Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/rE67odVY3FYJB8VvCh4dgKEDRMI.roa
File: rE67odVY3FYJB8VvCh4dgKEDRMI.roa (raw, json)
Hash identifier: B77Zi3C2hI7WVjVYK03+jHPdUpYDQxkbf7+/G04HaKE=
Subject key identifier: AC:4E:BB:A1:D5:58:DC:56:09:07:C5:6F:0A:1E:1D:80:A1:03:44:C2
Certificate issuer: /CN=6f5e0230be799e44829c8720ca38347045494e20
Certificate serial: 01A16257CC5F51378C91388FED28AE5C20C6
Authority key identifier: 6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/rE67odVY3FYJB8VvCh4dgKEDRMI.roa
Signing time: Thu 22 Oct 2026 06:41:23 +0000
ROA not before: Thu 22 Oct 2026 06:41:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152179
IP address blocks: 77.216.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 05:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:62:57:cc:5f:51:37:8c:91:38:8f:ed:28:ae:5c:20:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f5e0230be799e44829c8720ca38347045494e20
Validity
Not Before: Oct 22 06:41:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ac4ebba1d558dc560907c56f0a1e1d80a10344c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e6:15:10:16:89:b3:dd:c2:7c:6e:4d:ed:2e:
8e:3b:38:2b:8c:49:55:49:52:f3:76:5e:9c:69:e2:
51:7c:d5:9d:8d:fc:26:f4:05:72:13:c0:76:f4:9a:
b6:4e:e1:18:94:a8:75:89:05:b5:3e:be:e1:67:af:
a3:58:bc:f1:05:4d:50:9a:8a:16:57:a7:ea:03:f3:
3d:c9:ab:02:e8:9f:a0:89:f3:f1:40:32:0d:6c:eb:
82:22:c2:c5:32:e9:95:c1:90:a6:c5:95:3f:bc:60:
b8:4e:b9:8b:06:2e:76:8b:ba:91:18:db:e2:3a:98:
ed:1f:d4:2f:90:c2:bb:23:cf:de:75:ea:1a:b0:8e:
ca:18:de:4d:df:5b:06:c4:0d:30:45:f1:e4:02:c8:
e3:2d:26:e4:82:f2:bd:ef:6d:fa:6c:24:f7:76:1d:
af:fb:f5:c3:8b:bc:fa:36:02:3d:6a:2e:2b:31:ce:
31:91:25:d9:e2:40:e6:13:6e:42:86:70:5c:40:47:
da:45:7d:ae:dd:0e:4d:03:6d:b9:80:ff:bb:e0:82:
66:8c:86:5c:26:fe:50:47:3b:02:13:c0:10:7c:b1:
2c:15:18:cb:50:7f:8f:75:45:54:61:af:a6:e1:9c:
97:a5:12:3c:e9:cb:d2:b8:ba:62:02:a6:7a:fb:59:
95:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:4E:BB:A1:D5:58:DC:56:09:07:C5:6F:0A:1E:1D:80:A1:03:44:C2
X509v3 Authority Key Identifier:
keyid:6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/rE67odVY3FYJB8VvCh4dgKEDRMI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.216.9.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:3c:f4:ee:80:13:89:6e:58:84:0d:a7:6c:39:d7:2a:37:d6:
ad:63:4d:3b:56:58:eb:a5:31:f0:3c:97:12:4d:45:8b:15:28:
cd:ce:0a:10:53:19:d5:bb:b7:5f:d9:21:a5:bc:c6:aa:91:b1:
af:8b:0c:e5:23:3c:95:56:69:8b:2a:11:46:4b:2d:0c:9a:f5:
60:3a:31:42:3f:3c:5d:20:d0:47:58:ec:a0:78:df:14:9d:ce:
20:15:5d:bc:75:b3:a1:82:c5:e4:20:a8:4d:77:89:07:d1:88:
d2:6a:66:03:24:f0:ac:19:19:0f:00:e3:34:79:bc:5a:b5:65:
80:0c:31:89:14:22:3f:51:3e:c5:c2:1b:15:19:f2:40:66:07:
35:d7:73:7e:0c:77:de:cf:28:bc:dd:27:ca:44:23:55:13:e8:
90:25:56:0c:02:ce:40:9f:4e:90:22:8f:5f:be:12:35:3b:ff:
8c:27:33:29:ad:2f:df:63:28:ad:ba:55:89:b6:3a:5d:29:f1:
d0:59:b3:c2:9b:11:8a:6e:48:93:89:9b:9a:e1:c7:a3:0c:64:
cd:c3:72:7f:6f:b8:22:4a:45:c8:a5:4f:0f:27:d3:d9:b3:cb:
93:82:b4:09:12:c9:c5:4b:a8:cf:9d:20:aa:d0:7a:62:68:29:
9e:2a:f1:d0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaFiV8xfUTeMkTiP7SiuXCDGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmNWUwMjMwYmU3OTllNDQ4MjljODcyMGNhMzgzNDcwNDU0
OTRlMjAwHhcNMjYxMDIyMDY0MTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYzRlYmJhMWQ1NThkYzU2MDkwN2M1NmYwYTFlMWQ4MGExMDM0NGMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+YVEBaJs93CfG5N7S6OOzgrjElV
SVLzdl6caeJRfNWdjfwm9AVyE8B29Jq2TuEYlKh1iQW1Pr7hZ6+jWLzxBU1QmooW
V6fqA/M9yasC6J+gifPxQDINbOuCIsLFMumVwZCmxZU/vGC4TrmLBi52i7qRGNvi
OpjtH9QvkMK7I8/edeoasI7KGN5N31sGxA0wRfHkAsjjLSbkgvK97236bCT3dh2v
+/XDi7z6NgI9ai4rMc4xkSXZ4kDmE25ChnBcQEfaRX2u3Q5NA225gP+74IJmjIZc
Jv5QRzsCE8AQfLEsFRjLUH+PdUVUYa+m4ZyXpRI86cvSuLpiAqZ6+1mVMQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKxOu6HVWNxWCQfFbwoeHYChA0TCMB8GA1UdIwQY
MBaAFG9eAjC+eZ5EgpyHIMo4NHBFSU4gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjE0Q01MNTVua1NDbkljZ3lqZzBjRVZKVGlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny83MGNjZWYtMTdmMy00OTI4LTljMGIt
YmE3YzdkODE5MGNhLzEvckU2N29kVlkzRllKQjhWdkNoNGRnS0VEUk1JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny83MGNjZWYtMTdmMy00OTI4LTljMGItYmE3YzdkODE5MGNh
LzEvYjE0Q01MNTVua1NDbkljZ3lqZzBjRVZKVGlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATdgJMA0G
CSqGSIb3DQEBCwUAA4IBAQCcPPTugBOJbliEDadsOdcqN9atY007VljrpTHwPJcS
TUWLFSjNzgoQUxnVu7df2SGlvMaqkbGviwzlIzyVVmmLKhFGSy0MmvVgOjFCPzxd
INBHWOygeN8Unc4gFV28dbOhgsXkIKhNd4kH0YjSamYDJPCsGRkPAOM0ebxatWWA
DDGJFCI/UT7FwhsVGfJAZgc113N+DHfezyi83SfKRCNVE+iQJVYMAs5An06QIo9f
vhI1O/+MJzMprS/fYyitulWJtjpdKfHQWbPCmxGKbkiTiZua4cejDGTNw3J/b7gi
SkXIpU8PJ9PZs8uTgrQJEsnFS6jPnSCq0HpiaCmeKvHQ
-----END CERTIFICATE-----
Generated at Sun Nov 15 14:50:32 2026 by rpki-client