Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/dGYnsE6kQOIl-2M9vRy_ea7uVkg.roa
File: dGYnsE6kQOIl-2M9vRy_ea7uVkg.roa (raw, json)
Hash identifier: soTFWIuBiJb25Q80llp7My327kfMERqZF+fnnxTNZBo=
Subject key identifier: 74:66:27:B0:4E:A4:40:E2:25:FB:63:3D:BD:1C:BF:79:AE:EE:56:48
Certificate issuer: /CN=6f5e0230be799e44829c8720ca38347045494e20
Certificate serial: 01A167A2A2526E0166FE0D333E240B4673D1
Authority key identifier: 6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/dGYnsE6kQOIl-2M9vRy_ea7uVkg.roa
Signing time: Fri 23 Oct 2026 07:21:13 +0000
ROA not before: Fri 23 Oct 2026 07:21:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5511
IP address blocks: 77.216.25.0/24 maxlen: 24
77.216.27.0/24 maxlen: 24
77.216.29.0/24 maxlen: 24
77.216.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 05:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:67:a2:a2:52:6e:01:66:fe:0d:33:3e:24:0b:46:73:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f5e0230be799e44829c8720ca38347045494e20
Validity
Not Before: Oct 23 07:21:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=746627b04ea440e225fb633dbd1cbf79aeee5648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:2f:fc:fb:18:30:3b:d1:ea:db:06:6f:0e:14:
72:dd:73:0e:5f:f7:f6:c8:33:07:e3:d8:f3:f0:79:
4a:8b:50:e7:22:38:1e:a5:4f:b0:d9:13:44:ae:61:
a1:ea:8a:25:e4:47:1f:3c:fe:46:27:4b:9b:45:fe:
30:4f:17:2f:95:0b:1b:b6:f6:23:7e:9c:52:2e:bd:
48:8e:39:95:7b:c9:23:8e:b2:df:25:11:a6:be:5d:
8d:76:dd:02:95:0c:af:3f:ca:4a:34:ca:91:55:d2:
21:20:80:6c:11:bd:2d:66:3f:75:61:a0:d2:7d:1c:
44:0a:5f:6a:9e:d9:56:9a:5f:41:f5:66:a5:dc:48:
5d:c9:1c:f0:bb:47:82:71:68:b9:cb:ae:f8:07:e0:
ce:d1:cf:c4:81:c4:13:31:42:a0:7d:83:45:28:29:
6f:21:a1:74:2c:58:25:36:83:1e:2d:ee:04:a0:11:
c1:b7:30:36:a7:04:3a:49:95:3a:ef:5b:df:90:6a:
8e:69:d7:a2:04:e1:6f:4b:da:76:a4:07:48:06:7b:
fe:d4:e9:d8:a8:3b:4d:eb:79:95:be:b6:d5:8b:f0:
f9:ca:c4:ee:0a:59:d9:fd:f7:15:11:26:e8:23:a3:
53:8f:58:79:ac:79:24:80:50:7d:e5:49:1e:a8:c5:
c9:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:66:27:B0:4E:A4:40:E2:25:FB:63:3D:BD:1C:BF:79:AE:EE:56:48
X509v3 Authority Key Identifier:
keyid:6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/dGYnsE6kQOIl-2M9vRy_ea7uVkg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.216.25.0/24
77.216.27.0/24
77.216.29.0/24
77.216.31.0/24
Signature Algorithm: sha256WithRSAEncryption
63:a0:00:79:62:25:c8:5c:a9:10:a8:97:c0:90:fb:06:71:95:
a2:28:c1:28:13:33:b4:f5:f7:7c:c9:e4:93:8e:dc:49:a8:fe:
1e:38:a6:9e:7b:42:78:30:9e:d1:5a:7b:31:48:c7:81:37:ad:
bf:de:21:72:30:36:43:ec:1e:1e:af:99:29:d9:40:d4:80:80:
f9:37:83:41:63:36:91:7d:5a:61:2b:8a:b4:1a:bb:b0:ea:a8:
12:d2:19:e2:d4:9a:ab:99:7e:f7:f3:36:8a:f7:2a:57:76:b2:
ba:34:20:d4:cb:a0:ac:f6:d8:3d:ef:57:45:7c:7d:2b:cc:fc:
78:6b:47:92:32:5f:9c:20:8d:e7:27:28:8c:47:bc:5b:fc:b8:
f2:c9:01:5d:e4:c5:32:38:62:b1:5a:0c:0c:be:3b:2e:b3:d4:
b4:9a:64:2a:3a:46:ec:b6:9e:5e:1d:f1:c7:ba:ea:db:d4:7d:
21:aa:22:20:76:c9:7a:ef:ae:4d:a4:ef:b6:1c:a3:55:59:93:
41:f1:ef:b7:1d:35:20:cb:aa:93:5c:04:79:f0:47:70:b2:86:
66:4f:6f:03:09:2a:0b:36:e2:10:01:37:40:0d:46:94:22:4a:
26:73:21:cc:59:96:25:b2:19:f8:fc:fd:a9:63:ab:b6:e9:85:
43:dd:c2:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:50:35 2026 by rpki-client