Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/zJ9v3e8uiAj7Q1OVSD92Rk2ryOk.roa
File: zJ9v3e8uiAj7Q1OVSD92Rk2ryOk.roa (raw, json)
Hash identifier: 9EEvX12mvolHxSL/Y8mliHI1ROhGnZ9siBUYGBNhM2A=
Subject key identifier: CC:9F:6F:DD:EF:2E:88:08:FB:43:53:95:48:3F:76:46:4D:AB:C8:E9
Certificate issuer: /CN=d703642076d27e252fa90bf1a4296f8bcd9d0cf1
Certificate serial: 019ED51908C29EF6964ACF3C6326D428F86C
Authority key identifier: D7:03:64:20:76:D2:7E:25:2F:A9:0B:F1:A4:29:6F:8B:CD:9D:0C:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/zJ9v3e8uiAj7Q1OVSD92Rk2ryOk.roa
Signing time: Wed 17 Jun 2026 10:20:48 +0000
ROA not before: Wed 17 Jun 2026 10:20:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197889
IP address blocks: 77.221.32.0/20 maxlen: 20
77.221.32.0/22 maxlen: 22
77.221.32.0/23 maxlen: 23
77.221.32.0/24 maxlen: 24
77.221.33.0/24 maxlen: 24
77.221.34.0/23 maxlen: 23
77.221.34.0/24 maxlen: 24
77.221.35.0/24 maxlen: 24
77.221.43.0/24 maxlen: 24
77.221.44.0/23 maxlen: 23
77.221.46.0/23 maxlen: 23
77.221.49.0/24 maxlen: 24
77.221.52.0/23 maxlen: 23
77.221.56.0/23 maxlen: 23
77.221.58.0/23 maxlen: 23
77.221.60.0/24 maxlen: 24
77.221.61.0/24 maxlen: 24
77.221.62.0/24 maxlen: 24
2a10:4940::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 13:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d5:19:08:c2:9e:f6:96:4a:cf:3c:63:26:d4:28:f8:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d703642076d27e252fa90bf1a4296f8bcd9d0cf1
Validity
Not Before: Jun 17 10:20:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cc9f6fddef2e8808fb435395483f76464dabc8e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:b2:88:d0:f4:5c:d8:ad:30:3c:1d:fc:7b:1b:
19:92:60:18:c9:e2:31:4e:25:b2:b9:5e:82:17:a1:
e2:38:5f:b2:5e:c7:6f:fa:af:89:36:5c:80:7a:b8:
20:e4:c3:de:84:cb:43:94:c3:7b:13:03:4d:02:89:
27:cd:ea:bb:9a:83:a4:26:bd:58:4c:32:50:6f:17:
9f:7b:36:24:2b:5c:85:56:88:3c:e5:20:52:ef:0f:
9e:97:95:3c:44:04:06:ef:a0:01:ce:67:24:e8:c3:
0c:a9:d2:40:ce:16:56:d4:56:e5:8c:cf:6f:de:a7:
ea:15:f3:46:08:8f:50:a0:84:88:51:c3:f7:fc:9d:
e4:9d:57:43:6f:7b:0d:17:47:c3:a3:05:12:b1:6d:
24:1f:01:81:be:7e:7e:5d:39:76:69:c2:1e:fb:24:
bd:de:99:cb:2c:02:04:1f:a3:8c:ac:f2:0e:b6:cd:
eb:55:a9:c9:21:7a:ee:25:8d:76:4b:d8:1f:74:4c:
b8:ea:af:9a:d8:00:9d:e3:6d:46:ef:81:b6:d5:53:
4e:df:dc:11:49:12:13:ce:43:ce:e3:25:61:a8:f4:
81:f4:a8:2d:22:65:e5:29:14:3e:26:d7:66:48:43:
9e:2c:66:bc:b0:a4:02:d2:4e:a2:0c:67:4e:de:d1:
e3:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:9F:6F:DD:EF:2E:88:08:FB:43:53:95:48:3F:76:46:4D:AB:C8:E9
X509v3 Authority Key Identifier:
keyid:D7:03:64:20:76:D2:7E:25:2F:A9:0B:F1:A4:29:6F:8B:CD:9D:0C:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/zJ9v3e8uiAj7Q1OVSD92Rk2ryOk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.221.32.0/20
77.221.49.0/24
77.221.52.0/23
77.221.56.0-77.221.62.255
IPv6:
2a10:4940::/32
Signature Algorithm: sha256WithRSAEncryption
54:66:47:68:c6:8a:63:07:1e:ba:cd:19:64:a7:e9:03:20:d8:
9c:d7:ab:82:50:1f:49:ba:e5:0f:8e:fd:44:d2:3e:90:21:75:
9f:55:02:d3:fd:8f:67:a7:0f:23:bf:80:b9:14:d2:d8:cf:c5:
ad:1d:e3:a2:58:12:ca:82:4a:13:97:5a:5a:83:28:f1:21:4d:
cb:9f:6e:fc:24:b0:4b:e6:e6:b6:40:7c:70:24:0d:8f:18:a5:
e1:c9:e6:73:d1:69:dc:e2:fb:ec:dc:e3:27:03:ce:8f:1f:11:
22:cd:e1:3c:d9:3a:2e:c8:1d:8d:2c:3f:7d:13:c0:3e:f6:c9:
39:f9:14:74:05:dc:3c:c0:e4:1f:4f:74:cb:76:f7:d3:6f:90:
99:56:22:d0:c4:37:f1:e2:36:bc:91:7d:90:77:25:39:a0:3c:
b1:bf:f8:91:4f:c2:02:77:8c:3b:08:f4:92:3a:e6:c0:2b:69:
11:20:ac:69:c1:ca:6d:9f:e8:5f:66:05:40:f9:63:09:a6:b9:
d9:a9:cd:77:6f:c5:8a:9d:16:b2:0f:0a:65:e8:9b:4b:80:be:
d0:c5:c1:f5:41:d2:5b:57:a0:bb:72:97:0d:3d:98:23:ac:ac:
ce:1c:cf:0c:d7:2a:58:30:15:78:1a:e6:78:00:03:d2:f8:6a:
74:7f:27:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:12:14 2026 by rpki-client