Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/sULwREEDbR9cO_ZFXNBvDlgpedg.roa
File: sULwREEDbR9cO_ZFXNBvDlgpedg.roa (raw, json)
Hash identifier: NItBFzwyD60IOLb445lIBGtun2ohXotLoTLwxnyZxwU=
Subject key identifier: B1:42:F0:44:41:03:6D:1F:5C:3B:F6:45:5C:D0:6F:0E:58:29:79:D8
Certificate issuer: /CN=d703642076d27e252fa90bf1a4296f8bcd9d0cf1
Certificate serial: 01A01F213F6A69D9193F896EA2B8E67F0191
Authority key identifier: D7:03:64:20:76:D2:7E:25:2F:A9:0B:F1:A4:29:6F:8B:CD:9D:0C:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/sULwREEDbR9cO_ZFXNBvDlgpedg.roa
Signing time: Thu 20 Aug 2026 12:24:27 +0000
ROA not before: Thu 20 Aug 2026 12:24:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214059
IP address blocks: 77.221.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Sep 2026 13:57:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1f:21:3f:6a:69:d9:19:3f:89:6e:a2:b8:e6:7f:01:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d703642076d27e252fa90bf1a4296f8bcd9d0cf1
Validity
Not Before: Aug 20 12:24:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b142f04441036d1f5c3bf6455cd06f0e582979d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:cc:2e:ce:db:0a:0c:ff:c2:57:7c:49:91:dd:
e9:31:cc:3d:ce:fa:77:5c:77:a4:3f:52:5e:fc:95:
22:39:d4:00:01:1b:95:40:9f:6f:98:e8:1d:27:2f:
34:61:00:b7:91:10:e4:bb:eb:5b:59:7f:ae:7c:ff:
b4:44:0e:d4:fd:1b:00:fd:cb:27:e9:6e:5e:d5:b6:
00:d2:7c:13:a1:0c:77:82:bd:b1:5e:19:1d:4b:39:
da:d2:53:f7:8b:d0:94:95:95:7b:13:63:57:bd:51:
b1:b9:97:ad:19:ba:3c:9d:d9:6d:8b:ac:f4:a8:05:
d3:a1:0c:a7:ef:ef:93:8a:7c:11:57:66:26:81:7f:
e1:38:67:60:62:0f:c7:cb:ef:24:47:67:10:7e:d1:
80:82:3c:53:de:d9:b7:3e:33:0d:21:4b:46:19:fd:
12:d3:fe:87:d7:30:0d:58:71:f0:21:ea:af:f2:b1:
a2:86:75:ff:bb:c4:2a:eb:6b:7b:d1:6d:31:15:51:
ab:dc:e0:2b:a5:fc:ff:f3:8a:96:f8:1e:62:18:5e:
d7:1a:9d:94:9f:0f:f8:5a:2d:0b:4c:18:fd:bb:49:
9e:25:25:07:df:6d:a1:68:11:aa:26:b2:8f:74:1d:
ad:85:f3:86:dc:2f:b6:17:e2:89:20:14:20:50:5f:
4d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:42:F0:44:41:03:6D:1F:5C:3B:F6:45:5C:D0:6F:0E:58:29:79:D8
X509v3 Authority Key Identifier:
keyid:D7:03:64:20:76:D2:7E:25:2F:A9:0B:F1:A4:29:6F:8B:CD:9D:0C:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/sULwREEDbR9cO_ZFXNBvDlgpedg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.221.54.0/24
Signature Algorithm: sha256WithRSAEncryption
93:a7:73:b0:aa:65:30:a9:03:74:8d:af:3e:ff:fe:53:fb:6d:
48:02:a3:c2:3b:98:33:ed:3d:ba:26:b6:c1:9e:41:93:a3:da:
ce:15:1f:b9:ec:62:db:6c:2c:25:92:9f:fa:a0:9b:46:57:92:
13:33:94:84:ee:dc:d6:4d:f4:57:fa:5b:59:85:ad:16:f1:a2:
d9:39:05:3b:f2:44:e6:1c:a7:ee:8d:9f:0b:e7:8a:d6:a2:d2:
f7:6b:0b:97:6a:1f:5f:70:f2:f4:cb:05:4a:5b:61:fc:8c:17:
ca:d9:4d:40:ba:ad:c5:98:8c:59:c3:1a:11:5c:4f:a1:6d:c9:
d3:8b:52:16:5c:1c:74:a6:8c:d4:54:64:e4:30:02:46:34:cd:
5b:b3:ad:36:b4:1c:52:cf:d4:77:6f:e4:e8:9d:c9:73:c3:ec:
78:c8:29:d1:f8:fa:0d:62:d0:ab:8e:b4:fe:f7:4e:83:68:92:
9c:b0:0b:3d:75:f3:9a:57:16:43:eb:e9:e4:00:50:77:db:be:
96:ba:4a:3a:c6:d2:dd:ab:2e:58:e6:9d:64:6f:e7:9e:a1:a6:
97:b7:01:a7:c8:63:43:e8:cf:91:99:91:e5:23:35:72:ae:f9:
fc:de:a8:15:26:bc:c5:56:b5:61:09:b3:c2:2f:93:0d:8f:57:
79:90:35:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 8 21:30:04 2026 by rpki-client