Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/aIONpeg1U1xAvnzplTbviGxEF5o.roa
File: aIONpeg1U1xAvnzplTbviGxEF5o.roa (raw, json)
Hash identifier: JXMw0yuvP6swm34dMweToitzl08WMMLxpU+GWo9Zkho=
Subject key identifier: 68:83:8D:A5:E8:35:53:5C:40:BE:7C:E9:95:36:EF:88:6C:44:17:9A
Certificate issuer: /CN=6f5e0230be799e44829c8720ca38347045494e20
Certificate serial: 01A16257CCF510507357699BAE1CF47BA7CA
Authority key identifier: 6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/aIONpeg1U1xAvnzplTbviGxEF5o.roa
Signing time: Thu 22 Oct 2026 06:41:23 +0000
ROA not before: Thu 22 Oct 2026 06:41:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215133
IP address blocks: 77.216.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:62:57:cc:f5:10:50:73:57:69:9b:ae:1c:f4:7b:a7:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f5e0230be799e44829c8720ca38347045494e20
Validity
Not Before: Oct 22 06:41:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=68838da5e835535c40be7ce99536ef886c44179a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:32:04:c4:ca:c5:01:6f:60:59:b7:b5:c4:c8:
cf:5a:df:af:72:aa:34:ce:c4:73:f5:94:29:37:2b:
72:db:4a:44:a4:50:f8:8c:b0:01:de:0e:54:5e:65:
5d:cc:55:e7:65:4d:0f:fa:8a:3e:a0:76:81:b4:7a:
bf:75:1d:34:ce:23:ea:38:3e:b5:e1:a3:ed:c8:66:
8b:61:5d:49:22:8b:e1:a5:bb:80:93:6c:56:89:17:
9f:67:29:3e:6d:e3:c6:5b:14:49:5d:3f:e4:09:52:
5a:04:79:e8:26:3a:30:80:65:ff:8d:c0:8f:af:1a:
a9:af:2e:7e:62:16:7c:c6:b5:58:5d:9f:b0:f2:59:
6e:dc:56:be:6e:a0:b7:06:63:e1:83:52:3e:28:d9:
bd:3a:05:ea:18:9c:b4:25:c9:49:2f:cf:e5:cb:2c:
93:c8:55:e9:83:cc:de:be:b0:87:26:67:47:74:a9:
23:36:09:5d:a5:c9:19:a6:1e:82:0b:63:7d:19:8d:
ad:96:ae:68:e1:e5:2a:87:78:84:09:ba:e7:5b:be:
d1:1d:1e:01:6f:88:3f:f5:23:b0:95:af:e6:d9:f6:
e1:11:a4:5c:a4:26:f3:a1:25:45:df:c5:2a:bc:46:
25:fc:45:9c:eb:e3:53:c4:b5:13:da:9b:c0:e7:b4:
0b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:83:8D:A5:E8:35:53:5C:40:BE:7C:E9:95:36:EF:88:6C:44:17:9A
X509v3 Authority Key Identifier:
keyid:6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/aIONpeg1U1xAvnzplTbviGxEF5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.216.4.0/24
Signature Algorithm: sha256WithRSAEncryption
12:64:61:fe:c8:2e:89:e2:d2:8f:e5:40:6b:2b:95:13:9d:43:
d0:9d:49:5c:75:45:2b:cc:74:3f:ae:6e:66:dd:24:de:65:23:
09:5f:61:ce:79:0c:ab:d6:07:44:06:64:39:26:56:f4:0d:eb:
e1:29:da:d5:bc:47:79:ac:9f:8e:47:54:04:51:a7:45:69:b6:
12:c6:e7:b8:e6:1d:a1:ba:c8:49:e2:3e:ca:b5:df:51:9a:a6:
ea:44:fa:b3:01:4d:ff:38:58:0b:41:d6:7c:d3:ef:19:28:aa:
dc:68:fa:56:67:ec:00:2d:b1:3d:e8:03:57:9e:6b:d3:02:73:
c4:c7:5b:55:f1:4e:51:cf:ca:42:f2:d6:df:13:c9:cb:87:54:
d7:ff:e4:b4:a5:41:16:84:10:06:1e:5a:5c:5d:da:71:88:4d:
18:50:10:f8:12:5b:a0:75:04:c0:64:d3:54:13:52:22:1e:79:
5f:20:35:28:28:20:40:1b:1f:b6:5c:da:24:e8:5c:e0:78:66:
4f:0d:eb:05:14:ea:e4:79:85:c3:93:b5:b8:1e:7a:b2:73:54:
b4:92:e0:04:a8:13:b0:77:99:2d:49:2e:f4:ed:41:14:a1:9c:
ec:1a:bd:5d:7a:69:63:b4:b4:0f:51:5d:04:3e:bf:fa:db:c9:
43:c0:53:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 13:15:18 2026 by rpki-client