Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/cH1U0akjXxWwjePysfs1KMEhgnM.roa
File: cH1U0akjXxWwjePysfs1KMEhgnM.roa (raw, json)
Hash identifier: c/aVQw4vYLSrm6+5KMS/RqtZdacZ4uxH0y7aXje0vQY=
Subject key identifier: 70:7D:54:D1:A9:23:5F:15:B0:8D:E3:F2:B1:FB:35:28:C1:21:82:73
Certificate issuer: /CN=1b2c219f3c297b775880c3b651a2003f9be6de5e
Certificate serial: 019FF5B5F85890C27B2B74F9F9BA722B3CE8
Authority key identifier: 1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/cH1U0akjXxWwjePysfs1KMEhgnM.roa
Signing time: Wed 12 Aug 2026 11:22:51 +0000
ROA not before: Wed 12 Aug 2026 11:22:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213915
IP address blocks: 77.221.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 21:04:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f5:b5:f8:58:90:c2:7b:2b:74:f9:f9:ba:72:2b:3c:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b2c219f3c297b775880c3b651a2003f9be6de5e
Validity
Not Before: Aug 12 11:22:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=707d54d1a9235f15b08de3f2b1fb3528c1218273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:20:bc:1a:01:c1:c8:c2:4a:cb:f8:d4:c9:0c:
ea:88:92:87:e4:f4:90:ac:c5:01:2d:47:80:2f:3e:
4e:24:99:4e:ee:ba:03:ce:d2:12:87:72:4f:25:00:
98:25:0c:25:68:52:b0:ce:8e:75:c3:75:3c:c1:8c:
33:07:f2:7c:73:c2:10:d6:a9:0a:8e:5a:77:72:6f:
c7:13:d8:e2:d4:66:e5:96:0d:2c:39:f9:fb:9b:b3:
9f:91:f3:56:fe:f2:6d:c8:70:76:61:76:8e:c2:67:
bf:16:7f:c3:eb:36:66:69:a5:e2:da:13:92:20:11:
c8:0b:32:aa:7c:c3:bb:2e:6d:70:25:0c:a8:21:b4:
85:e0:9f:cf:ba:a7:3b:be:f0:95:c1:2f:96:46:e3:
a8:ab:b6:c8:fb:43:07:98:75:50:53:a4:50:fd:7c:
0e:b1:e3:7d:8a:40:66:47:a4:7d:d3:92:95:79:60:
b0:ef:ae:62:2c:94:21:32:55:7a:fd:e6:3f:00:02:
80:fe:25:cf:04:6e:72:d5:28:fa:ab:da:4a:57:ab:
5c:ca:c2:87:5a:b4:79:e2:8e:d3:e3:89:f1:28:b7:
6b:a8:41:b3:95:df:33:d7:c6:2e:6c:04:1d:fb:c5:
a6:01:6d:bc:69:e4:9d:9c:c9:b3:f6:e1:f2:e2:e1:
63:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:7D:54:D1:A9:23:5F:15:B0:8D:E3:F2:B1:FB:35:28:C1:21:82:73
X509v3 Authority Key Identifier:
keyid:1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/cH1U0akjXxWwjePysfs1KMEhgnM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.221.146.0/24
Signature Algorithm: sha256WithRSAEncryption
73:af:e2:a5:7b:f6:d2:0a:f7:be:04:72:45:fe:81:50:a9:bf:
09:03:92:34:7a:85:c4:e7:aa:a8:8e:99:29:65:57:35:de:09:
0e:95:ae:d8:de:0f:76:56:ad:3d:b0:44:a0:f9:38:9e:2e:62:
8f:49:e0:02:f1:4b:5c:36:0e:5b:db:4b:ba:d7:4b:5b:0d:0e:
72:0c:83:ac:df:dd:b6:96:cb:3d:ad:23:2d:44:dd:bc:4d:af:
58:e7:d1:40:87:fe:f9:f8:5f:f8:58:10:02:9b:08:f2:ad:41:
d4:c9:4f:9c:91:90:91:df:5a:6c:9d:82:14:72:ed:cf:50:e2:
52:db:84:df:7c:75:b9:d8:1f:f5:22:58:d8:a8:ff:70:8e:a0:
91:27:42:a5:0d:96:a5:fb:f7:81:d3:78:9a:46:f6:c2:ce:6e:
ed:7f:10:28:8d:db:15:f2:04:0e:1e:72:61:bb:05:3d:72:cb:
83:de:c9:86:1b:c1:f5:19:ab:0f:81:6a:8d:fc:25:ce:79:b8:
a8:1b:04:55:d8:c3:b3:f6:3a:42:7d:43:ff:c6:fc:82:4b:8f:
a4:9f:a5:a7:db:fa:dd:89:9d:48:89:0f:e3:02:28:2f:36:bf:
69:14:75:61:36:54:fe:17:22:c7:79:b7:10:6a:e9:c7:c7:58:
13:fa:fd:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 05:16:32 2026 by rpki-client