Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/j7Zx2L-t1SSEu9xEPsqDbDPB9iw.roa
File: j7Zx2L-t1SSEu9xEPsqDbDPB9iw.roa (raw, json)
Hash identifier: /0lpFE1SI6LyzhhMwErxHeZkCTyCGqhojTPEqYt0FKw=
Subject key identifier: 8F:B6:71:D8:BF:AD:D5:24:84:BB:DC:44:3E:CA:83:6C:33:C1:F6:2C
Certificate issuer: /CN=6f5e0230be799e44829c8720ca38347045494e20
Certificate serial: 01A16257CD3747C3FCDC0E1059CC25F15997
Authority key identifier: 6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/j7Zx2L-t1SSEu9xEPsqDbDPB9iw.roa
Signing time: Thu 22 Oct 2026 06:41:23 +0000
ROA not before: Thu 22 Oct 2026 06:41:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219498
IP address blocks: 77.216.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 09:44:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:62:57:cd:37:47:c3:fc:dc:0e:10:59:cc:25:f1:59:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f5e0230be799e44829c8720ca38347045494e20
Validity
Not Before: Oct 22 06:41:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8fb671d8bfadd52484bbdc443eca836c33c1f62c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:61:70:f9:f3:c6:7c:06:15:1d:5a:cb:04:1e:
be:7b:9f:6f:6f:28:0f:9d:42:c3:b2:95:1d:bf:55:
33:ca:3f:8c:75:30:45:91:27:17:73:6f:b2:8d:1b:
00:29:eb:a0:14:db:e4:cc:c1:36:22:55:a4:53:88:
3d:97:ab:8b:2e:a7:e0:9d:69:4f:9b:43:56:30:22:
88:e7:74:6c:20:f9:4a:d0:07:a7:fc:cc:b1:fc:bd:
37:75:cb:3a:3e:1d:38:cc:0f:9d:5f:18:aa:55:d9:
da:8e:7e:a4:ad:0e:95:28:37:cb:e0:3f:70:ed:6e:
93:3e:17:f0:3b:53:d7:8f:49:2f:a0:f0:62:52:78:
20:48:c1:d7:6f:f9:5c:a6:5f:76:c2:e2:7e:9f:b2:
a8:a3:7d:e2:e9:82:5c:1a:e3:cb:6b:11:c5:df:57:
88:1f:4a:e5:37:14:39:ab:e1:17:d2:de:27:03:16:
b0:82:14:34:54:a3:43:86:7e:78:16:28:75:15:00:
19:4b:72:99:f3:ad:cc:12:4d:52:64:19:58:a7:96:
cc:66:49:73:fb:29:d0:16:28:b0:e9:28:63:8d:1a:
aa:8d:a3:71:97:fa:2d:4f:ac:6e:98:71:e2:45:5d:
7d:63:e9:fa:54:18:95:c4:b3:e4:e3:2a:2f:a8:fb:
db:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:B6:71:D8:BF:AD:D5:24:84:BB:DC:44:3E:CA:83:6C:33:C1:F6:2C
X509v3 Authority Key Identifier:
keyid:6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/j7Zx2L-t1SSEu9xEPsqDbDPB9iw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.216.1.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:41:1c:5c:a6:8d:dd:d5:cf:27:41:67:a0:5f:a8:00:a6:9b:
84:5c:fc:89:3f:e3:2a:a2:66:af:4f:ab:f8:f1:d9:28:3d:4a:
ed:73:5a:2e:a4:15:30:e7:29:fa:29:c5:da:68:3b:f8:79:5a:
b8:ca:f9:78:b4:b3:28:78:0a:08:13:85:4c:fc:65:44:d7:31:
a9:bf:67:83:f0:c1:88:20:e5:10:ec:6e:cf:06:10:c0:ef:7f:
28:24:09:15:64:24:0c:98:0b:d2:78:55:69:6e:b8:ae:75:e1:
86:41:a1:26:cb:a7:d1:35:23:74:91:63:eb:45:a9:a1:72:3c:
9c:6e:30:1a:e7:99:5f:9f:c4:25:6b:b3:97:0d:2d:65:a3:53:
f1:83:6f:0e:e6:09:3f:91:3c:7d:b3:a8:b0:79:ce:7f:d2:5c:
8c:09:c9:bd:a0:ff:17:37:bb:44:78:62:d5:22:bf:f5:bb:87:
41:77:ab:f5:d3:40:a1:fc:cb:a8:56:9f:17:2a:89:bc:18:5e:
00:99:26:cc:e9:e4:17:53:97:c9:c3:64:e3:74:ed:76:40:e9:
e4:f5:bf:70:28:f2:41:55:41:c9:30:a1:ec:43:bd:0d:1e:fa:
7d:96:0c:57:bb:7f:fc:fb:e5:88:7e:52:e1:67:4d:87:ad:df:
78:5e:84:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 18:41:21 2026 by rpki-client