Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/FHeE551JpVO1KJ65D73fRS5eJhs.roa
File: FHeE551JpVO1KJ65D73fRS5eJhs.roa (raw, json)
Hash identifier: jViNbMub4CkJENZLJ5PVL8ARAJIa6OOd0Hf/TI83Ngw=
Subject key identifier: 14:77:84:E7:9D:49:A5:53:B5:28:9E:B9:0F:BD:DF:45:2E:5E:26:1B
Certificate issuer: /CN=6f5e0230be799e44829c8720ca38347045494e20
Certificate serial: 01A1679EF8F84F2D7ED8DFF6E77896DA3D98
Authority key identifier: 6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/FHeE551JpVO1KJ65D73fRS5eJhs.roa
Signing time: Fri 23 Oct 2026 07:17:13 +0000
ROA not before: Fri 23 Oct 2026 07:17:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 141750
IP address blocks: 77.216.24.0/24 maxlen: 24
77.216.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 22:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:67:9e:f8:f8:4f:2d:7e:d8:df:f6:e7:78:96:da:3d:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f5e0230be799e44829c8720ca38347045494e20
Validity
Not Before: Oct 23 07:17:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=147784e79d49a553b5289eb90fbddf452e5e261b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e9:80:27:6d:80:7b:38:83:31:c6:75:eb:a2:
f8:d1:e1:d9:49:d9:28:8e:cc:5a:28:c0:47:7e:25:
a8:0e:55:07:f8:89:21:f8:f3:3f:bd:86:32:2d:60:
57:3c:00:4a:4a:04:6c:5f:fc:2d:7c:dc:cb:80:b1:
07:e3:2a:55:2c:93:9c:62:7b:13:ed:7f:2b:ee:f4:
92:4e:a1:b0:f0:e8:20:64:96:b8:bb:c6:28:aa:73:
eb:fc:4f:44:3b:12:23:45:1a:02:2a:d5:73:71:8f:
b6:41:e1:14:28:2a:b5:ae:e3:71:0c:ce:2d:a5:81:
d1:42:2c:0f:4a:c8:e1:61:74:41:14:0b:23:e6:77:
ad:8e:24:5f:fe:fa:2f:b2:d6:0c:98:cc:cd:e0:12:
1a:f2:e3:5e:eb:a3:63:73:02:cf:84:ca:b1:68:0b:
9c:c9:94:e1:e3:d5:ee:ff:7f:dd:12:59:99:5b:f4:
8d:3a:9d:2c:a4:c7:15:fb:8a:de:42:97:f4:17:b3:
dd:87:35:d9:2c:01:c6:89:c4:56:ab:b9:f8:1e:6c:
c7:47:9b:8c:4f:f0:30:76:d7:7e:92:67:8c:ec:4b:
b0:f3:e4:30:28:5b:5b:9d:e3:f9:be:9f:aa:cc:39:
10:ec:2d:ca:f4:46:f3:62:97:3f:65:05:58:46:27:
89:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:77:84:E7:9D:49:A5:53:B5:28:9E:B9:0F:BD:DF:45:2E:5E:26:1B
X509v3 Authority Key Identifier:
keyid:6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/FHeE551JpVO1KJ65D73fRS5eJhs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.216.24.0/24
77.216.26.0/24
Signature Algorithm: sha256WithRSAEncryption
75:d6:cd:74:c3:74:d6:de:90:c7:72:9b:96:c4:75:8d:63:2b:
3c:f4:08:ff:68:8d:ff:51:0a:7a:fe:9e:a1:92:71:32:3f:f4:
0e:7d:74:78:7f:81:d3:ea:af:cf:bf:14:f4:f5:24:c6:81:12:
90:c0:e0:41:f9:c9:0d:13:f8:f1:3c:18:1c:db:58:05:db:b5:
3e:07:89:08:6a:90:61:9a:22:9f:cb:7a:9c:2e:cb:bb:88:6b:
05:9a:0c:f2:8c:3f:83:41:d4:30:b8:55:ec:27:4c:9c:a0:ef:
f2:bd:1f:63:67:ca:78:b0:7d:bf:9c:13:9e:01:5e:71:2d:a8:
08:60:38:9c:35:39:cb:a3:0d:f0:69:e0:a2:d0:f1:39:12:59:
28:f7:77:11:09:9c:89:cb:b8:6c:5e:6b:e6:cf:31:e3:c2:ca:
fa:8e:d2:23:a3:66:61:6a:81:53:34:1a:14:0d:eb:1a:11:37:
ba:d3:d0:84:63:ff:cf:66:bf:e8:10:0c:73:5e:e3:02:f4:6c:
c4:61:2f:7b:5b:24:f9:38:70:b7:1f:27:fd:e6:0a:35:0c:e4:
de:4a:08:21:5b:4e:1a:42:82:92:f8:36:c4:a8:a3:47:f2:bb:
b0:63:b9:c7:ad:e1:43:f2:27:0c:22:0b:9f:e2:c7:87:09:8d:
0f:34:fd:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:51:17 2026 by rpki-client