Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/vx3qdX2Wmom1QJZKJCpntQx84V4.roa
File: vx3qdX2Wmom1QJZKJCpntQx84V4.roa (raw, json)
Hash identifier: QVR03/6AQhx8vpkU1C5AjExoh/5DAFONLLCPlXk/A94=
Subject key identifier: BF:1D:EA:75:7D:96:9A:89:B5:40:96:4A:24:2A:67:B5:0C:7C:E1:5E
Certificate issuer: /CN=6f5e0230be799e44829c8720ca38347045494e20
Certificate serial: 01A177140FF62923BE8DA4826C9676F80EC6
Authority key identifier: 6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/vx3qdX2Wmom1QJZKJCpntQx84V4.roa
Signing time: Mon 26 Oct 2026 07:19:25 +0000
ROA not before: Mon 26 Oct 2026 07:19:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152606
IP address blocks: 77.216.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 05:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:77:14:0f:f6:29:23:be:8d:a4:82:6c:96:76:f8:0e:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f5e0230be799e44829c8720ca38347045494e20
Validity
Not Before: Oct 26 07:19:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bf1dea757d969a89b540964a242a67b50c7ce15e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:3d:63:6b:1e:eb:5a:70:79:00:ad:e2:41:13:
38:4a:94:30:db:33:f7:dd:c7:05:d0:ba:85:4f:c0:
e0:d1:ee:a2:54:26:ec:97:c1:dc:2e:2a:58:cc:67:
32:77:1c:90:bd:cf:43:9e:30:93:e9:4d:2c:18:e6:
52:d1:e1:89:70:e5:e2:0d:b1:25:d7:52:12:47:76:
4b:78:a5:60:bc:6b:86:4e:a2:56:12:cb:2c:20:23:
82:3c:0b:bc:d3:71:66:a0:30:85:fb:f3:7f:bd:70:
c6:84:a8:54:37:2b:c2:53:79:68:ae:0e:46:34:14:
25:01:26:4e:15:a2:68:e2:70:eb:13:5b:35:12:9b:
74:88:1a:69:7e:1c:27:ae:1e:a2:e1:b2:d4:64:16:
67:be:06:1f:c0:fb:39:07:7a:04:99:8d:a8:bc:2b:
99:a4:55:4b:4c:4b:a6:c6:42:48:3f:7a:86:15:f4:
a1:89:52:80:e2:11:af:46:ab:76:93:66:f6:a6:e7:
5d:1f:0c:26:28:8b:ef:36:a9:e8:b0:7f:5d:5a:39:
87:75:b7:43:7d:02:0e:dd:2e:67:b5:97:9a:e2:90:
1b:11:91:31:9f:8a:31:8a:af:76:40:6a:7c:21:09:
ff:48:67:76:e8:60:a2:4b:77:d2:b3:4b:91:35:0a:
c6:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:1D:EA:75:7D:96:9A:89:B5:40:96:4A:24:2A:67:B5:0C:7C:E1:5E
X509v3 Authority Key Identifier:
keyid:6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/vx3qdX2Wmom1QJZKJCpntQx84V4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.216.30.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:0e:81:8a:d8:0e:53:85:26:6c:61:28:c3:3d:24:ed:f8:76:
4f:a8:27:b7:bb:78:58:ff:1f:46:3c:04:51:5f:2b:12:8d:05:
