Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/1-SrNkJ_64slvcxIYCtIWwr_ziZo.roa
File: 1-SrNkJ_64slvcxIYCtIWwr_ziZo.roa (raw, json)
Hash identifier: wC11btMg48oJqpnE5kIKjSpODZBVHk6fn773tx9e1RU=
Subject key identifier: F9:2A:CD:90:9F:FA:E2:C9:6F:73:12:18:0A:D2:16:C2:BF:F3:89:9A
Certificate issuer: /CN=f19d396e5ad5b728ce96cfbcef75f58f50e61007
Certificate serial: 019F2368E4876C707586CFADD113C7E69D1C
Authority key identifier: F1:9D:39:6E:5A:D5:B7:28:CE:96:CF:BC:EF:75:F5:8F:50:E6:10:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Z05blrVtyjOls-873X1j1DmEAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/1-SrNkJ_64slvcxIYCtIWwr_ziZo.roa
Signing time: Thu 02 Jul 2026 15:18:24 +0000
ROA not before: Thu 02 Jul 2026 15:18:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12849
IP address blocks: 77.137.0.0/17 maxlen: 24
77.137.128.0/18 maxlen: 24
77.137.192.0/22 maxlen: 24
77.138.0.0/15 maxlen: 24
89.237.64.0/18 maxlen: 24
194.242.160.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/8Z05blrVtyjOls-873X1j1DmEAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/8Z05blrVtyjOls-873X1j1DmEAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Z05blrVtyjOls-873X1j1DmEAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:e4:87:6c:70:75:86:cf:ad:d1:13:c7:e6:9d:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f19d396e5ad5b728ce96cfbcef75f58f50e61007
Validity
Not Before: Jul 2 15:18:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f92acd909ffae2c96f7312180ad216c2bff3899a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:26:bf:a8:e6:ba:cf:09:df:28:06:ef:0b:60:
1a:56:cf:5d:53:d5:ac:83:81:52:88:51:50:ed:23:
41:61:54:65:6c:fb:87:df:a2:a9:6e:ad:64:34:38:
bf:04:3c:95:ec:48:3e:16:0e:dd:00:e8:2f:4d:1c:
09:14:62:24:72:13:b7:04:74:07:0c:20:96:9b:64:
ef:65:f6:ae:48:04:36:0f:2b:ca:07:8c:27:c4:d3:
96:5b:3c:e5:0d:35:79:a4:c6:58:eb:54:ce:44:8f:
95:ef:55:ce:1b:25:c1:6c:3f:84:57:84:ab:71:fd:
87:4d:d5:77:9c:ff:76:79:bd:a7:23:5e:2c:b5:c9:
47:52:15:c1:37:3d:3c:4a:f4:09:66:3f:ae:be:4d:
31:c5:52:3c:30:57:37:33:b9:1f:e2:9f:57:26:8e:
61:86:80:ce:f7:7b:77:9c:e1:91:86:f2:37:7b:e7:
83:91:3b:21:7b:10:02:3e:d7:d1:07:11:8a:fb:75:
4f:9f:f1:fc:8d:78:40:fd:c4:da:d6:ee:15:2d:8f:
d8:ed:f8:80:85:b8:6f:2a:0e:03:00:e2:79:ff:e1:
bb:9e:c1:a0:d7:6b:05:f5:51:e5:3e:29:dc:b1:ef:
06:e7:e9:f7:95:8e:bf:33:4e:b3:92:e8:45:05:af:
69:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:2A:CD:90:9F:FA:E2:C9:6F:73:12:18:0A:D2:16:C2:BF:F3:89:9A
X509v3 Authority Key Identifier:
keyid:F1:9D:39:6E:5A:D5:B7:28:CE:96:CF:BC:EF:75:F5:8F:50:E6:10:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Z05blrVtyjOls-873X1j1DmEAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/1-SrNkJ_64slvcxIYCtIWwr_ziZo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/8Z05blrVtyjOls-873X1j1DmEAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.137.0.0-77.137.195.255
