Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/000d6b-0ffc-46de-a2a6-fac16ed10a4a/1/YmpUQsKRqD4AX2JDKXONqEy4OUc.roa
File: YmpUQsKRqD4AX2JDKXONqEy4OUc.roa (raw, json)
Hash identifier: CUbgFiyC5v44xgVPVpw5zZbv2WHebTNf1FSrJBghQuE=
Subject key identifier: 62:6A:54:42:C2:91:A8:3E:00:5F:62:43:29:73:8D:A8:4C:B8:39:47
Certificate issuer: /CN=dbc92025adb368cb9532098986077079b01c1655
Certificate serial: 01A06BF876B7143883A13ED7C5D4284C3370
Authority key identifier: DB:C9:20:25:AD:B3:68:CB:95:32:09:89:86:07:70:79:B0:1C:16:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28kgJa2zaMuVMgmJhgdwebAcFlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/000d6b-0ffc-46de-a2a6-fac16ed10a4a/1/YmpUQsKRqD4AX2JDKXONqEy4OUc.roa
Signing time: Fri 04 Sep 2026 10:30:40 +0000
ROA not before: Fri 04 Sep 2026 10:30:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60781
IP address blocks: 77.235.34.0/24 maxlen: 24
77.235.37.0/24 maxlen: 24
77.235.38.0/24 maxlen: 24
77.235.40.0/24 maxlen: 24
77.235.41.0/24 maxlen: 24
77.235.42.0/24 maxlen: 24
77.235.43.0/24 maxlen: 24
77.235.44.0/24 maxlen: 24
77.235.45.0/24 maxlen: 24
77.235.46.0/24 maxlen: 24
77.235.47.0/24 maxlen: 24
77.235.48.0/24 maxlen: 24
77.235.50.0/24 maxlen: 24
77.235.53.0/24 maxlen: 24
77.235.54.0/24 maxlen: 24
77.235.56.0/24 maxlen: 24
77.235.57.0/24 maxlen: 24
77.235.58.0/24 maxlen: 24
77.235.60.0/24 maxlen: 24
77.235.61.0/24 maxlen: 24
77.235.62.0/24 maxlen: 24
77.235.63.0/24 maxlen: 24
185.140.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/000d6b-0ffc-46de-a2a6-fac16ed10a4a/1/28kgJa2zaMuVMgmJhgdwebAcFlU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/000d6b-0ffc-46de-a2a6-fac16ed10a4a/1/28kgJa2zaMuVMgmJhgdwebAcFlU.mft
rsync://rpki.ripe.net/repository/DEFAULT/28kgJa2zaMuVMgmJhgdwebAcFlU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Sep 2026 02:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6b:f8:76:b7:14:38:83:a1:3e:d7:c5:d4:28:4c:33:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbc92025adb368cb9532098986077079b01c1655
Validity
Not Before: Sep 4 10:30:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=626a5442c291a83e005f624329738da84cb83947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2f:4f:bf:6e:f2:f9:4e:29:14:e6:59:3e:15:
ec:87:57:28:84:c2:ce:6a:1c:18:05:a7:6d:c0:92:
d7:2f:20:aa:7c:15:4e:b6:75:81:ef:67:b5:15:f2:
e2:08:64:00:19:e9:de:fc:97:fc:59:5d:40:7c:94:
a9:db:52:f3:c3:25:b1:de:bd:a9:9a:82:0e:d8:b3:
73:37:ed:41:64:4f:33:7b:6e:98:c4:0c:4a:ee:f8:
7b:89:5c:bb:ef:e3:c5:ff:48:46:6e:ba:19:35:fa:
22:78:35:5b:74:ed:f6:b2:e6:ae:42:a2:0a:93:5b:
02:2d:65:b2:5d:78:ab:07:bb:18:87:5f:ca:f4:32:
42:e8:0a:7e:9f:e5:60:ba:47:99:c4:6e:21:39:69:
02:12:3c:ba:68:44:4c:6e:3d:bd:e3:e7:d4:0a:03:
e9:bb:ca:0f:c6:f8:b7:a9:be:da:f8:02:4e:14:fa:
c5:99:23:79:53:a3:ce:7b:4e:f0:61:43:35:8c:84:
27:03:8e:8e:de:59:7c:b1:c7:7c:21:d8:e9:8a:58:
2c:9e:de:31:16:b9:92:4e:f5:80:71:66:49:11:7a:
73:bd:f2:83:9a:da:16:b8:9e:f9:f9:31:27:43:ab:
4a:1f:48:62:18:a2:1d:f2:96:2f:0e:c3:01:7d:d9:
ea:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:6A:54:42:C2:91:A8:3E:00:5F:62:43:29:73:8D:A8:4C:B8:39:47
X509v3 Authority Key Identifier:
keyid:DB:C9:20:25:AD:B3:68:CB:95:32:09:89:86:07:70:79:B0:1C:16:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28kgJa2zaMuVMgmJhgdwebAcFlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/000d6b-0ffc-46de-a2a6-fac16ed10a4a/1/YmpUQsKRqD4AX2JDKXONqEy4OUc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/000d6b-0ffc-46de-a2a6-fac16ed10a4a/1/28kgJa2zaMuVMgmJhgdwebAcFlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.235.34.0/24
77.235.37.0-77.235.38.255
77.235.40.0-77.235.48.255
77.235.50.0/24
77.235.53.0-77.235.54.255
77.235.56.0-77.235.58.255
77.235.60.0/22
185.140.164.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:39:43:60:28:49:22:ee:7b:cb:81:df:0f:cf:11:a7:14:66:
f7:8a:40:6e:fc:2d:9d:31:b9:0f:01:90:e1:87:6b:6d:98:a3:
6f:ee:09:43:f1:d6:29:b9:2d:89:38:78:3b:c1:19:73:e4:36:
50:12:e7:ec:5e:21:4e:19:23:ab:4d:59:d3:ac:9c:b3:71:b2:
7f:20:fb:3d:76:df:fc:6b:58:5d:20:05:68:4d:82:12:ed:2a:
c9:e5:a2:71:a2:63:07:02:5f:d5:e0:8f:ed:7c:d8:28:f6:2f:
dd:90:82:02:6d:e6:ad:a6:3e:c2:67:cc:6e:76:ed:c1:02:a6:
e0:b7:11:db:85:f6:48:f3:83:f7:96:e1:99:eb:d5:1a:00:a8:
a4:a3:e1:a9:6f:78:0e:2e:c3:54:c4:4a:f4:e5:1b:5a:9e:cd:
2c:32:0b:59:7c:3c:9b:05:3f:6f:7a:27:02:ed:a2:a2:bf:83:
8d:89:66:55:92:81:11:f2:d1:10:19:84:0f:49:b9:b0:8a:38:
00:b8:f2:31:14:22:e4:5d:d9:21:2f:f0:05:c7:64:ca:df:af:
92:5b:d4:1b:a8:25:e1:ab:8f:a3:f0:be:e2:01:cb:2c:54:3b:
d6:3f:b4:91:25:f8:72:bb:31:be:71:2b:c0:37:f4:92:55:2d:
e7:61:8e:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 10:19:30 2026 by rpki-client