f9:23:a1:6b:6e:6f:1e:bc:da:ea:06:07:4b:4d:13:47:16:f2:
ea:25:e4:e0:3b:36:05:f0:5c:ac:b9:57:0c:33:b4:7b:c5:dd:
e7:2e:4a:17:91:ff:60:0c:fb:20:c7:99:a0:79:36:6e:a6:2a:
87:2e:1f:17:ac:b1:c8:b7:6f:94:bf:62:34:b0:63:d1:2c:cc:
0a:ca:b4:18:8a:50:72:d9:9b:e6:5e:9c:b5:cd:82:6e:41:49:
ba:a4:bd:8c:52:7b:64:a4:8e:89:56:a3:ca:16:60:0f:9c:a9:
4e:92:0f:7c:6b:8a:73:b5:3e:ea:2f:fa:ad:12:58:75:a3:ef:
b1:48:59:2e:9e:4a:c7:44:d2:fc:af:7e:f5:8c:f2:8e:90:2b:
21:fc:a8:a6:6f:8d:f1:1f:27:49:1e:4b:0e:3d:e1:f2:b2:c0:
38:de:69:1e:88:aa:8a:4f:42:7a:c0:86:59:12:a7:37:d5:1d:
fb:43:f2:b4:6f:62:6b:17:74:fa:fb:f9:01:8c:bc:b9:c5:b9:
76:dd:e4:6f:3c:6f:36:d9:d6:76:09:6e:85:2c:93:17:9c:01:
32:98:06:d1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaF3FA/2KSO+jaSCbJZ2+A7GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmNWUwMjMwYmU3OTllNDQ4MjljODcyMGNhMzgzNDcwNDU0
OTRlMjAwHhcNMjYxMDI2MDcxOTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZjFkZWE3NTdkOTY5YTg5YjU0MDk2NGEyNDJhNjdiNTBjN2NlMTVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0j1jax7rWnB5AK3iQRM4SpQw2zP3
3ccF0LqFT8Dg0e6iVCbsl8HcLipYzGcydxyQvc9DnjCT6U0sGOZS0eGJcOXiDbEl
11ISR3ZLeKVgvGuGTqJWEsssICOCPAu803FmoDCF+/N/vXDGhKhUNyvCU3lorg5G
NBQlASZOFaJo4nDrE1s1Ept0iBppfhwnrh6i4bLUZBZnvgYfwPs5B3oEmY2ovCuZ
pFVLTEumxkJIP3qGFfShiVKA4hGvRqt2k2b2puddHwwmKIvvNqnosH9dWjmHdbdD
fQIO3S5ntZea4pAbEZExn4oxiq92QGp8IQn/SGd26GCiS3fSs0uRNQrGDQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFL8d6nV9lpqJtUCWSiQqZ7UMfOFeMB8GA1UdIwQY
MBaAFG9eAjC+eZ5EgpyHIMo4NHBFSU4gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjE0Q01MNTVua1NDbkljZ3lqZzBjRVZKVGlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny83MGNjZWYtMTdmMy00OTI4LTljMGIt
YmE3YzdkODE5MGNhLzEvdngzcWRYMldtb20xUUpaS0pDcG50UXg4NFY0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny83MGNjZWYtMTdmMy00OTI4LTljMGItYmE3YzdkODE5MGNh
LzEvYjE0Q01MNTVua1NDbkljZ3lqZzBjRVZKVGlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATdgeMA0G
CSqGSIb3DQEBCwUAA4IBAQB8DoGK2A5ThSZsYSjDPSTt+HZPqCe3u3hY/x9GPARR
XysSjQX5I6Frbm8evNrqBgdLTRNHFvLqJeTgOzYF8FysuVcMM7R7xd3nLkoXkf9g
DPsgx5mgeTZupiqHLh8XrLHIt2+Uv2I0sGPRLMwKyrQYilBy2ZvmXpy1zYJuQUm6
pL2MUntkpI6JVqPKFmAPnKlOkg98a4pztT7qL/qtElh1o++xSFkunkrHRNL8r371
jPKOkCsh/Kimb43xHydJHksOPeHyssA43mkeiKqKT0J6wIZZEqc31R37Q/K0b2Jr
F3T6+/kBjLy5xbl23eRvPG822dZ2CW6FLJMXnAEymAbR
-----END CERTIFICATE-----
Generated at Sun Nov 15 14:50:35 2026 by rpki-client