Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/000d6b-0ffc-46de-a2a6-fac16ed10a4a/1/2ySzXXxIAMmvP-kf7e_CfT3TUeI.roa
File: 2ySzXXxIAMmvP-kf7e_CfT3TUeI.roa (raw, json)
Hash identifier: a3t6SRnrWmBfVlWLIG8w/Hd547YNd8Sh7p0TlNZoH7E=
Subject key identifier: DB:24:B3:5D:7C:48:00:C9:AF:3F:E9:1F:ED:EF:C2:7D:3D:D3:51:E2
Certificate issuer: /CN=dbc92025adb368cb9532098986077079b01c1655
Certificate serial: 01A0F414D042C9FA3220158283B982E0037E
Authority key identifier: DB:C9:20:25:AD:B3:68:CB:95:32:09:89:86:07:70:79:B0:1C:16:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28kgJa2zaMuVMgmJhgdwebAcFlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/000d6b-0ffc-46de-a2a6-fac16ed10a4a/1/2ySzXXxIAMmvP-kf7e_CfT3TUeI.roa
Signing time: Wed 30 Sep 2026 20:49:59 +0000
ROA not before: Wed 30 Sep 2026 20:49:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200477
IP address blocks: 77.235.32.0/24 maxlen: 24
77.235.33.0/24 maxlen: 24
77.235.35.0/24 maxlen: 24
77.235.36.0/24 maxlen: 24
77.235.39.0/24 maxlen: 24
77.235.49.0/24 maxlen: 24
77.235.51.0/24 maxlen: 24
77.235.52.0/24 maxlen: 24
77.235.55.0/24 maxlen: 24
77.235.59.0/24 maxlen: 24
185.140.165.0/24 maxlen: 24
2a07:340::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/000d6b-0ffc-46de-a2a6-fac16ed10a4a/1/28kgJa2zaMuVMgmJhgdwebAcFlU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/000d6b-0ffc-46de-a2a6-fac16ed10a4a/1/28kgJa2zaMuVMgmJhgdwebAcFlU.mft
rsync://rpki.ripe.net/repository/DEFAULT/28kgJa2zaMuVMgmJhgdwebAcFlU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Nov 2026 23:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f4:14:d0:42:c9:fa:32:20:15:82:83:b9:82:e0:03:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbc92025adb368cb9532098986077079b01c1655
Validity
Not Before: Sep 30 20:49:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=db24b35d7c4800c9af3fe91fedefc27d3dd351e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6e:b3:9a:0e:47:bd:76:33:a4:2c:60:6b:b6:
61:2e:ce:a0:cd:f3:fb:1b:8d:12:b5:7e:85:4a:d6:
21:ca:a2:c6:ea:11:a6:2b:10:0b:d8:88:3d:08:06:
d0:f9:3c:3c:c9:7e:e0:18:e7:73:8d:da:3c:7c:89:
03:b8:f3:a0:e8:8a:22:90:7b:f8:bd:76:7a:53:59:
6c:de:16:2f:32:2e:42:1a:b0:09:12:19:17:a1:52:
c8:a2:9a:e8:90:83:18:16:e6:4f:cc:e7:19:47:99:
da:51:22:ff:25:ab:f0:de:01:87:86:8e:bc:87:d5:
2b:50:65:3d:7a:dc:91:e9:38:55:5a:ae:e1:5e:f6:
77:30:40:71:48:64:0a:76:08:fc:9a:72:2a:29:d7:
31:59:e4:8e:17:6c:87:26:97:18:87:18:29:91:df:
09:92:2b:6f:88:91:7e:ba:ea:7c:8d:0f:d9:86:11:
c6:0e:25:a3:03:f6:fa:17:7a:04:8f:32:11:ab:f9:
98:c6:30:09:c5:c3:fb:04:b1:8c:69:2c:c4:91:ab:
94:42:83:c3:92:93:b9:96:8f:86:67:c5:b4:10:f8:
5c:ae:ae:e3:4f:f0:1a:df:5a:e8:f1:a3:5f:7a:23:
6d:98:86:e3:88:f5:75:79:01:b8:cc:d1:2f:82:3a:
84:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:24:B3:5D:7C:48:00:C9:AF:3F:E9:1F:ED:EF:C2:7D:3D:D3:51:E2
X509v3 Authority Key Identifier:
keyid:DB:C9:20:25:AD:B3:68:CB:95:32:09:89:86:07:70:79:B0:1C:16:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28kgJa2zaMuVMgmJhgdwebAcFlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/000d6b-0ffc-46de-a2a6-fac16ed10a4a/1/2ySzXXxIAMmvP-kf7e_CfT3TUeI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/000d6b-0ffc-46de-a2a6-fac16ed10a4a/1/28kgJa2zaMuVMgmJhgdwebAcFlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.235.32.0/23
77.235.35.0-77.235.36.255
77.235.39.0/24
77.235.49.0/24
77.235.51.0-77.235.52.255
77.235.55.0/24
77.235.59.0/24
185.140.165.0/24
IPv6:
2a07:340::/32
Signature Algorithm: sha256WithRSAEncryption
42:8a:af:1f:a3:20:f3:0b:4d:fe:54:bc:14:d9:76:17:aa:14:
31:11:e8:8a:42:af:ec:42:67:d6:c7:5d:89:c4:7e:51:b6:c0:
3f:af:64:7a:b3:4c:fa:a2:66:b9:5c:e5:27:84:68:b0:44:68:
6a:de:9b:d4:c4:66:72:32:3e:91:70:00:a6:86:47:73:f0:8e:
8f:96:a3:3b:e7:1b:29:b0:dd:ce:8b:1b:f6:cf:c0:f3:51:95:
46:9e:08:1d:5d:15:60:e2:c6:22:8e:2b:1a:52:da:7e:5e:93:
21:82:84:f9:f3:69:c9:4b:1f:6f:d4:76:e5:e7:cd:0a:aa:b8:
75:ce:ca:2a:e2:13:fb:d8:08:84:e1:6f:f9:25:07:bf:a1:35:
0c:3a:21:7d:69:6b:2d:37:fe:98:a4:94:be:51:87:48:3a:e1:
2d:bf:f3:14:0a:36:f4:ef:79:77:00:e3:c0:4a:5f:f5:1c:5d:
8f:35:d5:e1:38:8c:60:24:8d:96:06:2d:e7:a2:0f:7d:2f:54:
20:4f:c1:fd:ca:03:ca:11:7b:4e:1a:63:2c:4b:e1:77:e1:fe:
a7:94:3a:6d:5f:19:e8:8b:80:53:37:84:3f:42:74:31:34:a9:
a1:06:6b:7d:e0:38:13:77:7b:4a:ba:11:10:a1:ba:c2:b0:a9:
ba:af:95:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 04:14:36 2026 by rpki-client