Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/iC6Uza-NHrGKqMhykESnQekh6lg.roa
File: iC6Uza-NHrGKqMhykESnQekh6lg.roa (raw, json)
Hash identifier: IPs4PI6W9K7bfe+8Mlawt5IFCK1JJ0x1m8QfffrK3VM=
Subject key identifier: 88:2E:94:CD:AF:8D:1E:B1:8A:A8:C8:72:90:44:A7:41:E9:21:EA:58
Certificate issuer: /CN=f19d396e5ad5b728ce96cfbcef75f58f50e61007
Certificate serial: 019F2368F22F941AF6FAD618C445288DDCCD
Authority key identifier: F1:9D:39:6E:5A:D5:B7:28:CE:96:CF:BC:EF:75:F5:8F:50:E6:10:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Z05blrVtyjOls-873X1j1DmEAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/iC6Uza-NHrGKqMhykESnQekh6lg.roa
Signing time: Thu 02 Jul 2026 15:18:27 +0000
ROA not before: Thu 02 Jul 2026 15:18:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50588
IP address blocks: 77.158.88.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/8Z05blrVtyjOls-873X1j1DmEAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/8Z05blrVtyjOls-873X1j1DmEAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Z05blrVtyjOls-873X1j1DmEAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:f2:2f:94:1a:f6:fa:d6:18:c4:45:28:8d:dc:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f19d396e5ad5b728ce96cfbcef75f58f50e61007
Validity
Not Before: Jul 2 15:18:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=882e94cdaf8d1eb18aa8c8729044a741e921ea58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3b:86:dd:92:15:99:2d:cc:1b:19:13:41:5b:
29:d3:df:01:d2:4f:94:79:d2:8f:a3:0f:77:0a:80:
2e:b4:65:54:cb:a6:61:af:ca:bf:37:bd:6d:be:70:
5a:bd:d5:8e:78:12:40:12:a5:8e:66:90:83:2f:0f:
82:78:83:8f:58:71:80:24:1b:50:0d:ab:0d:7a:a8:
4c:59:92:32:57:00:d7:ed:e2:79:43:c5:f5:a2:14:
30:83:3b:6f:16:49:d7:72:8f:3b:28:8a:f1:c5:2e:
01:3c:42:19:9e:b6:d9:fc:e6:9f:55:4c:3e:d6:7c:
ef:c2:41:04:dd:0a:1e:95:f1:a1:f2:6c:98:74:fe:
0c:fc:a8:47:ba:c7:10:4c:dc:c1:de:82:56:8e:32:
85:32:2b:ca:b9:97:2a:20:8a:f1:c9:c0:81:be:e0:
dd:bf:2e:fd:2b:10:9f:f8:2d:bb:84:97:11:d3:d0:
25:f5:a3:35:17:67:fe:67:ff:c4:b4:a0:4d:aa:9b:
ac:29:eb:f2:7c:0c:24:ba:d0:28:f4:0d:9b:71:57:
9f:db:c9:7a:c0:95:2b:96:1f:a3:7b:07:3d:0f:dd:
d9:15:9c:1a:a0:56:b6:1c:25:0f:08:c2:b6:02:a0:
3a:11:77:7a:e7:c2:1e:26:39:55:93:7d:6b:1d:0a:
e4:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:2E:94:CD:AF:8D:1E:B1:8A:A8:C8:72:90:44:A7:41:E9:21:EA:58
X509v3 Authority Key Identifier:
keyid:F1:9D:39:6E:5A:D5:B7:28:CE:96:CF:BC:EF:75:F5:8F:50:E6:10:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Z05blrVtyjOls-873X1j1DmEAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/iC6Uza-NHrGKqMhykESnQekh6lg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/8Z05blrVtyjOls-873X1j1DmEAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.158.88.0/23
