Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/11MSR6RwQdS9PcJnQG3HC0PzfJ0.roa
File: 11MSR6RwQdS9PcJnQG3HC0PzfJ0.roa (raw, json)
Hash identifier: CvrDms5T5mm1Pd4WoiIkr1es421j/l8bnrXNm+cQNiA=
Subject key identifier: D7:53:12:47:A4:70:41:D4:BD:3D:C2:67:40:6D:C7:0B:43:F3:7C:9D
Certificate issuer: /CN=6f5e0230be799e44829c8720ca38347045494e20
Certificate serial: 01A03D7EFD7285FBCCAA1A062812A0A13F78
Authority key identifier: 6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/11MSR6RwQdS9PcJnQG3HC0PzfJ0.roa
Signing time: Wed 26 Aug 2026 09:55:27 +0000
ROA not before: Wed 26 Aug 2026 09:55:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199550
IP address blocks: 77.217.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3d:7e:fd:72:85:fb:cc:aa:1a:06:28:12:a0:a1:3f:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f5e0230be799e44829c8720ca38347045494e20
Validity
Not Before: Aug 26 09:55:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d7531247a47041d4bd3dc267406dc70b43f37c9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ce:78:91:2d:df:f6:1a:96:c5:53:e4:26:7d:
9e:ab:a8:f1:24:f4:39:88:3d:3c:97:94:46:26:87:
ff:16:6c:bd:ba:aa:f3:7c:64:29:f6:ff:de:12:51:
b9:dd:bb:bd:26:a6:6f:b9:cc:c8:a6:07:87:6b:74:
47:c5:e3:26:60:f5:f3:2c:fc:f1:57:f3:f3:84:4d:
24:bc:39:0e:b6:52:8e:05:a6:dd:17:13:2a:11:ca:
5e:ef:46:21:4c:fe:37:cd:61:16:39:35:d7:81:b9:
f7:fd:26:a7:48:a1:97:fb:3c:bb:12:4c:2d:c0:7e:
33:76:f3:e7:e3:8a:81:2b:da:64:b9:16:94:b8:2b:
88:ae:0d:8f:80:9d:7a:59:02:9f:41:77:f9:d8:bd:
21:d8:bb:d7:67:c9:fb:0e:34:ca:21:f9:bc:05:18:
49:68:4e:4b:4c:04:ed:db:0d:6a:a6:54:7d:09:6a:
5f:3f:7a:14:d3:ba:83:3d:75:8a:c7:e4:15:8d:02:
aa:3a:d9:cd:12:69:e2:60:07:96:01:44:4d:48:d9:
18:07:5d:ec:0f:f5:e3:d9:f9:89:65:ea:84:f6:2f:
12:60:87:ea:eb:bf:c5:41:c3:a0:d5:9f:38:9f:58:
38:64:d5:78:99:9b:45:6a:0d:ec:a9:d6:5d:be:48:
79:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:53:12:47:A4:70:41:D4:BD:3D:C2:67:40:6D:C7:0B:43:F3:7C:9D
X509v3 Authority Key Identifier:
keyid:6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/11MSR6RwQdS9PcJnQG3HC0PzfJ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.217.224.0/19
Signature Algorithm: sha256WithRSAEncryption
69:f3:74:9b:9c:10:25:b0:23:ec:6f:a1:94:eb:0a:08:f6:df:
b7:72:eb:82:e7:79:bb:28:75:a3:1d:0e:9e:12:78:77:6b:b5:
65:7a:86:8f:3f:a4:ec:29:87:82:47:39:66:10:ed:bd:93:b8:
20:51:0c:5f:e8:05:02:cc:7b:31:f5:d8:cc:05:29:90:f2:16:
6d:dc:d0:3f:be:c9:58:f1:91:6a:2c:37:ae:94:3b:0d:53:2d:
47:53:12:87:ce:8d:c2:0f:e7:8d:c9:50:53:60:f6:85:a0:37:
b2:2d:bc:ae:d6:0a:40:9a:f3:2a:62:61:c1:34:3e:8e:fc:00:
b2:ff:f9:c9:18:cc:44:de:1a:88:fe:99:d2:44:7b:ef:bb:d5:
27:4d:96:d3:4d:2c:f3:c0:9e:68:8e:24:a1:ae:0b:23:e0:92:
10:d1:39:46:bb:78:a5:e7:ce:45:c4:c3:5f:3c:bc:66:77:dc:
49:7a:cd:7c:c9:8a:3a:d9:0a:d0:9c:bf:48:9f:a1:0e:7a:7c:
83:7c:e4:d8:8f:9c:61:3a:6f:91:7a:82:27:5d:9a:ff:52:48:
4e:56:35:e1:7b:21:3b:05:10:83:89:51:4d:06:ba:08:2d:77:
e3:15:7f:75:73:f1:b6:71:c3:9b:bb:f5:45:34:bd:ce:54:b4:
a9:b7:3c:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 22:26:55 2026 by rpki-client