Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/m6WXO2BEjpPgg39tH-InRI12QKM.roa
File: m6WXO2BEjpPgg39tH-InRI12QKM.roa (raw, json)
Hash identifier: 3lJMOWMWx6BAqOI7aarfVA+iLDOaB07KCDZYO9sNFEM=
Subject key identifier: 9B:A5:97:3B:60:44:8E:93:E0:83:7F:6D:1F:E2:27:44:8D:76:40:A3
Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial: 01A0F390FA693DF0579BD88E4070FEC8E56A
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/m6WXO2BEjpPgg39tH-InRI12QKM.roa
Signing time: Wed 30 Sep 2026 18:25:59 +0000
ROA not before: Wed 30 Sep 2026 18:25:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216127
IP address blocks: 77.83.244.0/24 maxlen: 24
95.81.72.0/24 maxlen: 24
95.81.74.0/24 maxlen: 24
95.81.75.0/24 maxlen: 24
160.20.158.0/24 maxlen: 24
160.20.159.0/24 maxlen: 24
185.78.76.0/24 maxlen: 24
185.100.157.0/24 maxlen: 24
185.177.239.0/24 maxlen: 24
193.221.200.0/24 maxlen: 24
193.221.201.0/24 maxlen: 24
193.221.202.0/24 maxlen: 24
217.145.226.0/24 maxlen: 24
217.145.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 15:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f3:90:fa:69:3d:f0:57:9b:d8:8e:40:70:fe:c8:e5:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
Validity
Not Before: Sep 30 18:25:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9ba5973b60448e93e0837f6d1fe227448d7640a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ed:71:7c:f0:6f:35:87:71:4b:f9:9c:64:26:
96:e3:ca:01:00:92:0f:33:a5:9a:40:b0:71:38:00:
e1:40:b3:f1:12:20:1e:4f:f2:13:dd:64:6b:eb:d5:
34:95:86:e7:36:c2:21:78:00:ee:a5:46:7f:1b:d2:
2f:1c:3e:96:55:cd:4b:85:26:bd:6e:42:36:df:3d:
37:a1:f1:77:f0:5a:35:03:2e:21:69:5d:c9:bd:c2:
1c:c2:de:be:97:86:77:63:a6:08:7a:f4:e6:78:1a:
27:71:03:99:2e:06:d0:03:dd:19:8c:33:c4:a4:b8:
0b:d5:9a:4f:82:7e:73:12:cb:59:bb:dc:d2:bb:20:
4e:35:77:ce:8b:ef:1d:c5:ec:71:5e:03:98:02:f0:
91:02:b8:ce:c8:0e:8b:84:84:70:54:77:73:6b:6f:
c8:a8:fa:fd:49:30:24:8b:6a:b8:ad:83:19:29:88:
16:24:12:ed:ad:76:d1:6c:5e:a0:a6:6d:17:85:36:
1a:ce:8a:2f:cf:d0:fd:11:eb:19:e6:55:3c:9a:6a:
6b:ac:b3:65:87:42:12:82:b6:a1:d4:02:32:40:16:
5f:9b:51:b4:5f:56:1a:cb:a4:6c:af:1b:38:e8:f4:
52:f8:56:81:cf:6c:39:4f:ab:05:30:0e:5e:e4:95:
f4:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:A5:97:3B:60:44:8E:93:E0:83:7F:6D:1F:E2:27:44:8D:76:40:A3
X509v3 Authority Key Identifier:
keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/m6WXO2BEjpPgg39tH-InRI12QKM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.244.0/24
95.81.72.0/24
95.81.74.0/23
160.20.158.0/23
185.78.76.0/24
185.100.157.0/24
185.177.239.0/24
193.221.200.0-193.221.202.255
217.145.226.0/23
Signature Algorithm: sha256WithRSAEncryption
4a:72:90:8b:28:59:7d:96:36:9a:ec:79:ae:f0:51:4d:bb:86:
d9:78:de:d1:5d:6e:7c:79:e5:4f:86:f0:e7:40:92:97:19:56:
28:9f:7c:56:6e:4b:ae:fd:17:d4:31:4b:cb:45:e6:fd:cb:f5:
5a:f4:8c:5a:b8:11:8e:c6:88:45:8d:aa:3e:41:57:8d:73:10:
7c:d6:b9:89:6b:d2:81:06:07:bf:b0:5c:3e:39:ea:75:9c:1b:
11:a1:0c:fd:18:9d:f3:e5:75:52:43:be:89:c1:1c:d5:fa:d3:
ba:4d:e4:79:9b:f0:a2:21:d8:a4:8d:3b:de:16:a1:42:bd:04:
c3:a8:92:2d:de:5f:02:8c:17:d4:c3:a8:9e:9e:ed:78:36:0a:
14:95:ef:f3:b5:59:17:31:2f:bc:e5:4b:9d:9d:40:6f:13:ed:
19:3c:71:6b:55:dd:0f:19:70:80:b1:3a:fa:90:fe:ad:16:8a:
a7:b3:a4:a8:a3:90:95:ac:08:8d:89:6b:4b:0d:6f:f1:b1:54:
95:56:5b:e3:9d:8f:f6:b9:fc:e6:9c:e1:37:99:6f:8e:ae:ef:
bb:91:10:c8:b9:d9:ab:af:a5:6c:ec:a8:da:d7:7f:18:f0:a1:
fb:c0:f0:2c:b2:d0:cc:a6:92:fa:a3:65:07:c4:2e:19:a7:43:
95:db:f3:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 02:04:20 2026 by rpki-client