Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/RW6Jn-q0cxKXogclpuYp2DJsueI.roa
File: RW6Jn-q0cxKXogclpuYp2DJsueI.roa (raw, json)
Hash identifier: CXv4WWvyQAjNWNO9zlS/Lu3TZjFNJuIJc1iyC0G/Fs8=
Subject key identifier: 45:6E:89:9F:EA:B4:73:12:97:A2:07:25:A6:E6:29:D8:32:6C:B9:E2
Certificate issuer: /CN=6f5e0230be799e44829c8720ca38347045494e20
Certificate serial: 01A0E677518F7560BB8E54DDE1AEEED44314
Authority key identifier: 6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/RW6Jn-q0cxKXogclpuYp2DJsueI.roa
Signing time: Mon 28 Sep 2026 05:22:54 +0000
ROA not before: Mon 28 Sep 2026 05:22:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 77.216.0.0/19 maxlen: 19
77.216.128.0/19 maxlen: 19
77.217.224.0/19 maxlen: 24
85.232.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e6:77:51:8f:75:60:bb:8e:54:dd:e1:ae:ee:d4:43:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f5e0230be799e44829c8720ca38347045494e20
Validity
Not Before: Sep 28 05:22:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=456e899feab4731297a20725a6e629d8326cb9e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b8:e4:14:92:a6:be:44:4c:b9:38:66:2f:11:
9d:37:20:a6:b5:54:22:3e:ee:f2:db:33:47:21:19:
f8:f5:f2:6b:8b:42:16:c1:f1:3f:54:a3:55:87:2a:
00:72:49:41:2a:4d:40:62:0f:ec:04:dc:60:61:a4:
cd:ba:eb:89:07:c5:b3:03:df:32:02:17:59:7d:34:
bf:41:38:51:4b:96:f6:bd:8a:ad:1c:61:dd:08:ba:
e5:44:62:9a:47:93:a8:16:41:e9:07:2b:58:5d:8c:
ee:c5:fd:29:8f:92:7d:4d:4d:3a:7f:e9:25:d8:fb:
f3:c5:58:e9:eb:db:d6:aa:2a:58:f8:ee:70:d3:5c:
46:10:ae:1e:f5:d5:da:68:d9:1d:7a:51:4a:66:ee:
b5:4c:a4:0d:ce:08:9b:11:ee:c4:62:3e:e1:f5:b2:
4a:19:34:00:52:18:0a:14:6c:36:ea:af:e1:55:26:
81:46:fa:ba:80:3e:e0:4d:06:be:04:9e:d9:8a:75:
37:31:6a:7f:5a:e4:07:6b:0a:78:ce:b4:b1:6b:eb:
52:4a:fe:55:f3:6e:d8:90:7c:95:98:b8:2c:f5:a6:
db:b1:9f:17:1d:33:4e:75:e6:64:a4:1a:a0:23:bd:
ad:f9:ac:75:ba:9b:5b:37:95:0b:e8:f1:8f:81:13:
68:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:6E:89:9F:EA:B4:73:12:97:A2:07:25:A6:E6:29:D8:32:6C:B9:E2
X509v3 Authority Key Identifier:
keyid:6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/RW6Jn-q0cxKXogclpuYp2DJsueI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.216.0.0/19
77.216.128.0/19
77.217.224.0/19
85.232.183.0/24
Signature Algorithm: sha256WithRSAEncryption
88:e5:1e:ed:9a:a6:90:a8:1d:3b:d3:a8:00:a1:d6:5b:49:31:
6b:5b:7b:66:f1:f8:82:5f:fc:c9:fd:9e:f8:0a:96:83:36:99:
ff:bd:9b:cb:dd:31:ba:0b:d2:db:42:80:8c:51:1b:60:e5:32:
6d:59:bd:bf:31:d4:aa:5d:e2:0a:fe:b0:ee:5e:ee:3a:53:3d:
47:be:c7:4b:c9:0e:2e:42:1f:6a:c6:15:8c:9d:b2:79:84:2c:
32:9e:cc:ea:8d:ac:e1:c6:b1:51:b6:70:cb:83:13:5f:30:2c:
49:56:38:de:97:3f:b9:04:d1:8a:8d:c3:92:e5:b7:be:d7:1b:
34:03:d2:82:57:ab:04:aa:b0:28:22:ec:40:4d:7c:e5:22:a8:
10:37:c0:a8:51:70:b3:5f:87:cc:0c:33:0a:58:51:e8:a6:66:
02:c5:32:9c:9f:49:da:9a:03:18:20:4b:35:c8:5c:d9:a8:14:
03:d4:f1:6f:07:74:cd:1a:78:a9:89:28:99:df:f8:02:78:64:
35:9e:e4:99:36:4f:e8:6c:7c:b5:c6:93:21:82:7e:94:15:5b:
24:f0:77:1d:bd:85:84:ef:0b:08:89:f4:0c:73:98:54:9e:9e:
b7:d1:38:2e:69:8c:ae:e9:9e:2c:68:25:d1:ef:65:12:4b:f4:
e4:ae:6a:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 22:38:52 2026 by rpki-client