Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/b7xAfQ4mhjQn-3Nh9XnWc4pFZOw.roa
File: b7xAfQ4mhjQn-3Nh9XnWc4pFZOw.roa (raw, json)
Hash identifier: +gLNHxU7JeRgipVbDatiSY0AALu65KEOKRI+sUT4oj4=
Subject key identifier: 6F:BC:40:7D:0E:26:86:34:27:FB:73:61:F5:79:D6:73:8A:45:64:EC
Certificate issuer: /CN=172537601a31697404922d957e74450f5a9cbe73
Certificate serial: 01A0D411D85246FB5145BAA569E90A218E22
Authority key identifier: 17:25:37:60:1A:31:69:74:04:92:2D:95:7E:74:45:0F:5A:9C:BE:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FyU3YBoxaXQEki2VfnRFD1qcvnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/b7xAfQ4mhjQn-3Nh9XnWc4pFZOw.roa
Signing time: Thu 24 Sep 2026 15:38:54 +0000
ROA not before: Thu 24 Sep 2026 15:38:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 81.17.160.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/FyU3YBoxaXQEki2VfnRFD1qcvnM.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/FyU3YBoxaXQEki2VfnRFD1qcvnM.mft
rsync://rpki.ripe.net/repository/DEFAULT/FyU3YBoxaXQEki2VfnRFD1qcvnM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:11:d8:52:46:fb:51:45:ba:a5:69:e9:0a:21:8e:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=172537601a31697404922d957e74450f5a9cbe73
Validity
Not Before: Sep 24 15:38:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6fbc407d0e26863427fb7361f579d6738a4564ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:23:33:a1:8d:a9:f1:1c:d6:f8:cb:80:2e:ea:
9e:13:ae:5e:d9:be:df:49:08:57:4b:29:73:dc:bc:
c9:52:04:15:73:e2:ac:cb:28:42:ef:f9:68:4c:85:
68:6c:ff:cd:f0:71:3b:d2:8a:8b:e3:46:23:b5:c2:
37:8b:64:0b:29:3c:22:58:b4:ba:2a:7a:e8:87:57:
40:1b:f0:6f:c8:ef:eb:cf:ab:2e:1c:c9:4b:7c:58:
4d:88:93:ee:76:6f:cf:4f:f8:a5:a4:b3:66:a9:31:
5b:28:d3:16:dc:8c:eb:9c:bc:0a:5e:19:87:4c:2c:
33:aa:4d:c2:90:23:5f:37:67:6e:4e:95:4d:ed:cd:
76:c5:72:3c:89:a2:bd:d9:83:22:27:ce:75:f9:3b:
66:e1:84:7e:79:2d:c1:8c:7d:e1:72:ba:9e:60:75:
0a:a8:8e:01:1b:97:6c:27:9c:fb:31:ae:62:5e:d0:
8d:e0:93:fe:f6:f1:fd:c3:06:2c:5c:eb:8e:a5:ca:
73:d2:8a:fd:67:43:a6:a6:c4:5a:ad:cf:d9:c1:d5:
10:2f:da:f2:4b:a5:29:48:46:32:a4:7d:03:08:31:
46:03:68:a2:29:f1:04:76:84:4d:5c:e6:54:04:e6:
23:2f:93:87:b9:16:0b:dd:24:dc:e0:9b:9d:28:33:
79:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:BC:40:7D:0E:26:86:34:27:FB:73:61:F5:79:D6:73:8A:45:64:EC
X509v3 Authority Key Identifier:
keyid:17:25:37:60:1A:31:69:74:04:92:2D:95:7E:74:45:0F:5A:9C:BE:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FyU3YBoxaXQEki2VfnRFD1qcvnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/b7xAfQ4mhjQn-3Nh9XnWc4pFZOw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/FyU3YBoxaXQEki2VfnRFD1qcvnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.17.160.0/21
