c-88b6-f59d20ef27b4/1/03lp9dJTIQsKvo4HoIb2CNbyoK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.95.0.0/21
IPv6:
2a0b:ae80::/32
Signature Algorithm: sha256WithRSAEncryption
07:7c:58:67:7d:b5:ce:40:e1:2b:7d:2a:75:47:aa:fe:47:e4:
34:8a:75:1a:22:e9:12:18:0c:37:55:39:7c:9b:2f:22:71:26:
4c:35:e0:84:2b:4c:1c:3a:a0:14:b4:fa:b3:b5:52:49:78:16:
ce:ae:07:22:0e:fb:e8:21:82:2c:28:20:47:eb:74:1e:5d:2a:
b2:a5:cc:9f:e3:d2:9a:5d:52:52:b0:03:ed:ac:db:12:5b:19:
31:c6:1f:35:f1:6a:72:8d:e7:c7:3a:39:33:61:d2:6a:7b:ca:
6b:da:0b:53:65:9f:8d:1d:15:20:02:97:69:11:d3:a1:23:77:
44:04:b3:3c:f6:59:8e:8d:94:de:80:90:b1:20:32:eb:51:b0:
b6:07:20:54:65:ce:e1:60:e4:4a:ce:de:c3:40:6c:1c:e0:4d:
13:cc:4e:f0:e8:21:8a:15:4c:e1:0d:28:5a:f2:11:39:bd:c5:
94:51:6c:1b:df:ae:90:54:31:63:88:9b:a0:e8:07:d9:ff:14:
cb:e2:e5:f2:28:27:9e:5a:22:ef:02:ef:76:38:c6:47:a4:30:
29:04:75:ec:ed:d9:e5:a6:72:60:3b:88:61:69:c4:4a:1e:bd:
94:44:0c:3d:e5:a4:4a:67:0c:7d:db:e5:71:4d:d6:75:6a:87:
8d:3b:f3:7d
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZ/RWgD06FGY+xjGDJFUYzqpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzNzk2OWY1ZDI1MzIxMGIwYWJlOGUwN2EwODZmNjA4ZDZm
MmEwYWYwHhcNMjYwODA1MDk1NjA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYzA2YTAyY2YwMmU3YTJiODMwNWU2MTE3Njg5YmIxMGRlN2E3Y2RjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtaiau6KgsHkFGya+SSVQ/rvIsYV7
O7k276/n69pcG2XFVAOow2YvQZ0F+Kz/jnBFkujfbWafD6LfuHGxVPbx4NhpUeMA
qTWuSYx1AjtVyPE3iEBhW0MEINs+v1dJwuVHEpwQJshjjwxMISeDBCVDmXAqsVvF
Mm7R2g0afC0wwZNEz+WiZXrsHpFkjVZAlVVdVIhQjKoe9S3mlqTXVmgEoPpR8HPZ
BScec/gJYfXoW94H7eNb5QRcoKt87e9mR3mLjROEPlx4rttWxPI/7Lp3k1z+N8+I
aGNTWcUJGZcsGhXvRWTItS4ix6scnFkvXfqWpiuV9cBGmQR9niry15tJDQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFPwGoCzwLnorgwXmEXaJuxDeenzcMB8GA1UdIwQY
MBaAFNN5afXSUyELCr6OB6CG9gjW8qCvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDNscDlkSlRJUXNLdm80SG9JYjJDTmJ5b0s4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC81MjQwYTYtY2Q2MS00ZTBjLTg4YjYt
ZjU5ZDIwZWYyN2I0LzEvX0FhZ0xQQXVlaXVEQmVZUmRvbTdFTjU2Zk53LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC81MjQwYTYtY2Q2MS00ZTBjLTg4YjYtZjU5ZDIwZWYyN2I0
LzEvMDNscDlkSlRJUXNLdm80SG9JYjJDTmJ5b0s4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDTV8AMA0E
AgACMAcDBQAqC66AMA0GCSqGSIb3DQEBCwUAA4IBAQAHfFhnfbXOQOErfSp1R6r+
R+Q0inUaIukSGAw3VTl8my8icSZMNeCEK0wcOqAUtPqztVJJeBbOrgciDvvoIYIs
KCBH63QeXSqypcyf49KaXVJSsAPtrNsSWxkxxh818WpyjefHOjkzYdJqe8pr2gtT
ZZ+NHRUgApdpEdOhI3dEBLM89lmOjZTegJCxIDLrUbC2ByBUZc7hYORKzt7DQGwc
4E0TzE7w6CGKFUzhDSha8hE5vcWUUWwb366QVDFjiJug6AfZ/xTL4uXyKCeeWiLv
Au92OMZHpDApBHXs7dnlpnJgO4hhacRKHr2URAw95aRKZwx92+VxTdZ1aoeNO/N9
-----END CERTIFICATE-----
Generated at Thu Aug 27 07:55:11 2026 by rpki-client