Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/000d6b-0ffc-46de-a2a6-fac16ed10a4a/1/UNeNooSVFPm5iZtAUwJFPNT3eCE.roa
File: UNeNooSVFPm5iZtAUwJFPNT3eCE.roa (raw, json)
Hash identifier: rYwIwy4zW2sUGidEjwd4jHr8jHUjbde9qMuvf9HTOnQ=
Subject key identifier: 50:D7:8D:A2:84:95:14:F9:B9:89:9B:40:53:02:45:3C:D4:F7:78:21
Certificate issuer: /CN=dbc92025adb368cb9532098986077079b01c1655
Certificate serial: 019FE0B428D7E778764CE38D5E0BBA42CB4A
Authority key identifier: DB:C9:20:25:AD:B3:68:CB:95:32:09:89:86:07:70:79:B0:1C:16:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28kgJa2zaMuVMgmJhgdwebAcFlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/000d6b-0ffc-46de-a2a6-fac16ed10a4a/1/UNeNooSVFPm5iZtAUwJFPNT3eCE.roa
Signing time: Sat 08 Aug 2026 09:28:51 +0000
ROA not before: Sat 08 Aug 2026 09:28:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200477
IP address blocks: 77.235.32.0/24 maxlen: 24
77.235.33.0/24 maxlen: 24
77.235.35.0/24 maxlen: 24
77.235.36.0/24 maxlen: 24
77.235.39.0/24 maxlen: 24
77.235.49.0/24 maxlen: 24
77.235.51.0/24 maxlen: 24
77.235.52.0/24 maxlen: 24
77.235.55.0/24 maxlen: 24
77.235.59.0/24 maxlen: 24
185.140.165.0/24 maxlen: 24
2a07:340::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/000d6b-0ffc-46de-a2a6-fac16ed10a4a/1/28kgJa2zaMuVMgmJhgdwebAcFlU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/000d6b-0ffc-46de-a2a6-fac16ed10a4a/1/28kgJa2zaMuVMgmJhgdwebAcFlU.mft
rsync://rpki.ripe.net/repository/DEFAULT/28kgJa2zaMuVMgmJhgdwebAcFlU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 22:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:e0:b4:28:d7:e7:78:76:4c:e3:8d:5e:0b:ba:42:cb:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbc92025adb368cb9532098986077079b01c1655
Validity
Not Before: Aug 8 09:28:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=50d78da2849514f9b9899b405302453cd4f77821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7b:ad:57:fb:ab:d5:2a:1f:f7:62:fe:ca:80:
ed:1f:ae:32:31:ca:7a:27:e2:e1:23:0c:72:1b:dd:
7c:f8:cc:68:86:25:a5:e9:ed:f7:2c:79:9d:85:0f:
12:86:76:b2:a6:92:fe:20:61:b2:6e:2f:c8:d3:fa:
fe:32:d4:02:e2:c3:32:22:33:61:86:61:f9:fd:53:
dc:97:25:07:aa:01:2a:f0:63:19:5a:bf:15:9c:49:
f6:e6:d9:ac:b6:b9:ba:75:31:aa:f5:22:d9:76:77:
78:17:65:0c:97:23:e1:8d:a8:c2:58:6f:d1:20:f1:
78:2d:45:f2:df:3a:e6:2a:2d:c6:ed:8d:3a:3f:86:
75:61:8c:86:de:1b:e4:63:5a:fa:9b:81:6c:74:95:
ed:cd:31:8a:d3:7d:0a:5e:9e:04:c1:ca:d4:e5:21:
49:51:96:dd:f8:f5:22:d3:77:47:aa:bf:26:7b:90:
da:f4:84:25:ed:cd:18:4d:a7:75:1d:90:d6:75:17:
57:68:af:d2:82:b7:b3:cb:ab:79:e7:b8:c2:db:0c:
2c:17:0a:a8:c8:58:d3:c2:2e:24:26:e9:91:cc:79:
29:ce:da:7d:e8:eb:86:af:17:42:fd:55:fc:42:9a:
71:40:86:fc:e4:c4:5e:20:b2:e1:31:c7:1b:50:9d:
3a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:D7:8D:A2:84:95:14:F9:B9:89:9B:40:53:02:45:3C:D4:F7:78:21
X509v3 Authority Key Identifier:
keyid:DB:C9:20:25:AD:B3:68:CB:95:32:09:89:86:07:70:79:B0:1C:16:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28kgJa2zaMuVMgmJhgdwebAcFlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/000d6b-0ffc-46de-a2a6-fac16ed10a4a/1/UNeNooSVFPm5iZtAUwJFPNT3eCE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/000d6b-0ffc-46de-a2a6-fac16ed10a4a/1/28kgJa2zaMuVMgmJhgdwebAcFlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.235.32.0/23
77.235.35.0-77.235.36.255
77.235.39.0/24
77.235.49.0/24
77.235.51.0-77.235.52.255
77.235.55.0/24
77.235.59.0/24
185.140.165.0/24
IPv6:
2a07:340::/29
Signature Algorithm: sha256WithRSAEncryption
2c:58:5f:bb:10:34:96:d8:88:97:45:59:3c:94:95:55:5e:49:
a4:53:02:fe:ad:a1:47:4c:4e:ab:12:ec:e6:dc:45:31:6b:38:
5f:ff:3a:e5:6f:02:3a:3c:91:40:d8:01:c9:a5:89:5d:a5:a7:
34:7c:32:30:4c:73:10:db:89:af:40:d3:1f:99:5a:c8:74:0f:
34:4c:a2:86:01:b9:8f:50:ed:22:94:74:48:71:7f:90:a1:1b:
9f:9f:26:80:e5:8e:2e:c3:75:ec:a2:48:5d:1b:14:f5:ce:e3:
06:a2:51:0e:f7:1a:83:4b:1a:47:2a:27:a5:a2:e5:32:49:be:
e2:40:2e:3b:ed:02:37:06:01:7c:fc:77:d1:be:a8:8c:1e:1d:
a2:29:30:cb:1b:3e:36:b9:64:70:dc:00:84:f9:aa:b0:60:33:
7e:50:8d:81:3f:74:d5:0b:85:8e:af:a6:b3:58:83:20:20:89:
28:af:20:bc:fc:48:bc:bb:f9:7f:d6:df:d2:32:29:d2:76:f5:
3c:4a:c9:a0:49:8d:dd:3d:6c:5d:a5:c8:d4:59:7f:ae:c0:72:
aa:df:f0:de:9b:8a:e7:35:25:9b:cc:c0:88:1b:87:27:6d:ee:
fa:6a:0c:c1:f3:9b:93:6c:1d:af:df:ac:6f:be:c8:63:8c:24:
76:ed:cb:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 09:02:33 2026 by rpki-client