Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/yQudwm_1B1Rb0raxiSznli8z5eA.roa
File: yQudwm_1B1Rb0raxiSznli8z5eA.roa (raw, json)
Hash identifier: hP41DAGYUjAntZOmp95Ru1B3qbs86jRqP1JwGjTF/Ds=
Subject key identifier: C9:0B:9D:C2:6F:F5:07:54:5B:D2:B6:B1:89:2C:E7:96:2F:33:E5:E0
Certificate issuer: /CN=f19d396e5ad5b728ce96cfbcef75f58f50e61007
Certificate serial: 019F2368E702772DD4B36AF36BC77FB270E9
Authority key identifier: F1:9D:39:6E:5A:D5:B7:28:CE:96:CF:BC:EF:75:F5:8F:50:E6:10:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Z05blrVtyjOls-873X1j1DmEAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/yQudwm_1B1Rb0raxiSznli8z5eA.roa
Signing time: Thu 02 Jul 2026 15:18:25 +0000
ROA not before: Thu 02 Jul 2026 15:18:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21502
IP address blocks: 77.128.0.0/13 maxlen: 24
77.136.0.0/16 maxlen: 24
77.140.0.0/15 maxlen: 24
77.142.0.0/16 maxlen: 24
77.144.0.0/12 maxlen: 24
77.192.0.0/12 maxlen: 24
78.112.0.0/12 maxlen: 24
79.80.0.0/12 maxlen: 24
81.64.0.0/14 maxlen: 24
81.185.0.0/16 maxlen: 24
84.4.0.0/14 maxlen: 24
85.168.0.0/14 maxlen: 24
87.231.0.0/16 maxlen: 24
88.140.0.0/15 maxlen: 24
89.2.0.0/15 maxlen: 24
89.156.0.0/14 maxlen: 24
89.157.88.0/21 maxlen: 21
89.157.96.0/19 maxlen: 19
92.88.0.0/13 maxlen: 24
93.0.0.0/11 maxlen: 24
109.0.0.0/11 maxlen: 24
195.132.0.0/16 maxlen: 24
213.223.0.0/16 maxlen: 24
213.245.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/8Z05blrVtyjOls-873X1j1DmEAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/8Z05blrVtyjOls-873X1j1DmEAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Z05blrVtyjOls-873X1j1DmEAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:e7:02:77:2d:d4:b3:6a:f3:6b:c7:7f:b2:70:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f19d396e5ad5b728ce96cfbcef75f58f50e61007
Validity
Not Before: Jul 2 15:18:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c90b9dc26ff507545bd2b6b1892ce7962f33e5e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ba:0c:f7:68:a7:b1:fe:b2:f9:36:92:0c:02:
10:df:38:40:a6:95:e1:e2:9f:a1:64:2e:3e:eb:71:
75:79:4e:74:45:0f:c6:05:82:f7:76:56:ec:98:a0:
8e:7a:42:46:1a:14:f4:92:66:3f:11:f4:2d:39:49:
2f:65:8a:d5:4b:e8:ef:4a:64:27:9e:db:19:50:27:
b9:14:83:59:86:4b:5d:05:1b:de:ca:e1:de:d2:f5:
72:0d:f2:44:bf:a1:82:f1:43:ac:fc:b4:50:76:f3:
e7:59:ce:d1:3d:0a:58:62:d9:ea:f6:73:bd:8b:b8:
d5:d4:c0:f9:6b:1d:94:da:93:0d:15:a1:23:e5:b4:
4f:fb:ad:e4:2a:d9:85:85:55:4d:cc:27:8a:7c:e0:
34:62:da:93:6c:07:47:54:10:7c:fc:be:88:92:d0:
b1:ee:ff:0c:04:2e:62:c3:b9:9b:2f:f2:be:6f:7b:
44:e7:72:97:40:59:0f:09:35:2f:68:7b:ce:02:64:
fe:88:14:6a:66:56:d5:38:9e:5f:aa:18:95:f9:dd:
6e:7b:8b:1d:31:52:0f:40:e2:89:3f:c5:7f:d1:c5:
b8:73:f0:13:99:09:50:f2:be:d2:da:d9:db:80:30:
7d:6f:53:b0:bb:f6:24:66:60:53:46:60:27:25:0f:
01:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:0B:9D:C2:6F:F5:07:54:5B:D2:B6:B1:89:2C:E7:96:2F:33:E5:E0
X509v3 Authority Key Identifier:
keyid:F1:9D:39:6E:5A:D5:B7:28:CE:96:CF:BC:EF:75:F5:8F:50:E6:10:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Z05blrVtyjOls-873X1j1DmEAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/yQudwm_1B1Rb0raxiSznli8z5eA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/8Z05blrVtyjOls-873X1j1DmEAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.128.0.0-77.136.255.255
77.140.0.0-77.142.255.255
77.144.0.0/12
77.192.0.0/12
78.112.0.0/12
79.80.0.0/12
81.64.0.0/14
81.185.0.0/16
84.4.0.0/14
85.168.0.0/14
87.231.0.0/16
88.140.0.0/15
89.2.0.0/15
89.156.0.0/14
92.88.0.0/13
93.0.0.0/11
109.0.0.0/11
195.132.0.0/16
213.223.0.0/16
213.245.0.0/16
Signature Algorithm: sha256WithRSAEncryption
40:4a:2f:35:5d:cd:53:08:f7:ab:16:2f:a1:bf:92:64:3d:8e:
07:5f:0e:ae:35:3e:f6:1b:31:fd:b2:df:3c:69:e1:f7:23:3b:
57:d3:0f:1e:5c:0c:37:62:7e:34:26:75:d8:09:ae:f8:e2:24:
f2:c8:ad:1e:8d:67:21:08:1e:da:43:75:58:cf:dc:45:e1:ce:
dd:f7:90:c0:18:25:b5:df:95:1d:dc:74:71:ae:ce:10:54:0d:
4f:38:aa:bc:15:61:97:34:32:88:34:fb:08:d0:7c:96:c1:60:
ac:e6:82:ba:43:8e:07:0c:5e:b5:d1:63:e8:e8:76:b3:9e:ae:
3a:59:99:5c:75:f0:da:d0:0d:3c:c1:10:56:4b:94:2d:5d:c7:
7c:d8:c4:72:40:20:14:87:52:00:c0:ee:c5:76:b2:a7:0c:df:
03:af:28:eb:bb:07:b6:01:20:28:de:d7:db:0d:35:62:4b:81:
b8:7f:56:45:93:fe:b0:e8:30:8c:b0:95:63:8d:54:59:94:c6:
e3:5a:c5:d8:74:95:2f:52:52:14:cf:a8:35:e6:4c:08:81:49:
6e:ca:0e:24:3c:ae:2a:65:46:35:6b:8c:20:ca:c9:1d:ee:1f:
33:ff:9b:12:bd:ad:4d:b9:e7:98:e4:11:58:11:ac:18:bb:33:
91:be:59:34
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Jul 21 20:57:07 2026 by rpki-client