77.138.0.0/15
89.237.64.0/18
194.242.160.0/20
Signature Algorithm: sha256WithRSAEncryption
0d:0d:cc:8f:25:66:18:08:b5:07:c2:a7:07:69:5a:a0:16:50:
a2:46:01:7c:e8:bb:8a:59:69:68:b7:d5:3a:fd:a1:0a:c2:a5:
cc:82:09:87:6e:6a:a3:69:d4:1c:5c:1b:f2:c6:84:0f:63:02:
63:62:58:7d:c7:33:a1:7b:02:6a:59:0e:76:8b:72:ac:a9:bb:
6d:4d:18:d2:92:28:d5:b6:bc:72:2d:19:5d:d0:fe:ed:a6:38:
99:f1:d0:96:08:ce:a6:9f:74:36:7c:db:2d:94:0b:de:8c:00:
20:97:e6:53:72:f2:9c:59:1f:22:a7:1d:7c:11:fa:bf:5b:ee:
5c:2f:f7:93:9b:e6:86:f5:ab:2c:4d:18:8f:19:ae:db:c5:33:
dc:99:21:96:c2:39:43:7d:b2:1e:94:6e:42:04:d9:f7:ba:bd:
ae:73:44:a0:a6:da:7a:36:a2:d1:47:b8:49:af:ac:91:e8:61:
b4:1c:21:f9:01:23:86:82:5e:be:f3:f8:f3:25:28:5c:f6:8f:
e0:5d:0c:48:62:d0:9e:ce:0c:c3:7e:e5:44:4e:a5:6e:be:a8:
8b:5e:9e:59:93:ee:04:74:ed:63:e1:c5:74:4a:c0:30:ed:03:
d8:91:01:96:f5:c1:b4:a2:4a:98:cf:0a:71:fb:e0:fd:66:8d:
84:fa:15:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8jaOSHbHB1hs+t0RPH5p0cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxOWQzOTZlNWFkNWI3MjhjZTk2Y2ZiY2VmNzVmNThmNTBl
NjEwMDcwHhcNMjYwNzAyMTUxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOTJhY2Q5MDlmZmFlMmM5NmY3MzEyMTgwYWQyMTZjMmJmZjM4OTlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxya/qOa6zwnfKAbvC2AaVs9dU9Ws
g4FSiFFQ7SNBYVRlbPuH36Kpbq1kNDi/BDyV7Eg+Fg7dAOgvTRwJFGIkchO3BHQH
DCCWm2TvZfauSAQ2DyvKB4wnxNOWWzzlDTV5pMZY61TORI+V71XOGyXBbD+EV4Sr
cf2HTdV3nP92eb2nI14stclHUhXBNz08SvQJZj+uvk0xxVI8MFc3M7kf4p9XJo5h
hoDO93t3nOGRhvI3e+eDkTshexACPtfRBxGK+3VPn/H8jXhA/cTa1u4VLY/Y7fiA
hbhvKg4DAOJ5/+G7nsGg12sF9VHlPincse8G5+n3lY6/M06zkuhFBa9p2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPkqzZCf+uLJb3MSGArSFsK/84maMB8GA1UdIwQY
MBaAFPGdOW5a1bcozpbPvO919Y9Q5hAHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFowNWJsclZ0eWpPbHMtODczWDFqMURtRUFjLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9mZTkxNWMtYmY3MC00NjAyLThhM2Mt
MDI5MmIwMjAxNTBhLzEvMS1Tck5rSl82NHNsdmN4SVlDdElXd3Jfemlaby5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNzIvZmU5MTVjLWJmNzAtNDYwMi04YTNjLTAyOTJiMDIwMTUw
YS8xLzhaMDVibHJWdHlqT2xzLTg3M1gxajFEbUVBYy5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjA3BggrBgEFBQcBBwEB/wQoMCYwJAQCAAEwHjALAwMATYkD
BAJNicADAwFNigMEBlntQAMEBMLyoDANBgkqhkiG9w0BAQsFAAOCAQEADQ3MjyVm
GAi1B8KnB2laoBZQokYBfOi7illpaLfVOv2hCsKlzIIJh25qo2nUHFwb8saED2MC
Y2JYfcczoXsCalkOdotyrKm7bU0Y0pIo1ba8ci0ZXdD+7aY4mfHQlgjOpp90Nnzb
LZQL3owAIJfmU3LynFkfIqcdfBH6v1vuXC/3k5vmhvWrLE0Yjxmu28Uz3JkhlsI5
Q32yHpRuQgTZ97q9rnNEoKbaejai0Ue4Sa+skehhtBwh+QEjhoJevvP48yUoXPaP
4F0MSGLQns4Mw37lRE6lbr6oi16eWZPuBHTtY+HFdErAMO0D2JEBlvXBtKJKmM8K
cfvg/WaNhPoV9w==
-----END CERTIFICATE-----
Generated at Tue Jul 21 20:58:32 2026 by rpki-client