Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Y04JAjUyhaFVYJzFwmdWGnzJII0.roa
File: Y04JAjUyhaFVYJzFwmdWGnzJII0.roa (raw, json)
Hash identifier: ZDgI5MTK5Nv5LUJVCbA5smOAMQQIqmYlCLd8s+1FCec=
Subject key identifier: 63:4E:09:02:35:32:85:A1:55:60:9C:C5:C2:67:56:1A:7C:C9:20:8D
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F236923F8C943FFD59AE9C653BA6A2223
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Y04JAjUyhaFVYJzFwmdWGnzJII0.roa
Signing time: Thu 02 Jul 2026 15:18:40 +0000
ROA not before: Thu 02 Jul 2026 15:18:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401783
IP address blocks: 77.107.99.0/24 maxlen: 24
89.213.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:23:f8:c9:43:ff:d5:9a:e9:c6:53:ba:6a:22:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 2 15:18:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=634e0902353285a155609cc5c267561a7cc9208d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2f:39:60:b0:ae:02:b9:9f:5d:9e:5a:c2:99:
01:6e:23:eb:ab:d7:b8:19:0a:fa:4f:83:73:ca:31:
92:17:5a:a1:9a:5b:f9:ce:89:1e:d1:59:03:5a:bd:
83:88:b2:47:8f:51:d9:84:96:5e:79:a2:7e:92:ea:
95:69:a3:e4:6e:44:5d:10:63:48:48:42:45:0f:32:
eb:7f:f5:40:f1:da:4b:2d:b4:24:fd:dd:b5:84:4b:
c4:6f:27:fb:bb:14:a5:ae:20:b4:b7:d2:93:61:0c:
f8:1a:ba:38:8f:7f:34:86:2c:c6:3e:ce:78:41:db:
6c:18:d4:95:7d:d5:0b:b1:75:aa:37:da:a3:13:5b:
25:f0:bd:22:9a:89:80:69:54:9f:05:cd:09:72:56:
e8:56:5b:fa:63:18:29:58:7a:9b:85:fb:b1:11:4f:
40:fe:b0:5e:59:e6:10:8f:9c:2d:66:1b:53:6d:2c:
d4:76:81:89:3b:22:f5:c5:93:b6:6f:28:fb:56:40:
cb:12:d0:e2:ac:94:e5:5b:9b:69:80:2c:66:23:94:
ce:fb:48:0d:74:0d:74:be:a1:d7:1f:89:46:41:a6:
ef:ea:71:05:e1:c6:ae:44:15:0c:d7:1e:4b:0c:c6:
a7:b1:c8:67:11:e4:55:54:94:36:3d:2b:db:be:7e:
3c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:4E:09:02:35:32:85:A1:55:60:9C:C5:C2:67:56:1A:7C:C9:20:8D
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Y04JAjUyhaFVYJzFwmdWGnzJII0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.107.99.0/24
89.213.103.0/24
Signature Algorithm: sha256WithRSAEncryption
52:55:5d:56:e0:54:e6:b7:a9:26:80:3f:2c:80:86:7c:1b:8a:
7d:19:90:9b:20:4f:08:7d:c8:05:2e:70:63:f2:d0:64:80:b6:
ce:34:b7:72:03:00:ee:f4:f0:a4:6e:ba:fe:47:08:d9:2d:6d:
9f:75:c2:45:b2:2a:ca:b7:cd:26:bd:14:9e:98:10:05:32:1a:
13:67:41:31:67:3c:f7:ae:50:3f:44:17:3b:21:17:5d:8d:f3:
e7:64:3c:78:66:7e:f4:fc:b0:df:34:58:20:1e:dd:93:8d:bb:
aa:e2:f2:cc:25:ea:a2:6d:f9:6e:64:ee:59:ea:99:7d:e2:ac:
0d:67:1d:ba:e0:ce:00:68:62:57:fa:d9:4c:83:ee:3f:ca:82:
e7:2d:25:a7:c8:a6:8b:d8:86:68:ff:6e:55:91:ab:b4:ed:96:
a6:68:67:ed:30:94:85:bb:55:24:27:67:18:e0:d7:d3:07:20:
9e:1d:3a:03:47:d3:6e:b9:0c:03:72:ec:bb:a5:1b:0a:07:5e:
02:da:79:bf:08:a4:96:9f:8e:35:02:7e:5e:b7:08:b8:7f:40:
82:06:d6:25:9c:88:28:ce:60:29:0a:ad:c7:fb:ee:1a:d0:d4:
70:55:b8:44:a9:6f:08:26:53:10:da:54:00:62:f8:c3:3d:ca:
3c:ce:d1:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 18:22:42 2026 by rpki-client