Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/dueCXYNcF-POwww1SeqmkvTvQfE.roa
File: dueCXYNcF-POwww1SeqmkvTvQfE.roa (raw, json)
Hash identifier: r+0QIl7pa6dXrtrsAw/kbZCUtrWjLzE48etRrYzcEK8=
Subject key identifier: 76:E7:82:5D:83:5C:17:E3:CE:C3:0C:35:49:EA:A6:92:F4:EF:41:F1
Certificate issuer: /CN=2eeec5231d212b310579d78fc41479ca6ec2aa07
Certificate serial: 01A0326E5A4A86D84256B642F7D2595F3A79
Authority key identifier: 2E:EE:C5:23:1D:21:2B:31:05:79:D7:8F:C4:14:79:CA:6E:C2:AA:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lu7FIx0hKzEFedePxBR5ym7Cqgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/dueCXYNcF-POwww1SeqmkvTvQfE.roa
Signing time: Mon 24 Aug 2026 06:21:27 +0000
ROA not before: Mon 24 Aug 2026 06:21:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58002
IP address blocks: 77.247.232.0/21 maxlen: 21
92.241.0.0/19 maxlen: 24
92.241.0.0/21 maxlen: 21
92.241.8.0/22 maxlen: 22
92.241.12.0/23 maxlen: 23
92.241.14.0/24 maxlen: 24
92.241.18.0/24 maxlen: 24
2a00:c9c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/Lu7FIx0hKzEFedePxBR5ym7Cqgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/Lu7FIx0hKzEFedePxBR5ym7Cqgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lu7FIx0hKzEFedePxBR5ym7Cqgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:32:6e:5a:4a:86:d8:42:56:b6:42:f7:d2:59:5f:3a:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2eeec5231d212b310579d78fc41479ca6ec2aa07
Validity
Not Before: Aug 24 06:21:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=76e7825d835c17e3cec30c3549eaa692f4ef41f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:78:ea:68:24:a1:17:3b:c2:70:36:cb:9f:2e:
a2:e0:18:23:c0:26:4b:49:2b:d1:cb:79:aa:bc:d6:
a4:5b:74:4b:f6:98:0c:10:be:05:cb:5f:fd:59:3b:
36:84:e8:0c:ec:0f:6f:7d:9f:4f:d4:6b:0a:46:f9:
d0:97:1a:73:f9:1c:ab:89:bf:a0:87:50:16:c3:d7:
5f:24:f4:b3:78:44:61:5d:ad:b4:dc:a3:aa:f2:25:
64:cd:a1:c5:85:e4:e3:43:66:63:8f:a3:43:bd:c0:
be:33:2d:f2:7f:69:3a:61:0f:ca:a9:01:4d:8b:ae:
0d:36:69:d5:19:f7:ca:52:a9:bd:1a:bf:0a:8f:fe:
02:14:3c:41:f4:1c:0c:3d:86:f0:87:11:86:f1:02:
4d:7e:7d:fe:4e:ba:e4:c4:8b:6d:50:74:73:de:bf:
15:6e:e6:9c:9e:2f:1e:bf:02:8e:9e:80:46:f3:e2:
d7:44:88:5f:fa:2d:bb:7f:2f:bd:bd:44:10:4f:f7:
68:1a:b1:24:97:3a:0a:e6:cd:ee:a3:05:98:ea:d1:
86:c9:6a:a9:64:14:a0:c1:30:54:a9:35:78:61:91:
21:f8:22:db:9d:42:aa:06:be:b3:79:ec:02:4b:8a:
46:d9:57:22:a1:9a:01:8b:e1:de:37:92:f3:d5:2b:
66:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:E7:82:5D:83:5C:17:E3:CE:C3:0C:35:49:EA:A6:92:F4:EF:41:F1
X509v3 Authority Key Identifier:
keyid:2E:EE:C5:23:1D:21:2B:31:05:79:D7:8F:C4:14:79:CA:6E:C2:AA:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lu7FIx0hKzEFedePxBR5ym7Cqgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/dueCXYNcF-POwww1SeqmkvTvQfE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/Lu7FIx0hKzEFedePxBR5ym7Cqgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.247.232.0/21
92.241.0.0/19
IPv6:
2a00:c9c0::/32
Signature Algorithm: sha256WithRSAEncryption
87:0b:21:22:cd:13:d2:c0:5b:f6:3b:5e:d6:19:f5:40:c7:b9:
36:5e:fb:45:3f:06:e6:00:09:3f:e3:f0:6c:d6:d8:15:7d:16:
56:8a:66:8d:b0:45:69:41:fa:dd:62:d7:fa:00:4e:de:83:12:
e6:52:e3:f8:28:8e:1a:4c:63:75:4f:37:70:45:db:87:1d:f8:
f0:bc:8a:ec:34:57:48:bb:16:eb:02:62:53:df:22:18:2a:37:
17:bb:f5:ef:72:ed:12:87:ad:fd:cc:ed:f6:97:c3:ef:0e:e8:
7f:59:1c:8d:fc:bc:fa:28:85:35:72:6c:c1:a1:69:c6:0b:40:
c2:fb:f3:5f:0a:c4:2e:fa:eb:0d:87:65:a8:71:93:e9:89:f6:
fb:cf:34:3d:6a:93:ea:5c:61:b5:56:d9:5e:a3:7b:64:90:b3:
d8:0a:35:92:7d:57:8e:b9:93:bc:88:de:a6:66:c7:59:3c:7e:
59:da:f9:57:45:87:81:ab:1e:35:16:e9:71:1d:ab:c2:24:af:
4c:1f:db:4f:1b:06:1c:4f:da:09:c4:77:f6:11:04:1c:63:e7:
20:2d:3e:5b:96:d3:c6:c7:3d:f9:f0:58:64:7b:c9:ea:8b:86:
df:d3:c3:39:cb:86:d7:40:12:f3:1e:f7:3a:a4:db:11:6f:07:
bf:bc:ca:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 05:04:57 2026 by rpki-client