Signature Algorithm: sha256WithRSAEncryption
3d:a0:5e:76:76:e8:ec:34:e3:84:03:f5:69:5a:4c:14:f6:fc:
16:3c:3c:88:ee:72:53:9c:16:01:42:f5:ce:30:c6:22:0c:ce:
06:9c:8d:ef:fd:1e:c0:8b:93:bc:b8:79:db:db:22:c0:8d:a5:
24:e1:1c:9d:34:e4:b8:61:69:bd:71:bb:ea:59:c8:c2:32:29:
57:dc:b8:43:5a:e6:f3:67:1f:cb:69:53:b5:db:14:84:6f:14:
6e:a6:59:c3:74:5f:ec:ac:24:8e:0e:6b:29:05:19:81:8b:20:
8f:24:3f:d7:06:e7:46:6e:28:bc:91:9b:58:41:90:05:1c:f5:
20:5f:f8:93:d2:7f:43:ed:95:31:25:5b:2e:7b:62:5a:7a:f0:
7b:d7:36:d4:fe:33:db:a5:89:bd:c9:df:ce:1c:58:f6:a1:f6:
e5:25:f1:bc:3d:01:24:dd:6e:ee:48:93:55:d5:81:11:c4:cb:
57:c2:0e:49:3a:51:94:73:43:a5:df:21:00:ff:7d:24:7c:13:
53:5b:9d:4f:bb:19:a6:4f:71:02:2d:b3:0f:01:a6:31:f3:58:
7c:46:0b:7e:b5:28:44:c4:92:fc:19:2d:70:cc:c5:c5:40:e8:
d0:f6:ed:d9:7d:ce:89:6c:15:bc:2f:e9:ba:6c:06:3d:73:ee:
00:a2:3b:e7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaDUEdhSRvtRRbqlaekKIY4iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3MjUzNzYwMWEzMTY5NzQwNDkyMmQ5NTdlNzQ0NTBmNWE5
Y2JlNzMwHhcNMjYwOTI0MTUzODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZmJjNDA3ZDBlMjY4NjM0MjdmYjczNjFmNTc5ZDY3MzhhNDU2NGVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyMzoY2p8RzW+MuALuqeE65e2b7f
SQhXSylz3LzJUgQVc+KsyyhC7/loTIVobP/N8HE70oqL40YjtcI3i2QLKTwiWLS6
Knroh1dAG/BvyO/rz6suHMlLfFhNiJPudm/PT/ilpLNmqTFbKNMW3IzrnLwKXhmH
TCwzqk3CkCNfN2duTpVN7c12xXI8iaK92YMiJ851+Ttm4YR+eS3BjH3hcrqeYHUK
qI4BG5dsJ5z7Ma5iXtCN4JP+9vH9wwYsXOuOpcpz0or9Z0OmpsRarc/ZwdUQL9ry
S6UpSEYypH0DCDFGA2iiKfEEdoRNXOZUBOYjL5OHuRYL3STc4JudKDN5iwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG+8QH0OJoY0J/tzYfV51nOKRWTsMB8GA1UdIwQY
MBaAFBclN2AaMWl0BJItlX50RQ9anL5zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnlVM1lCb3hhWFFFa2kyVmZuUkZEMXFjdm5NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny8yMTljYWUtMjY0ZC00NmE3LTllNjQt
ZTYwNGI2MWJlMGVhLzEvYjd4QWZRNG1oalFuLTNOaDlYbldjNHBGWk93LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny8yMTljYWUtMjY0ZC00NmE3LTllNjQtZTYwNGI2MWJlMGVh
LzEvRnlVM1lCb3hhWFFFa2kyVmZuUkZEMXFjdm5NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDURGgMA0G
CSqGSIb3DQEBCwUAA4IBAQA9oF52dujsNOOEA/VpWkwU9vwWPDyI7nJTnBYBQvXO
MMYiDM4GnI3v/R7Ai5O8uHnb2yLAjaUk4RydNOS4YWm9cbvqWcjCMilX3LhDWubz
Zx/LaVO12xSEbxRuplnDdF/srCSODmspBRmBiyCPJD/XBudGbii8kZtYQZAFHPUg
X/iT0n9D7ZUxJVsue2JaevB71zbU/jPbpYm9yd/OHFj2ofblJfG8PQEk3W7uSJNV
1YERxMtXwg5JOlGUc0Ol3yEA/30kfBNTW51PuxmmT3ECLbMPAaYx81h8Rgt+tShE
xJL8GS1wzMXFQOjQ9u3Zfc6JbBW8L+m6bAY9c+4Aojvn
-----END CERTIFICATE-----
Generated at Sun Sep 27 08:27:00 2026 by rpki-client