Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/q9JOtDB20inSqEutcUzBqHW1Wug.roa
File: q9JOtDB20inSqEutcUzBqHW1Wug.roa (raw, json)
Hash identifier: g565KevR3dHRHEpb2jqrPsd5CI+c9qfAteWBQgmL5hk=
Subject key identifier: AB:D2:4E:B4:30:76:D2:29:D2:A8:4B:AD:71:4C:C1:A8:75:B5:5A:E8
Certificate issuer: /CN=6f5e0230be799e44829c8720ca38347045494e20
Certificate serial: 01A167A0CDFBCB0E58EA5EA66CF415306EB8
Authority key identifier: 6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/q9JOtDB20inSqEutcUzBqHW1Wug.roa
Signing time: Fri 23 Oct 2026 07:19:14 +0000
ROA not before: Fri 23 Oct 2026 07:19:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25369
IP address blocks: 77.216.10.0/24 maxlen: 24
77.216.11.0/24 maxlen: 24
77.216.12.0/24 maxlen: 24
77.216.14.0/24 maxlen: 24
85.232.178.0/24 maxlen: 24
85.232.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 05:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:67:a0:cd:fb:cb:0e:58:ea:5e:a6:6c:f4:15:30:6e:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f5e0230be799e44829c8720ca38347045494e20
Validity
Not Before: Oct 23 07:19:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=abd24eb43076d229d2a84bad714cc1a875b55ae8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:09:51:88:66:66:58:ca:97:7e:4e:24:94:52:
30:ab:67:e5:68:63:e3:6d:8a:5d:59:a4:c5:7c:65:
69:74:64:55:09:18:5b:08:4a:3b:9f:71:e6:f4:ac:
9c:2e:85:c6:02:01:f0:25:34:4f:d1:2a:56:b4:0f:
e9:3f:0d:a5:bc:1e:5e:02:c0:98:f9:f6:1e:8d:66:
f7:ff:ac:4a:4d:8d:06:67:ca:e2:e8:bb:52:63:04:
5d:76:a7:84:4e:5b:34:be:fd:02:5a:89:c1:5d:d4:
f4:15:b3:ec:83:fa:c5:6e:35:d6:91:8d:df:ec:c8:
98:2b:b9:59:0a:88:81:9f:db:e0:d4:24:0a:e2:9b:
6c:57:90:38:fd:91:86:f7:a3:f9:81:7c:92:27:79:
36:1a:34:cc:8a:51:92:41:32:fb:c6:ff:f8:a4:66:
7b:06:49:5f:18:5e:db:93:eb:6f:af:ad:49:e1:8a:
65:28:d2:e0:dd:fc:04:d8:07:1c:30:4d:91:0a:bd:
33:07:23:93:64:57:c2:8c:7e:85:62:5d:de:5a:e1:
ab:ee:0d:48:bf:bb:98:06:a9:c8:6e:ef:d6:5a:6c:
58:4a:c5:d4:3c:24:5b:d9:d5:8d:af:74:9d:c3:b8:
9b:25:15:89:1a:6d:64:c5:f7:9e:f3:1f:1e:33:6a:
ce:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:D2:4E:B4:30:76:D2:29:D2:A8:4B:AD:71:4C:C1:A8:75:B5:5A:E8
X509v3 Authority Key Identifier:
keyid:6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/q9JOtDB20inSqEutcUzBqHW1Wug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.216.10.0-77.216.12.255
77.216.14.0/24
85.232.178.0/24
85.232.187.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:79:f8:9a:b9:57:68:fb:7f:a5:1c:aa:3b:53:a7:1b:f7:2c:
