Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/Z4PjKoAakdzE3zAQL4lSHOhG3Ks.roa
File: Z4PjKoAakdzE3zAQL4lSHOhG3Ks.roa (raw, json)
Hash identifier: pXAW9WCkMYAaRgkivXLmyqxg5KMvxbbF62UbEK/EhZA=
Subject key identifier: 67:83:E3:2A:80:1A:91:DC:C4:DF:30:10:2F:89:52:1C:E8:46:DC:AB
Certificate issuer: /CN=6f5e0230be799e44829c8720ca38347045494e20
Certificate serial: 01A024805F1B37FF2575376C9E10ED9CC543
Authority key identifier: 6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/Z4PjKoAakdzE3zAQL4lSHOhG3Ks.roa
Signing time: Fri 21 Aug 2026 13:26:27 +0000
ROA not before: Fri 21 Aug 2026 13:26:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 23061
IP address blocks: 77.216.0.0/19 maxlen: 24
77.216.128.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 06:28:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:24:80:5f:1b:37:ff:25:75:37:6c:9e:10:ed:9c:c5:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f5e0230be799e44829c8720ca38347045494e20
Validity
Not Before: Aug 21 13:26:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6783e32a801a91dcc4df30102f89521ce846dcab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4e:a2:c8:57:2b:e2:3e:ba:c6:09:bd:47:15:
25:98:88:b2:c2:9c:5e:6f:f3:d5:85:80:c8:11:e2:
df:ef:6c:48:23:1f:ee:ac:00:b7:9f:d8:d0:1c:2e:
ff:8d:97:0b:b3:b4:9f:9d:53:48:96:b1:68:16:b2:
7b:d2:70:fc:bc:81:75:1c:e4:8a:ed:52:b6:0e:34:
64:d5:f3:35:2f:53:eb:b5:8a:0b:86:aa:6b:18:6a:
15:3d:8d:d9:91:e1:75:19:d8:e8:60:98:71:f0:b4:
e7:b6:b0:4c:59:0c:53:e2:1d:5f:3f:b3:7c:a5:b1:
7e:6c:49:30:e8:4d:25:09:4a:31:83:89:88:0a:c3:
f7:67:b0:07:2c:55:7d:66:00:34:f8:87:b7:93:15:
f2:35:00:27:28:6d:6c:fd:08:94:cb:4f:83:7e:3b:
ee:0e:21:45:4c:51:0b:2e:02:06:07:82:28:07:f3:
f5:63:35:79:de:e4:b9:1f:4d:6e:cf:85:44:40:35:
cf:c7:37:61:e4:15:5e:44:83:c3:bf:1f:e5:b1:70:
d8:9a:86:83:55:e8:88:ac:90:be:a0:fe:13:cc:36:
40:ac:73:08:70:f9:b5:d4:ac:e4:e0:c2:50:a5:4d:
3a:dc:01:18:a6:23:84:1f:82:2b:71:dd:aa:9f:d2:
45:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:83:E3:2A:80:1A:91:DC:C4:DF:30:10:2F:89:52:1C:E8:46:DC:AB
X509v3 Authority Key Identifier:
keyid:6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/Z4PjKoAakdzE3zAQL4lSHOhG3Ks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.216.0.0/19
77.216.128.0/19
Signature Algorithm: sha256WithRSAEncryption
63:c6:bc:77:f0:74:fe:b9:16:d2:64:da:46:61:6a:14:e1:d3:
49:c0:65:15:85:27:a0:10:a6:11:5e:39:9e:79:65:d6:ea:c9:
f0:a3:02:ef:02:9b:e8:a4:6d:7a:e1:9b:65:76:bd:0a:5f:d8:
01:11:c1:8e:26:99:38:27:ae:e1:8b:6e:64:fe:58:b4:a8:d3:
1c:9b:81:26:c0:2e:b5:04:87:a0:6a:6a:28:67:50:93:9d:7b:
ac:07:6c:58:03:53:c8:65:ae:39:43:c6:26:26:62:69:0c:6c:
d1:85:ac:48:37:59:4f:6b:11:86:6d:10:7e:f8:8a:c4:22:08:
81:93:62:25:f4:4d:98:cb:46:3a:5f:96:82:8e:40:65:8b:c9:
62:4c:91:97:3e:d0:c0:83:9e:46:11:03:ea:f1:36:d8:53:b0:
a2:22:16:2c:b7:7d:27:b9:b4:2a:1b:d3:ad:4a:8b:6e:38:1f:
f3:f2:cb:cf:86:c2:fb:b1:48:01:09:3a:50:c2:f0:68:4d:e8:
e8:57:c3:37:39:6f:be:98:ef:2a:bb:6c:1f:47:1d:62:18:5e:
97:6d:57:a1:8e:aa:55:66:54:db:df:fa:23:16:8d:94:fc:3f:
30:22:53:7d:69:51:53:4a:3a:1f:0b:52:0e:24:e3:79:19:e2:
31:6b:5d:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 10:40:28 2026 by rpki-client