Signature Algorithm: sha256WithRSAEncryption
36:40:2b:a2:51:7a:30:c8:16:c3:59:5c:b1:2a:22:92:88:53:
0a:e0:17:5f:33:72:e6:45:f5:f5:30:f3:e3:b9:04:1d:83:e0:
e8:62:df:12:81:2f:97:13:b5:4a:d7:d1:bf:06:2b:d7:17:74:
98:93:20:76:d3:8d:aa:90:4b:08:2c:49:9d:b4:25:96:4d:01:
d5:51:8f:fb:bd:0e:6c:5d:4f:78:d5:91:08:44:49:1d:19:ca:
62:83:46:62:ab:75:71:82:e4:39:7b:4f:b4:b7:b9:77:33:b1:
7e:b0:94:38:e7:72:48:8a:1a:4d:0d:00:77:2b:ee:e2:71:e3:
fe:8b:be:36:b4:bd:3f:14:de:98:40:5f:e8:87:23:6d:89:54:
ae:5a:07:b0:e3:87:09:9d:95:47:be:8d:29:74:09:b2:70:8a:
fa:c7:ce:33:b3:b5:3c:94:71:c0:39:0a:d5:58:be:8d:0c:9f:
36:aa:47:3b:71:36:fb:a6:8e:27:ad:89:ca:de:07:16:8c:a1:
cd:1d:e7:c1:bf:a8:16:0d:3f:9f:79:48:35:5b:9b:a7:98:df:
8e:16:84:b2:9b:6e:02:8c:c4:ff:b4:d2:ee:79:b9:85:91:63:
5c:9a:cd:15:8b:eb:7e:87:e3:72:b5:b9:be:dc:56:da:90:c7:
21:23:42:06
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaPIvlBr2+tYYxEUojdzNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxOWQzOTZlNWFkNWI3MjhjZTk2Y2ZiY2VmNzVmNThmNTBl
NjEwMDcwHhcNMjYwNzAyMTUxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ODJlOTRjZGFmOGQxZWIxOGFhOGM4NzI5MDQ0YTc0MWU5MjFlYTU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTuG3ZIVmS3MGxkTQVsp098B0k+U
edKPow93CoAutGVUy6Zhr8q/N71tvnBavdWOeBJAEqWOZpCDLw+CeIOPWHGAJBtQ
DasNeqhMWZIyVwDX7eJ5Q8X1ohQwgztvFknXco87KIrxxS4BPEIZnrbZ/OafVUw+
1nzvwkEE3QoelfGh8myYdP4M/KhHuscQTNzB3oJWjjKFMivKuZcqIIrxycCBvuDd
vy79KxCf+C27hJcR09Al9aM1F2f+Z//EtKBNqpusKevyfAwkutAo9A2bcVef28l6
wJUrlh+jewc9D93ZFZwaoFa2HCUPCMK2AqA6EXd658IeJjlVk31rHQrkIQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIgulM2vjR6xiqjIcpBEp0HpIepYMB8GA1UdIwQY
MBaAFPGdOW5a1bcozpbPvO919Y9Q5hAHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFowNWJsclZ0eWpPbHMtODczWDFqMURtRUFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9mZTkxNWMtYmY3MC00NjAyLThhM2Mt
MDI5MmIwMjAxNTBhLzEvaUM2VXphLU5IckdLcU1oeWtFU25RZWtoNmxnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi9mZTkxNWMtYmY3MC00NjAyLThhM2MtMDI5MmIwMjAxNTBh
LzEvOFowNWJsclZ0eWpPbHMtODczWDFqMURtRUFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTZ5YMA0G
CSqGSIb3DQEBCwUAA4IBAQA2QCuiUXowyBbDWVyxKiKSiFMK4BdfM3LmRfX1MPPj
uQQdg+DoYt8SgS+XE7VK19G/BivXF3SYkyB2042qkEsILEmdtCWWTQHVUY/7vQ5s
XU941ZEIREkdGcpig0Ziq3VxguQ5e0+0t7l3M7F+sJQ453JIihpNDQB3K+7iceP+
i742tL0/FN6YQF/ohyNtiVSuWgew44cJnZVHvo0pdAmycIr6x84zs7U8lHHAOQrV
WL6NDJ82qkc7cTb7po4nrYnK3gcWjKHNHefBv6gWDT+feUg1W5unmN+OFoSym24C
jMT/tNLuebmFkWNcms0Vi+t+h+Nytbm+3FbakMchI0IG
-----END CERTIFICATE-----
Generated at Tue Jul 21 20:58:49 2026 by rpki-client