9f:d2:53:24:92:88:fb:54:3d:c8:df:b7:f2:13:ef:93:ab:33:
be:2a:a9:bf:df:36:f4:30:3b:7b:79:1e:9f:d2:ea:a9:f4:35:
00:4a:c0:e5:43:c0:62:30:c7:92:15:df:47:b2:ad:66:7e:df:
d1:de:be:ed:e1:a4:a4:9c:9b:da:bd:7e:34:5d:68:52:f2:d3:
fe:23:7c:b4:99:3a:4c:36:5e:09:7b:3d:79:f7:0d:e4:95:cf:
a3:4f:40:53:b2:95:2e:7b:69:bd:16:e8:df:e5:9a:8e:16:2b:
50:96:f8:b1:e3:14:37:9a:79:dd:f6:be:5f:13:17:c4:74:ed:
91:2f:a1:94:a3:df:6f:14:c5:3a:3b:5e:43:3c:a0:0b:93:68:
e8:0f:ad:e2:56:43:c2:0c:2b:11:7b:00:d9:a1:c9:ef:69:3c:
2e:0f:9c:84:28:2e:9a:c4:ff:7f:22:ee:60:9c:a6:ad:bf:bf:
86:f5:0c:02:eb:c8:3d:e6:8b:5b:87:e1:a2:c4:75:02:5e:f4:
8f:1b:d6:c8:e6:f2:7a:a1:96:3f:17:eb:1b:29:17:92:ce:a3:
6a:30:d5:e6:41:53:ab:fb:d1:53:d2:d7:e5:57:2f:da:6d:7b:
96:de:89:f7
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAaFnoM37yw5Y6l6mbPQVMG64MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmNWUwMjMwYmU3OTllNDQ4MjljODcyMGNhMzgzNDcwNDU0
OTRlMjAwHhcNMjYxMDIzMDcxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYmQyNGViNDMwNzZkMjI5ZDJhODRiYWQ3MTRjYzFhODc1YjU1YWU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3AlRiGZmWMqXfk4klFIwq2flaGPj
bYpdWaTFfGVpdGRVCRhbCEo7n3Hm9KycLoXGAgHwJTRP0SpWtA/pPw2lvB5eAsCY
+fYejWb3/6xKTY0GZ8ri6LtSYwRddqeETls0vv0CWonBXdT0FbPsg/rFbjXWkY3f
7MiYK7lZCoiBn9vg1CQK4ptsV5A4/ZGG96P5gXySJ3k2GjTMilGSQTL7xv/4pGZ7
BklfGF7bk+tvr61J4YplKNLg3fwE2AccME2RCr0zByOTZFfCjH6FYl3eWuGr7g1I
v7uYBqnIbu/WWmxYSsXUPCRb2dWNr3Sdw7ibJRWJGm1kxfee8x8eM2rOXQIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFKvSTrQwdtIp0qhLrXFMwah1tVroMB8GA1UdIwQY
MBaAFG9eAjC+eZ5EgpyHIMo4NHBFSU4gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjE0Q01MNTVua1NDbkljZ3lqZzBjRVZKVGlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny83MGNjZWYtMTdmMy00OTI4LTljMGIt
YmE3YzdkODE5MGNhLzEvcTlKT3REQjIwaW5TcUV1dGNVekJxSFcxV3VnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny83MGNjZWYtMTdmMy00OTI4LTljMGItYmE3YzdkODE5MGNh
LzEvYjE0Q01MNTVua1NDbkljZ3lqZzBjRVZKVGlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgMAwDBAFN2AoD
BABN2AwDBABN2A4DBABV6LIDBABV6LswDQYJKoZIhvcNAQELBQADggEBAIx5+Jq5
V2j7f6UcqjtTpxv3LJ/SUySSiPtUPcjft/IT75OrM74qqb/fNvQwO3t5Hp/S6qn0
NQBKwOVDwGIwx5IV30eyrWZ+39Hevu3hpKScm9q9fjRdaFLy0/4jfLSZOkw2Xgl7
PXn3DeSVz6NPQFOylS57ab0W6N/lmo4WK1CW+LHjFDeaed32vl8TF8R07ZEvoZSj
328UxTo7XkM8oAuTaOgPreJWQ8IMKxF7ANmhye9pPC4PnIQoLprE/38i7mCcpq2/
v4b1DALryD3mi1uH4aLEdQJe9I8b1sjm8nqhlj8X6xspF5LOo2ow1eZBU6v70VPS
1+VXL9pte5beifc=
-----END CERTIFICATE-----
Generated at Sun Nov 15 14:50:34 2026 by rpki-client