Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/9UtT5GcWwC7TWfNnh2me3mLPlFI.roa
File: 9UtT5GcWwC7TWfNnh2me3mLPlFI.roa (raw, json)
Hash identifier: qgqqfceXIM+BVgfwFTl9tcLAUFjeXoDcWcGGai98SQM=
Subject key identifier: F5:4B:53:E4:67:16:C0:2E:D3:59:F3:67:87:69:9E:DE:62:CF:94:52
Certificate issuer: /CN=1b2c219f3c297b775880c3b651a2003f9be6de5e
Certificate serial: 01A0F3D5A48B54FF7E89BE04790C918E2B24
Authority key identifier: 1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/9UtT5GcWwC7TWfNnh2me3mLPlFI.roa
Signing time: Wed 30 Sep 2026 19:40:59 +0000
ROA not before: Wed 30 Sep 2026 19:40:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203273
IP address blocks: 77.221.149.0/24 maxlen: 24
77.221.150.0/24 maxlen: 24
92.243.74.0/24 maxlen: 24
92.243.75.0/24 maxlen: 24
109.120.128.0/24 maxlen: 24
109.120.129.0/24 maxlen: 24
109.120.130.0/24 maxlen: 24
109.120.131.0/24 maxlen: 24
109.120.146.0/24 maxlen: 24
109.120.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 08:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f3:d5:a4:8b:54:ff:7e:89:be:04:79:0c:91:8e:2b:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b2c219f3c297b775880c3b651a2003f9be6de5e
Validity
Not Before: Sep 30 19:40:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f54b53e46716c02ed359f36787699ede62cf9452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e4:fa:e2:55:f5:83:1f:dd:33:43:9a:26:47:
24:79:24:5b:5b:29:da:97:10:c1:10:7a:c1:d6:b8:
30:3b:c9:d5:b3:ab:3c:1e:7c:d5:8a:a3:e4:bb:90:
44:f4:61:2b:e2:6a:1f:68:e1:99:df:da:92:16:e1:
f6:6a:e6:ba:69:78:17:de:93:da:be:22:20:1c:77:
a0:f1:a2:c2:42:e9:48:3b:99:b5:9d:cc:3f:d2:c1:
05:e4:03:00:16:71:23:eb:0e:fe:71:b7:a6:a2:54:
01:1a:de:e7:24:ba:68:0c:18:db:0e:ba:1f:53:57:
4b:40:c8:8d:04:2f:66:4c:6a:bc:0d:39:5f:f5:30:
5f:00:9d:15:cf:2e:e1:ea:ef:31:91:17:5b:87:02:
32:6a:79:dc:ce:4b:b1:4a:ab:b6:7d:df:02:61:be:
d4:92:33:c0:35:bf:80:a0:3b:bf:95:2f:40:23:59:
ea:e7:88:15:2f:11:7d:fa:be:37:40:f8:2e:e6:20:
7a:a5:19:8b:c9:5f:29:a7:c3:b7:55:aa:00:b8:76:
42:8e:31:87:c2:e5:e8:54:01:0d:ac:9d:52:8b:d2:
72:2f:cf:9c:f2:2d:a8:e0:17:fe:0d:d4:21:b1:4e:
d8:c5:57:d2:e7:cf:b8:ae:6c:19:19:55:d7:c0:f7:
15:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:4B:53:E4:67:16:C0:2E:D3:59:F3:67:87:69:9E:DE:62:CF:94:52
X509v3 Authority Key Identifier:
keyid:1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/9UtT5GcWwC7TWfNnh2me3mLPlFI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.221.149.0-77.221.150.255
92.243.74.0/23
109.120.128.0/22
109.120.146.0/23
Signature Algorithm: sha256WithRSAEncryption
02:45:6f:ac:02:3d:01:7e:c6:54:5f:45:5c:7b:85:86:d0:8a:
16:70:96:3a:04:8a:cd:1e:9c:b9:01:d7:4d:39:cf:7b:82:8f:
d7:0c:1e:a6:92:61:e0:e9:88:88:43:70:0d:bb:2a:e6:3b:0b:
c9:83:89:d6:d1:c4:e8:52:16:8a:79:7e:0f:dc:11:7a:b8:53:
a1:a3:32:d5:93:65:9a:69:72:bb:05:c0:ef:10:a4:42:69:b3:
b1:22:fd:c6:c3:06:ab:c0:b0:f5:51:7b:ea:92:e5:37:c7:69:
ce:37:87:fc:f1:92:59:d0:b2:00:94:bf:13:90:9d:33:3d:5a:
18:44:2a:e4:67:94:df:f5:ac:09:39:0b:9a:45:f6:86:56:27:
c1:3c:ac:f3:b0:d5:d6:27:5c:2b:91:b9:ca:b2:71:c4:25:dd:
34:14:f6:c5:91:c0:e4:e5:90:58:a8:71:5c:ae:60:fb:34:92:
d1:b1:08:6a:fc:02:e3:2e:ce:32:ca:a4:65:40:54:7f:ae:80:
cf:80:c7:49:b1:1e:34:bc:43:00:08:7c:be:a2:5a:86:01:e1:
e1:97:89:2a:f5:ac:c6:a0:69:a7:65:1f:3c:0f:c2:31:5e:31:
6f:f4:dd:3d:1a:b0:fa:ae:6a:b3:1d:fc:f4:1d:2d:17:87:20:
88:cf:48:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 15:12:46 2026 by rpki-client