Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/GYeHOKTgLiYfwBGKZE8aV2_3anU.roa
File: GYeHOKTgLiYfwBGKZE8aV2_3anU.roa (raw, json)
Hash identifier: ZypODbZlA1DZn04DyblWwqRNZO7IRsg/S+JOcr5rzB4=
Subject key identifier: 19:87:87:38:A4:E0:2E:26:1F:C0:11:8A:64:4F:1A:57:6F:F7:6A:75
Certificate issuer: /CN=6f5e0230be799e44829c8720ca38347045494e20
Certificate serial: 01A167A2A2C4D608672EFF8D6B0E58D55AAB
Authority key identifier: 6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/GYeHOKTgLiYfwBGKZE8aV2_3anU.roa
Signing time: Fri 23 Oct 2026 07:21:14 +0000
ROA not before: Fri 23 Oct 2026 07:21:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8881
IP address blocks: 77.216.17.0/24 maxlen: 24
77.216.19.0/24 maxlen: 24
77.216.21.0/24 maxlen: 24
77.216.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Nov 2026 23:41:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:67:a2:a2:c4:d6:08:67:2e:ff:8d:6b:0e:58:d5:5a:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f5e0230be799e44829c8720ca38347045494e20
Validity
Not Before: Oct 23 07:21:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=19878738a4e02e261fc0118a644f1a576ff76a75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:62:e9:ce:45:64:d2:6b:ee:d1:fc:0b:7a:8c:
a7:76:c5:1b:7b:01:92:5c:4e:29:a9:69:6c:bb:08:
34:81:64:7d:e9:f7:1f:23:ed:94:4c:a0:16:95:da:
63:c1:0e:09:14:e1:8f:a5:40:e2:76:5f:28:38:1a:
1a:99:b0:60:a2:70:c1:cd:44:11:aa:57:15:f5:33:
0d:e8:cd:d4:54:0a:cb:c5:e6:75:29:86:48:b9:05:
5b:0d:bc:37:63:59:fa:54:77:5a:2d:1a:03:2b:5b:
1f:5e:2a:64:0a:07:f2:e6:be:ae:9f:bf:91:ef:8d:
30:f3:8b:d8:67:7a:07:54:ac:ce:05:f5:4b:c1:9a:
a6:4d:28:8d:90:db:cc:a4:83:d6:a9:fc:8f:04:57:
d1:7b:a4:54:93:0e:24:1d:6b:dd:07:3b:ae:5d:24:
43:0d:6b:d6:cd:bd:a2:df:94:c7:15:e0:c7:52:ca:
da:05:6f:41:7a:10:02:5b:4f:86:3f:00:bb:a6:bc:
f3:4d:57:c0:8e:08:86:4e:65:24:7b:11:1d:bb:97:
bd:f7:04:ee:2e:46:14:dc:bd:d1:d3:ff:4c:ed:85:
cf:db:93:6e:fe:70:8b:11:9d:2e:bb:e9:69:93:19:
de:c8:1b:ee:e2:57:52:2d:1f:bf:52:c0:72:ae:f4:
40:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:87:87:38:A4:E0:2E:26:1F:C0:11:8A:64:4F:1A:57:6F:F7:6A:75
X509v3 Authority Key Identifier:
keyid:6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/GYeHOKTgLiYfwBGKZE8aV2_3anU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.216.17.0/24
77.216.19.0/24
77.216.21.0/24
77.216.23.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:32:e9:0c:66:03:34:ad:6e:ee:7c:39:09:40:6d:f6:2a:33:
96:be:e0:01:27:2f:a5:0f:79:47:f6:87:f2:61:18:85:0c:17:
91:33:ae:c1:88:29:05:0e:14:52:eb:7d:78:e0:48:51:8a:35:
62:21:ad:ab:6e:55:b8:f9:71:7b:67:f7:83:60:48:e8:c4:92:
31:9c:ee:35:e4:bd:34:e8:04:bc:32:03:b3:65:1b:de:9a:7e:
af:49:fd:91:69:7a:66:fe:5e:73:68:6c:a2:d0:cd:17:39:25:
3c:13:a9:3e:41:ba:aa:16:82:88:23:fc:56:a0:ba:97:9c:73:
92:9a:c2:2c:69:ef:a0:a5:4b:4c:69:7b:84:5f:0a:6a:55:8f:
5f:94:f3:6d:93:b4:dc:42:63:ce:b5:54:94:57:1c:10:f1:3e:
c7:93:ca:ef:3e:36:a9:b6:33:4f:66:8a:e3:49:00:ae:48:d8:
a9:75:cc:6f:a0:4c:5f:26:6d:a0:2f:12:59:4d:3b:53:d3:47:
1e:66:72:7b:52:4d:f9:9c:89:82:7e:47:53:ee:52:ca:59:cf:
d3:bc:a2:db:0d:ea:ca:71:5d:dc:b4:8d:c0:51:a6:67:72:72:
db:35:52:08:f4:dd:a6:08:83:e8:2c:39:db:71:0e:40:21:30:
7a:ed:22:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 07:32:46 2026 by rpki-client